last executing test programs: 4m30.451693342s ago: executing program 32 (id=237): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x800}}], 0x18}, 0x80) (async, rerun: 64) munmap(&(0x7f00004b4000/0x2000)=nil, 0x2000) (async, rerun: 64) r1 = socket$nl_audit(0x10, 0x3, 0x9) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001d80)={0x28, r4, 0xb094f4ca39c97ca1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b0704063474", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_cmd={0x47, 0x2, 0x20000004, 0x3ff, 0x3f, 0x7, 0x1, 0x3, 0x6, 0x3, 0x101, 0x142f, 0x8, 0x3, 0x0, 0xa, [0x4000000, 0xff]}}) (rerun: 64) r6 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x82) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, 0x0) (async, rerun: 32) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) (async, rerun: 32) timer_create(0x1, &(0x7f00000001c0)={0x0, 0xf}, &(0x7f0000000240)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280), 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r10 = ioctl$USERFAULTFD_IOC_NEW(r9, 0xaa00) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r11, 0x4) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000440)={"a87767102a20ba1c15849e0570a5e936", 0x0, 0x0, {0x0, 0x9b7f}, {0x61, 0x5}, 0x2, [0x9, 0xce, 0x10001, 0x80000001, 0xe958, 0x5, 0xaa93, 0x6, 0xc, 0x5, 0x7, 0x8, 0x0, 0x1ff, 0x700, 0xf8a]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001ec0)={{r6}, r12, 0x4, @inherit={0x88, &(0x7f0000000540)={0x0, 0x8, 0x7, 0x3, {0x26, 0x4, 0x3, 0x6, 0xb}, [0xf98, 0x8, 0x5, 0x45, 0xd, 0x5c, 0x1d0, 0x2]}}, @subvolid=0xccf}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) r13 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r13, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1}, &(0x7f00000001c0)=0x8) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$UFFDIO_UNREGISTER(r10, 0x8010aa01, &(0x7f0000000000)={&(0x7f00004b5000/0x1000)=nil, 0x1000}) (async, rerun: 64) syz_emit_ethernet(0x3b, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote, @val={@void, {0x8100, 0x5}}, {@generic={0x8847, "fe4510878ac9fc7eff3877c689807a21d3f2c4f7e4f516209a63483f64e325ec1bf5a7e3055c8d1913"}}}, &(0x7f0000000180)={0x0, 0x1, [0x548, 0xefb, 0xca5, 0xa8]}) (rerun: 64) 4m17.178695371s ago: executing program 33 (id=400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000c4d000/0x2000)=nil, 0x2000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a68000000060a010400000000000000000a0000010900010073797a31000000003c000480380001800b00010064796e73657400002800028008000440000000090900010073797a3200000000080003400000000208000940000000030900020073797a3200"], 0x90}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socket$nl_route(0x10, 0x3, 0x0) 4m2.307855669s ago: executing program 34 (id=595): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa, 0x0, 0x700}}, 0x14}}, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002300)={0x7, {"a2e3ad214fc752f91b4809094bf70e0dd038e7ff7fc6e5539b326d078b089b3b083872090890e0878f0e1ac6e7049b3d68959b4c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b08320d075d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b46943090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7076600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e988037b2ed050000000000000046684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2e7faa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5399e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a74cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df2928924486cfff799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e74322f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2a9702b4230f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f002ce8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5478de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df11fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fffffff7f00000000758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001400b59540000000fcffffff0a3f0000", @ANYRES32=r4, @ANYBLOB="14000200fe"], 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) (async) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0xd0, 0x1e8, 0xd0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0xff000000, 0xff, 0xffffff00], 'batadv_slave_0\x00', 'bond0\x00', {0xff}, {}, 0x33, 0x0, 0x3, 0xc}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x80000001, 0xf, 0xaee, 0x1, 0x8a, 0x0, 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@hl={{0x28}, {0x644393a9b4b87ad3, 0xf}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x200, 0x80000000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x4}, 0x20) (async) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r6, 0x80046402, 0x0) (async) close(0x3) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) (async) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@local}, &(0x7f0000000040)=0xfffffffffffffff1) 3m55.520227056s ago: executing program 35 (id=654): r0 = fsopen(&(0x7f0000000000)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000000)) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = gettid() sendmsg$netlink(r2, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004740)=[{&(0x7f00000022c0)={0x10, 0x2d, 0x200, 0x70bd29}, 0x10}], 0x1, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee01}}}], 0x20}, 0x0) 3m52.556927429s ago: executing program 36 (id=536): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x2}}, 0x2e) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r3, 0x1, 0x1070bd2f, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async, rerun: 32) r5 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r4) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r7, 0x4, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48040}, 0xc014) 3m14.741021298s ago: executing program 37 (id=973): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000094c000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x40, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000280)={0x5000, 0x110000}) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f00000001c0)="f1", 0x1) 2m27.66599362s ago: executing program 7 (id=1706): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = fsopen(&(0x7f0000000000)='ntfs\x00', 0x0) fsmount(r2, 0x0, 0x77) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) (async) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt(r4, 0x0, 0x7, 0x0, 0x0) (async) setsockopt(r4, 0x0, 0x7, 0x0, 0x0) syz_pidfd_open(r3, 0x0) (async) r5 = syz_pidfd_open(r3, 0x0) setns(r5, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x9d9, 0x0) 2m27.584669967s ago: executing program 7 (id=1709): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) (async) r2 = openat$mixer(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000300)={r4, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000000200)=[0x5, 0x4, 0x1, 0x1ff, 0x4, 0x96], 0x0, 0x1, 0x1, &(0x7f0000000240)=[0x81], &(0x7f0000000280)=[0x10]}) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000003c0), 0x8040, 0x0) (rerun: 32) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000400)={0x2000, 0x258, 0x760183d0a1084843, 0x480, 0x70, 0x8, 0x14, 0x1, {0x1, 0x10, 0x1}, {0x80000001, 0x8}, {0x9, 0x9}, {0xea1, 0x400000}, 0x1, 0x100, 0x8001, 0x7fffffff, 0x1, 0x7, 0xed, 0x4, 0x101, 0x8, 0x6, 0xfffffff9, 0x21, 0x403, 0x1, 0xb}) (async) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x48000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x90c}}, './file0\x00'}) (async) r8 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) 2m27.58377168s ago: executing program 7 (id=1711): r0 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) accept$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x18) symlinkat(&(0x7f0000000140)='.\x00', r2, &(0x7f0000000200)='./file0/../file0\x00') (async) symlinkat(&(0x7f0000000140)='.\x00', r2, &(0x7f0000000200)='./file0/../file0\x00') openat2(r2, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)={0x2380}, 0x18) 2m27.519064416s ago: executing program 7 (id=1713): syz_emit_ethernet(0x16, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@llc={0x4, {@snap={0x0, 0x0, "af", "c56e86", 0x86dd}}}}}, 0x0) setresgid(0xee00, 0xee01, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x9a51, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffd, 0x8, 0x4, 0xfffffffd, 0x6000, 0xf, r2, 0x0, 0x9, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x3, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r4, r4) mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x50800, &(0x7f0000000480)={[{@uid={'uid', 0x3d, r0}}, {@uid={'uid', 0x3d, r2}}, {@mode={'mode', 0x3d, 0x1ff}}, {@mode={'mode', 0x3d, 0x5}}, {@uid={'uid', 0x3d, r4}}], [{@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'#(}%\x00'}}, {@appraise_type}, {@dont_hash}, {@fowner_lt={'fowner<', 0xee00}}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000822bd7000fbdbdf250e000000080039110844eebf9afcea95c6d6d40002"], 0x48}, 0x1, 0x0, 0x0, 0x4000881}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) io_uring_setup(0x75b1, &(0x7f0000000780)={0x0, 0xfb6e, 0x400, 0x0, 0x313}) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r8, 0x4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='dax\x00', 0x20020, &(0x7f0000000100)='\'#(}%\x00') r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r9, 0x890c, &(0x7f0000000180)={0x0, @rc={0x1f, @none, 0xc}, @phonet={0x23, 0x5, 0x4, 0x38}, @phonet={0x23, 0x4, 0x7, 0x3e}, 0x3128, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)='pimreg\x00', 0x7, 0x4d, 0x6}) 2m27.424903999s ago: executing program 7 (id=1714): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r2 = accept4(r1, 0x0, 0x0, 0x80800) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0) poll(&(0x7f0000000bc0)=[{r3, 0x50}], 0x1, 0x2) sendmmsg$inet(r2, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000001240)="5c00679d1d6bf7cb37b2f1353c8b04c9fdc49c35e6aeb5106881b82e538793cdd9e0e57ee107465f474da01b2b6584d32e85ad4e3ffbfe97b8529d37abeb491b", 0x40}], 0x1}}], 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1e, 0x0, &(0x7f0000000500)) 2m27.423796606s ago: executing program 7 (id=1716): sync() (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2, 0x0, 0x7f}, 0x32) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x3, 0x81, 0x4, 0x8, 0x1, 0x5, '\x00', r2, r3, 0x3, 0x2, 0x3}, 0x50) 2m15.025310248s ago: executing program 38 (id=1660): pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x101040, 0x0) bind$alg(r4, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(des-generic)\x00'}, 0x58) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000004c0)={r8, 0x0, 0x0, 0x0, 0x0, [0x0], [0xfffffffc, 0x7, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000280)={r8, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x8], [0x2], [0x0, 0x0, 0xfffffffffffffbaf]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000100)={r11}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) (async) r12 = socket$packet(0x11, 0x3, 0x300) close_range(r12, r12, 0x4) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x390, 0xffffffff, 0x1e8, 0x118, 0x0, 0xfeffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x6, 0x1, [0x10, 0x0, 0x1, 0x4, 0x2, 0x4, 0x58ba, 0xffff, 0x6f, 0x0, 0x7, 0x1, 0x5, 0x2, 0x6b, 0x8], 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0x24}, [0x0, 0xff, 0xff, 0xffffff00], [0x42710ab262b9efc4, 0xff, 0xff, 0xff], 'vcan0\x00', 'pim6reg1\x00', {}, {}, 0x2b, 0x1, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x6}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x32, 0x79, 0x4, 0x44}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x3898, 0x1000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) close(0x4) 2m11.277280889s ago: executing program 39 (id=1716): sync() (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2, 0x0, 0x7f}, 0x32) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x3, 0x81, 0x4, 0x8, 0x1, 0x5, '\x00', r2, r3, 0x3, 0x2, 0x3}, 0x50) 47.85846357s ago: executing program 1 (id=3011): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) (async) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040)) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x0, 0x9403, 0x3002, 0x210, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffff00], 'wlan0\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0x1c8, 0x210, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) r2 = userfaultfd(0x801) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRESOCT=0x0, @ANYRES8, @ANYRESHEX=r0, @ANYRES8, @ANYRESOCT=r0, @ANYRES64=r1, @ANYBLOB="560057546de4e00b1998df768fab57cf6ab2519b461794760a352e8ed6b8eb0992f882d22a0d5b492b1ca595f05909f67d78d4d8b5fef3ddcdacd7a040fb10c65566e81f58718133ef1726a009b404295059898fa13d44cf9699f195546ece", @ANYRES16=r2, @ANYBLOB="05c6b8e2b47b88c2ce6480857f03abef31227dc5fc3745a0d7ce282ce494ac513f28406f3d8a05aff5bc45ea44292823e7eac59a0fba6e8bc9ccc7889ee2e0561498f08a0d884bcb9187969fd6735c51a4f66260ed406034c61188d95a02f81355405b7ce8a3ddfcc1d609a4432db4241d4a00e17377734e6aa2c5f9fc5835bc9489061031f70cd4f8705c1c8ddf016919a790cbd986bd49ecb1e2c401d304726fb725b029b9dbd583989c15d5a817e3fc0a1b8828196f5e4b6a375e0f5642e67b0165afd3c3199f60dd2dd390fe5c15489a3d0ae225266f671784dca5be9d581c1e46342ec83502f5a5a676ae496d8a918be88a0b73968197cd90905b1bcdac63479487fa132f13fd1ae1ea3122eafdb7d38dc88d2268c52c9aa400d32914e703ad631fb762d353f513cb192d08d6fb80e99192051d52afb15d3e1ebda1b4b91dc8c6790d8b03e6bf82191f0fc6bec371a7b3cdb612ee8caf12e3a446df3efe9a77d7da3f27668b42fa57baa4cbec072d5ca8ee402d7ba12fec94cfeedf724b703d"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r3], 0x48) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-arm64-neon\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="ad5600008100000800"/24, 0x18) (async) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r6, &(0x7f00000008c0)=ANY=[], 0x5b) (async) sendfile(r5, r6, &(0x7f00000001c0), 0x5) setreuid(0xee01, 0xee01) r7 = fanotify_init(0x40, 0x800) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) readv(r7, &(0x7f0000000200)=[{&(0x7f0000000000)=""/182, 0xb6}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mmap(&(0x7f0000566000/0x2000)=nil, 0x2000, 0x6000003, 0x3032, 0xffffffffffffffff, 0x0) (async) fsopen(&(0x7f0000001400)='udf\x00', 0x1) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r9}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000000500)=[@in6={0xa, 0x4e23, 0x9, @loopback, 0x9}, @in6={0xa, 0x4e22, 0x4, @private0, 0x8}, @in={0x2, 0x4e23, @rand_addr=0x64014100}], 0x48) 47.794432924s ago: executing program 1 (id=3015): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmmsg$alg(r1, &(0x7f0000002cc0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="60cc3d598973eabae91aed747f69b97cc87631e40a5bd6cd997b434dcf970acdd4ba9aa2870f376f9e719e8864c333b0e8f86eef575594bff18045044e1c6187bb4d3b073491d419d6638a53a5ee65ea9dfc48344fd51d3bd6a5a31cb5a1627fb8ba32819160386ae160a0a91897ad62e4790bf526cdf6c43c168a8ebe67e87c97887044ee68ba834f1907429b8d1bcbdc3a2801960d77c6", 0x98}, {&(0x7f0000000340)="e233eed8a16aefd246546c2ceaeaa5347f2d40ef75a114850948267cfc37462688f268e8a1ba7100fa4ce403f1f87a69d7945ee396cafd60514fd76e42f59dcb617bc15a32ebef7bacae351aa2531703b69caf8c1cda0acc614e4b3357b6889db523ad8cd1ef1f2e", 0x68}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20000800) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x4, 0x0) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0xd0, 0x400) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x42100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r3, 0xc01064c4, &(0x7f0000000080)={&(0x7f0000000100)=[r4], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000200)={r4}) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) accept4(r0, 0x0, 0x0, 0x80000) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) (async) sendmmsg$alg(r1, &(0x7f0000002cc0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="60cc3d598973eabae91aed747f69b97cc87631e40a5bd6cd997b434dcf970acdd4ba9aa2870f376f9e719e8864c333b0e8f86eef575594bff18045044e1c6187bb4d3b073491d419d6638a53a5ee65ea9dfc48344fd51d3bd6a5a31cb5a1627fb8ba32819160386ae160a0a91897ad62e4790bf526cdf6c43c168a8ebe67e87c97887044ee68ba834f1907429b8d1bcbdc3a2801960d77c6", 0x98}, {&(0x7f0000000340)="e233eed8a16aefd246546c2ceaeaa5347f2d40ef75a114850948267cfc37462688f268e8a1ba7100fa4ce403f1f87a69d7945ee396cafd60514fd76e42f59dcb617bc15a32ebef7bacae351aa2531703b69caf8c1cda0acc614e4b3357b6889db523ad8cd1ef1f2e", 0x68}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20000800) (async) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x4, 0x0) (async) syz_open_dev$dri(&(0x7f00000001c0), 0xd0, 0x400) (async) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x42100) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r3, 0xc01064c4, &(0x7f0000000080)={&(0x7f0000000100)=[r4], 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000200)={r4}) (async) 47.626917162s ago: executing program 1 (id=3016): r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000001d80)=0x7, 0x4) listen(r0, 0x8) getrusage(0x0, &(0x7f00000001c0)) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000011006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 47.335742584s ago: executing program 1 (id=3024): sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, 0x0, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x24000044) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="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", 0x2e0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8000) r7 = syz_pidfd_open(r4, 0x0) r8 = pidfd_getfd(r7, r7, 0x0) r9 = socket$caif_stream(0x25, 0x1, 0x4) getsockopt$sock_cred(r9, 0x1, 0x11, 0x0, &(0x7f00000003c0)) mknod(&(0x7f0000000400)='./file0\x00', 0x1, 0x8) mount$tmpfs(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000440), 0x10, &(0x7f0000000480)) getsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000240)={@loopback, @dev, @multicast1}, &(0x7f0000000280)=0xc) setns(r8, 0x66020000) 47.244419747s ago: executing program 1 (id=3028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) (async) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x1401, 0x400, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) (async) recvmsg(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 45.089338276s ago: executing program 1 (id=3034): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xde) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1c) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x7fff, 0x1c1901) ioctl$BLKDISCARD(r3, 0x80041284, &(0x7f0000000080)=0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={@local, 0x4f, r4}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x5}, [@CGW_CS_XOR={0x8, 0x5, {0x3, 0x0, 0x0, 0x7}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "ee1990a380ecab90"}, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 44.94290646s ago: executing program 40 (id=3034): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xde) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1c) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x7fff, 0x1c1901) ioctl$BLKDISCARD(r3, 0x80041284, &(0x7f0000000080)=0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={@local, 0x4f, r4}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x5}, [@CGW_CS_XOR={0x8, 0x5, {0x3, 0x0, 0x0, 0x7}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "ee1990a380ecab90"}, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 41.957480777s ago: executing program 9 (id=3090): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000340)={0xa, 0x0, 0x9, @local, 0x9, 0x803}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r3, &(0x7f0000000500)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0xfac, 0x0, @opaque="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"}}}, 0xfce) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0xc800, 0x800}, [@IFLA_LINKINFO={0xfffffffffffffdf1, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010102}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x24040810) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000004900000127bd700001dbdf250a003f00", @ANYRES32=r7, @ANYBLOB="00000001080002000000000014000100ff010000000000000000000000000001080002000600000008000200020000000800020007000000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x84) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRES32]) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='exofs\x00', 0x0, &(0x7f0000000400)) r8 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r8, &(0x7f0000000740)={0x2020}, 0x2020) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) preadv(r8, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/252, 0xfc}], 0x1, 0x80000001, 0x5) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_netprio_ifpriomap(r9, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r10, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) socket$netlink(0x10, 0x3, 0x14) 41.796031808s ago: executing program 9 (id=3091): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x4a800) ioctl$CEC_G_MODE(r0, 0x80046108, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) 41.795766222s ago: executing program 9 (id=3092): r0 = socket$inet(0xa, 0x801, 0x84) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000140)) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x400000b0, 0x0, 0xffffffffffffffff}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) (async, rerun: 32) r4 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 32) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0xffff}, &(0x7f0000000280)=0x8) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) (rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x100000000}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 41.572616067s ago: executing program 9 (id=3093): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010001fff040000000100000000000000", @ANYRES32=0x0, @ANYBLOB="30a9050000180100200012800b00010065727370616e00001000028008000100", @ANYRES32=r2, @ANYBLOB="0400120008000a00", @ANYRES32=r2, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) getsockopt$MRT6(r5, 0x29, 0xce, &(0x7f0000000040), &(0x7f0000000140)=0x4) 41.412854366s ago: executing program 9 (id=3094): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl730\x00', [0x78, 0x8, 0x0, 0x10000, 0x6, 0x0, 0x7, 0x1a8e, 0x0, 0xd860, 0x1, 0xfff, 0x8, 0x80000000, 0x6, 0x1c3, 0x0, 0x8, 0x4, 0x0, 0x7, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0xcd93, 0x8, 0x1, 0x1, 0x22f8]}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0xf27, 0x80000000, 0x2, 0xa, 0xe, 0x5, 0x8, 0x3, 0x8, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x100006, 0x101, 0xfffffffe, 0x7f, 0x3, 0x40000003, 0x89, 0xca9f, 0x0, 0x20001e58, 0xffffffff, 0xe66, 0x3, 0x8, 0x4085, 0x0, 0xfffffff8]}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl730\x00', [0x78, 0x8, 0x0, 0x10000, 0x6, 0x0, 0x7, 0x1a8e, 0x0, 0xd860, 0x1, 0xfff, 0x8, 0x80000000, 0x6, 0x1c3, 0x0, 0x8, 0x4, 0x0, 0x7, 0x0, 0x3, 0x6, 0x2, 0x0, 0x3, 0xcd93, 0x8, 0x1, 0x1, 0x22f8]}) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0xf27, 0x80000000, 0x2, 0xa, 0xe, 0x5, 0x8, 0x3, 0x8, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x100006, 0x101, 0xfffffffe, 0x7f, 0x3, 0x40000003, 0x89, 0xca9f, 0x0, 0x20001e58, 0xffffffff, 0xe66, 0x3, 0x8, 0x4085, 0x0, 0xfffffff8]}) (async) 41.359307733s ago: executing program 9 (id=3095): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000003340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004600002c000000000006907864010102ac1414aa0000000000004001", @ANYRES16=r0, @ANYRESHEX=r1, @ANYBLOB="7980aa2b00000000000080008a04279093944b996848de13b1c8662b60b3a9bdc14d0a6ea11582570cba008e93bc2b1b15390cac9ee12282f5471c284709b6faf8881c9afd62cd8be782bf32cecad6149a947cb9bdfcea3beac3e713e329cf65f46316faabe6966dfe7d3196bbfdfee2b9715f1896ce76c3581b80e7d72968a6dbd63fac17e9392153ffcfd0b4fe39523574a3aa76f9fd7cd0af38a05cda454fd4a2090b6aa502af31f45c8fe5c7604a47438dd705b25d7fe48c632bf9b00b4426ea88a052755e03f6979af6686234e35b0dc97b478589"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000009d00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) socket(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000d00)={0x11, 0x15, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/125, 0x7d, 0x1, &(0x7f0000000080)=""/45, 0xfffffffffffffe44}, &(0x7f0000000180)=0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) sync() openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x114, &(0x7f00000020c0)=0x2, 0x0, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r7, 0x89e2, &(0x7f0000000000)=@bcast) write$qrtrtun(r6, &(0x7f0000002100)="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", 0x1000) clock_adjtime(0x17, &(0x7f00000001c0)={0x4008b8d, 0x40, 0xb, 0x0, 0x8, 0x1, 0x0, 0xfffffffffffffffd, 0xc4ed, 0xffffffffffffffff, 0xf423f, 0x0, 0x8, 0x1, 0x0, 0xe5a, 0x6, 0x5, 0x3, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x400000}) read$FUSE(r6, &(0x7f0000000080)={0x2020}, 0x2020) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r10 = socket$kcm(0x10, 0x400000002, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@deltaction={0x18, 0x31, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x40000) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}, {&(0x7f0000003480)="e907cd2db7baf538b355d2cf044526ceb301d956eece9185d9497849cdabc1b0017fddbfe6b8207c5ee1ffe84e284c34ca6e339a1fc333ef87f670b863d83f97c4e8d795ca4e6511567641ad224a5c00d580d6eaa27366a94fbe8bf8f17152a52212d203d14a8da46df8c640ab8eda32fc843a3cab6a8739eff1bf23c921babbaa", 0x81}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r9, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000003140), &(0x7f00000031c0)=0x6e) 38.268317182s ago: executing program 3 (id=3119): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x32, &(0x7f0000000340)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x4, 0x0, 0x0, 0x73, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast1}, {0x521e, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c"], 0x84}}, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) (async) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0xc5d116e9899720b9, {{0x42}}}, 0x10) (async) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, &(0x7f00000000c0)={0x3}, 0x0) landlock_restrict_self(r3, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r7, 0x400454d0, 0xffffffffffffffff) write$USERIO_CMD_SEND_INTERRUPT(r1, 0x0, 0x0) 38.268159396s ago: executing program 3 (id=3120): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000580)={0x0, 0x86f7, 0x10100, 0x3, 0x38a}, &(0x7f0000002000), 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = fcntl$dupfd(r0, 0x406, r2) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_mtu(r3, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) 38.010922262s ago: executing program 3 (id=3121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc0c00b8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc3801003ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e467201000600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f28f872935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69ec17e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 37.893808171s ago: executing program 3 (id=3122): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0xb, 0x4, 0x4) accept4$vsock_stream(r2, &(0x7f0000000240)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getpeername(r1, &(0x7f0000000580)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x80) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x11, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fsmount(r3, 0x0, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, &(0x7f00000001c0)={0x28, 0x0, 0x0, 0xffffffffffffff15, 0x0}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f3896bd667cb12ea99509c73931d287310300", "0f9dafb4", "ec3f8238bfcfe6c0"}, 0x38) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r8, 0xffffffff}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={r8, 0x9}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 36.920856292s ago: executing program 3 (id=3130): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000400)={0xda, 0x7f}) close(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$inet6(0xa, 0x3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x390, 0xffffffff, 0x1e8, 0x118, 0x0, 0xfeffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x6, 0x1, [0x10, 0x0, 0x1, 0x4, 0x2, 0x4, 0x58ba, 0xffff, 0x6f, 0x0, 0x7, 0x1, 0x5, 0x2, 0x6b, 0x8], 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0x24}, [0x0, 0xff, 0xff, 0xffffff00], [0x42710ab262b9efc4, 0xff, 0xff, 0xff], 'vcan0\x00', 'pim6reg1\x00', {}, {}, 0x2b, 0x1, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x6}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x32, 0x79, 0x4, 0x44}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x3898, 0x1000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r3, 0x26}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) r6 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x800) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(r7, 0x3b80, &(0x7f0000000080)={0x8, r8}) recvmsg$can_raw(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000900)=""/110, 0x6e}], 0x1, &(0x7f0000001bc0)=""/158, 0x9e}, 0x40000040) 36.92053698s ago: executing program 3 (id=3131): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="0500030001"], 0x28}}, 0x80) sync() r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0xa, 0x1, 0x0, 0x3, 0xcc7, 0x8, 0xa, 0xa, 0x100, 0x2, 0x1, 0x8, 0x9, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x88, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1808065afe2481822e54d700007f926c3690211208146192adcc33bd4acf8983769819796b40b592b50b84dd35ae14b25d9fd57e57a6bb2a311e88edff7a4f00d13950e7ce95b3e5e852f3ae9713a8704fec2a241c111bb29f4f86f3707039ca6ab4b0ae8bd8a6bd731987910bb5d54fc2"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x90) 25.284073098s ago: executing program 41 (id=3095): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000003340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004600002c000000000006907864010102ac1414aa0000000000004001", @ANYRES16=r0, @ANYRESHEX=r1, @ANYBLOB="7980aa2b00000000000080008a04279093944b996848de13b1c8662b60b3a9bdc14d0a6ea11582570cba008e93bc2b1b15390cac9ee12282f5471c284709b6faf8881c9afd62cd8be782bf32cecad6149a947cb9bdfcea3beac3e713e329cf65f46316faabe6966dfe7d3196bbfdfee2b9715f1896ce76c3581b80e7d72968a6dbd63fac17e9392153ffcfd0b4fe39523574a3aa76f9fd7cd0af38a05cda454fd4a2090b6aa502af31f45c8fe5c7604a47438dd705b25d7fe48c632bf9b00b4426ea88a052755e03f6979af6686234e35b0dc97b478589"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000009d00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) socket(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000d00)={0x11, 0x15, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/125, 0x7d, 0x1, &(0x7f0000000080)=""/45, 0xfffffffffffffe44}, &(0x7f0000000180)=0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) sync() openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x114, &(0x7f00000020c0)=0x2, 0x0, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r7, 0x89e2, &(0x7f0000000000)=@bcast) write$qrtrtun(r6, &(0x7f0000002100)="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", 0x1000) clock_adjtime(0x17, &(0x7f00000001c0)={0x4008b8d, 0x40, 0xb, 0x0, 0x8, 0x1, 0x0, 0xfffffffffffffffd, 0xc4ed, 0xffffffffffffffff, 0xf423f, 0x0, 0x8, 0x1, 0x0, 0xe5a, 0x6, 0x5, 0x3, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x400000}) read$FUSE(r6, &(0x7f0000000080)={0x2020}, 0x2020) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r10 = socket$kcm(0x10, 0x400000002, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@deltaction={0x18, 0x31, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x40000) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}, {&(0x7f0000003480)="e907cd2db7baf538b355d2cf044526ceb301d956eece9185d9497849cdabc1b0017fddbfe6b8207c5ee1ffe84e284c34ca6e339a1fc333ef87f670b863d83f97c4e8d795ca4e6511567641ad224a5c00d580d6eaa27366a94fbe8bf8f17152a52212d203d14a8da46df8c640ab8eda32fc843a3cab6a8739eff1bf23c921babbaa", 0x81}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r9, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000003140), &(0x7f00000031c0)=0x6e) 20.848203201s ago: executing program 42 (id=3131): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="0500030001"], 0x28}}, 0x80) sync() r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0xa, 0x1, 0x0, 0x3, 0xcc7, 0x8, 0xa, 0xa, 0x100, 0x2, 0x1, 0x8, 0x9, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x88, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1808065afe2481822e54d700007f926c3690211208146192adcc33bd4acf8983769819796b40b592b50b84dd35ae14b25d9fd57e57a6bb2a311e88edff7a4f00d13950e7ce95b3e5e852f3ae9713a8704fec2a241c111bb29f4f86f3707039ca6ab4b0ae8bd8a6bd731987910bb5d54fc2"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x90) 20.193046795s ago: executing program 0 (id=3308): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x9, &(0x7f0000000280)=[{0x0, 0x2, 0x2, 0x3}, {0xfff9, 0x8, 0xf, 0x5}, {0x1, 0xb, 0x9, 0xf}, {0x7, 0x4, 0x8, 0xfffffff8}, {0x6, 0x5, 0x2, 0x593}, {0x3ff, 0x8, 0xa3, 0xfffffff9}, {0x4, 0x3, 0x2, 0x6}, {0x1, 0x7f, 0x8, 0x6}, {0x2, 0x1, 0x4, 0x4}]}) r1 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b30, &(0x7f0000000200)={'wlan1\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b00)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {0x0, 0x10}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0xc, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0xf77d, 0x2, 0x1}, {0x9}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x20}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) sendto$netrom(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @rose, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async) mount(&(0x7f0000000140)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='pstore\x00', 0x200000, 0x0) 20.086471773s ago: executing program 0 (id=3309): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000006119ef23000000009500000000000000f30f9178611f0707f428dcba1088803663b0cb7f7c70fc227bb4cac54314b0e81803d5ee3200386192951ff2c0cd15badbdb1fc089484fedb5a08d5cb16b26491650695bca58694dee69e2e75b0e173e4031442310b235a39e9a996697e0c8643adcdd750bfcf0cb8310a62d06db82127c3a292611fd1a8989a360860d717654903e8468276561c3a5362d9cd15cfb3e86e80b7d2ba1cff0bce741e04a4e554eadcafb1e94761abae4d7d8b7f52497a7"], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0xe}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=0xffffffffffffffff, 0x13, 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x10}, 0x10}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x4) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000000)={0xd773}, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r5, 0x4008af13, &(0x7f0000000080)={0x1, 0x1}) sendmmsg$inet6(r4, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, 0x0, 0x29, 0x0, @val=@iter={0x0}}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(r9, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000000d06010300000000000000000d0000040500050002000000110003006861736feb782e2c6d61726b000000000500050001000000050005000300005ea3cebf954097000300686173683a6d617eeefe37ec96b3254dcb74981a417b0148bd92efe7603df088060d463e9f5c61dc58f6ce01592292cf3ffa0d6a26d3a62e7f07f492a458568b5216d29ab9327e64641d37"], 0x50}, 0x1, 0x0, 0x0, 0x8000800}, 0x20002000) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r8, @ANYBLOB="17005e800800020000000001080001f9feffffef"], 0x30}}, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r9) sendmsg$BATADV_CMD_TP_METER_CANCEL(r9, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)={0x5c, r10, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8010) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0, @ANYBLOB="fff600"/12, @ANYRES32=r0, @ANYRES32=r8, @ANYBLOB="f9728ca2b137cb39f2d7b5113881c44c454c8c0094dc58536b2dc80f1f5423b73f58cd905e3c1ad86d899e4d11843e619f4c84e933a099081331d7de12700c9b908eb60d4b65086219ad71e1f8433e94f5732b1c291a753c7f67a3d25d5bba559482096a042e8bb9ff5dee448d9e595f1739fb"], 0x20) 19.152482575s ago: executing program 0 (id=3317): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0xfedf, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x400000, {0x0, 0x0, 0x12, r1, {0x0, 0xffff}, {0xffff, 0x5}, {0x2}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x7}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 19.147955256s ago: executing program 0 (id=3320): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) r1 = syz_open_dev$usbfs(&(0x7f0000000380), 0xdb, 0x100) readv(r1, &(0x7f0000000a80)=[{&(0x7f0000000a40)=""/35, 0x23}], 0x1) (async) readv(r1, &(0x7f0000000a80)=[{&(0x7f0000000a40)=""/35, 0x23}], 0x1) chdir(&(0x7f0000000300)='./file0\x00') r2 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/3:0:0:0\x00', 0x2, 0x0) ioctl$BSG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000100)) (async) ioctl$BSG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5}) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5}) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}}, 0x10) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mlock(&(0x7f0000682000/0x3000)=nil, 0x3000) (async) mlock(&(0x7f0000682000/0x3000)=nil, 0x3000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r6, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r6, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 19.067718363s ago: executing program 0 (id=3322): futex(&(0x7f0000000140)=0x4, 0x8, 0xfffffffe, 0x0, 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.685094369s ago: executing program 0 (id=3331): getpid() (async) r0 = getpid() syz_pidfd_open(r0, 0x0) (async) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_secret(0x80000) (async) r2 = memfd_secret(0x80000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80, 0x2, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setns(r2, 0x40000000) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[r4], 0x1}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$CDROM_GET_MCN(r7, 0x5311, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x20) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) setfsuid(0xee00) (async) setfsuid(0xee00) setresuid(0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x16, 0x20000000, 0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004051}, 0x20000000) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x16, 0x20000000, 0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004051}, 0x20000000) 18.595870585s ago: executing program 43 (id=3331): getpid() (async) r0 = getpid() syz_pidfd_open(r0, 0x0) (async) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_secret(0x80000) (async) r2 = memfd_secret(0x80000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80, 0x2, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setns(r2, 0x40000000) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[r4], 0x1}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$CDROM_GET_MCN(r7, 0x5311, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x20) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) setfsuid(0xee00) (async) setfsuid(0xee00) setresuid(0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x16, 0x20000000, 0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004051}, 0x20000000) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x16, 0x20000000, 0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004051}, 0x20000000) 18.278875842s ago: executing program 4 (id=3341): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_RANGEINFO(r0, 0x80106408, &(0x7f0000000080)={0x9a, 0x0}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) (async) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) (async) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) (async) sendto$isdn(r1, &(0x7f0000000280)={0x4, 0x9, "9fdc3e8e8e42e777290a1e97de9a6f6bedeea2ba538e8615a0c9431619b763d404b761e78e198d25231ae4a52949712d418b6cdb50cf06e5ddf148c097b54c4465896db98209c0f80cf5360a4e06f841e66a04b1f1135dd8f9020b77224a18561f8a80da2b1129f4da86ea340c49a1ce0f799f0cae2a500ca411b92b90c3cda2c41408797b6a73ced4ee8f7f3024b60e9af5b4ef8dcc7563bcfa7e4c0c0c133270c48531b2c8121c3ad3049a6cecf76ae4417433ce8035cda97328bf76d32ab4baee6426d6ce1feee78c13b63bf27438a50025d48bda05f9"}, 0xe0, 0x8000, &(0x7f0000000040)={0x22, 0x0, 0x1, 0x40, 0x2}, 0x6) (async) r4 = syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) (async) syz_io_uring_setup(0x0, 0xfffffffffffffffe, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x10000, &(0x7f0000000380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x749}}]}}) pidfd_getfd(r1, r5, 0x0) 18.188745749s ago: executing program 4 (id=3344): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') exit(0x0) pread64(r1, &(0x7f0000000080)=""/191, 0xbf, 0x80000001) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f017, 0x1}) 17.220147448s ago: executing program 4 (id=3349): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000002100010000000000fddbdf25fc000000000000000000000000000001fc020000000000000000000000000001fffc0000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000088ff5000110000000000000009000000ffff7f00000100000000000000000000ffff0a01010264010102000000000000000000000000e00000010000000000000000000000003c00000000000000020008002c001300ff010000000000000000000000000001fe8000000000000000000000000000bb0000000002"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x42000) 17.219398803s ago: executing program 4 (id=3351): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, &(0x7f0000004400), &(0x7f0000002140)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000820}, 0x10880) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 17.048526061s ago: executing program 4 (id=3352): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) (async) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$nfs(&(0x7f00000000c0)='TIPCv2\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8000, &(0x7f0000000240)={[{']\',*%'}], [{@context={'context', 0x3d, 'root'}}, {@appraise_type}, {@fsmagic={'fsmagic', 0x3d, 0x10a}}, {@obj_user={'obj_user', 0x3d, 'TIPCv2\x00'}}, {@uid_eq={'uid', 0x3d, r3}}]}) 15.48757547s ago: executing program 4 (id=3365): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) r0 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) read$sequencer(r0, &(0x7f0000000480)=""/98, 0x62) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x122}}, 0x4008090) 15.33735499s ago: executing program 44 (id=3365): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) r0 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) read$sequencer(r0, &(0x7f0000000480)=""/98, 0x62) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x122}}, 0x4008090) 1.945340269s ago: executing program 8 (id=3534): pipe2$9p(&(0x7f00000027c0)={0xffffffffffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x9d99cd2e70efc5e4, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc010000000000000000000000000000ac1414aa00000000000000000000000000000000000002090200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe"], 0xec}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) close_range(r0, 0xffffffffffffffff, 0x0) 1.86109393s ago: executing program 8 (id=3539): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000002100010000000000fddbdf25fc000000000000000000000000000001fc020000000000000000000000000001fffc0000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000005000111100000000000009000000ffff7f00000100000000000000000000ffff0a01010264010102000000000000000000000000e00000010000000000000000000000003c00000000000000020008002c001300ff010000000000000000000000000001fe8000000000000000000000000000bb0000000002"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x42000) 1.770199609s ago: executing program 8 (id=3540): r0 = syz_clone(0x50c8000, 0x0, 0x3, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fchdir(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x6, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x48, 0x5, 0x6, 0x1, 0x8, 0x1, 0x12, 0x4], 0x3, [0x400b, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x7, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x4, 0x2, 0xc, 0x40, 0xfffc, 0x43, 0x4]}}]}}]}, 0x8c}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r12, 0x1, 0xd8, 0x6, @multicast}, 0x14) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000480)={0x0, "b500e2279c2996817bb959eb2b238deda525e1dbdeffafbf2500"}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r14 = syz_open_procfs(r0, &(0x7f0000000240)='syscall\x00') connect$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) syz_fuse_handle_req(r14, &(0x7f0000006cc0)="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", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.3878663s ago: executing program 8 (id=3544): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0x0, 0x4e21}, {@in=@private=0xa010100, 0x0, 0x33}, @in6=@remote, {}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x4e22, 0x4e23, @in=@private=0xa010101}}]}, 0x154}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000180)="8982afa718e799f0c47419086bd06ebb83", 0x11}], 0x1, 0x0, 0x0, 0x8800}], 0x1, 0x20004014) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x60000000}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={r3, 0x1e}, 0x8) 1.305619624s ago: executing program 8 (id=3547): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, 0x0, 0x4000054) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200900) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r3 = openat$pmem0(0xffffff9c, &(0x7f00000000c0), 0x165101, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 973.860245ms ago: executing program 5 (id=3554): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000004ec0)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/38, 0x26}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 864.147205ms ago: executing program 8 (id=3555): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r3, 0xb01}, 0x14}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r0, r1, 0x0) 503.515414ms ago: executing program 2 (id=3556): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_freeze_timeout', 0x204000, 0x44) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x3, 0x3}, 0x0) pipe2(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x700, 0x8000, 0x40a, 0x1, {{0xa, 0x4, 0x2, 0x6, 0x28, 0x68, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100, {[@timestamp={0x44, 0x10, 0x49, 0x0, 0x0, [0x6, 0x1ffe0, 0x1]}, @end]}}}}}) write$tun(r1, &(0x7f0000000500)={@val={0x0, 0x18}, @val={0x3, 0x1, 0x3, 0x4, 0xc4, 0x10}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x26, 0xd8, 0x68, 0x0, 0x4d, 0x2f, 0x0, @multicast1, @broadcast}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x15, 0x0, [], "1c794c5fcd565649050022835ac3ac97cb9fb274d4"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x9, 0x2], "7fb5875c8cb1e5103810f3514c5859085f8bcd044121d872d527be9db6ccba47166b45027b4ebb9222f071ff96f3443ec4461c325c516f1698e1f011fa3bfab0dedf7bd62f68af"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9, 0xfff9]}, {0x8, 0x88be, 0x3, {{0xa, 0x1, 0x3, 0x3, 0x1, 0x2, 0x0, 0x4}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x3, {{0x9, 0x2, 0xe, 0x3, 0x1, 0x3, 0x7, 0x3}, 0x2, {0x8, 0x8, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "a33ce789860dc984c201b1e28a9fe3cd0d2bcc93a01e37ac14a0f11b"}}}}, 0xe6) sendmmsg(r0, &(0x7f000000a3c0)=[{{&(0x7f00000060c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @local}, 0x0, 0x4, 0x0, 0x1}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x101841) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010100}, 0x10) 343.065529ms ago: executing program 6 (id=3558): creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0x2000, 0x0) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) (async, rerun: 64) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async, rerun: 64) io_uring_register$IORING_REGISTER_FILES(r1, 0x20, &(0x7f0000000000)=[r1], 0x1) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000003c80)=ANY=[@ANYRES32], 0x13) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) (async) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 339.783901ms ago: executing program 5 (id=3559): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000002100010000000000fddbdf25fc000000000000000000000000000001fc020000000000000000000000000001fffc0000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000005000113a00000000000009000000ffff7f00000100000000000000000000ffff0a01010264010102000000000000000000000000e00000010000000000000000000000003c00000000000000020008002c001300ff010000000000000000000000000001fe8000000000000000000000000000bb0000000002"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x42000) 337.135964ms ago: executing program 2 (id=3560): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000000300010027bd7000ffdbdf250000000093075e720129b77c4a4b87a191b45e71da89bc5b363089157769fe3e11b4f96814ba46c82b92bc987e313ad25542f19ad7abf2d11598204e0f3da320bae045fe8e5c5e35ce32b6f8a83463a5143e104a17a3", @ANYRES32=0x0, @ANYBLOB="c0000000001400001400350077673200"/28], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) syz_emit_ethernet(0x79, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x43, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[@routing={0x84}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf7"}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r2, @in={{0x2, 0x4e24, @empty}}, 0x9, 0x81, 0x1, 0x6940000, 0x80, 0x9, 0x77}, &(0x7f0000000940)=0x9c) syz_emit_ethernet(0x82, &(0x7f00000002c0)=ANY=[@ANYBLOB="a5050f0000b51704b45adbde0800450000740000000000019078ac1e0001ac1414aa05009078e00000e04600fe000000000000110000ac1414aaac1414aa830300070300443c00030a01012f00000000e000000100000000ac1e000100000000ac1414bb00000000ac1e000100000000ac141400000000000000010000000000000047f5939e610c32336caa8aad07d176493cac486abab8c84f010b72332bb663f8ff4ab52b66ef600000000000"], 0x0) 336.415107ms ago: executing program 5 (id=3561): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x40) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x80, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x17, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="410309fc1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x40) (async) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) (async) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') (async) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x80, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x17, r3, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async) 336.293964ms ago: executing program 6 (id=3562): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=[{}, {}, {}]}, 0x108) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000140, 0x0) eventfd(0xc) r2 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x20000, 0x0}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) dup(0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r8, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) 336.174807ms ago: executing program 2 (id=3563): syz_clone(0x1608a9280, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond0\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/meminfo\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 257.746901ms ago: executing program 5 (id=3564): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x18, 0x7, 0x1b5, &(0x7f0000000140)="21a12da9534717cfa2ce65c1135878b02e1cfa70ffb68a259e832000de98a493beff85d9a83c7c3ce020b91058b6e55d8dd249a6612d4f44efa474017f2fe3a13c302225ebcc8e0941d257058b4c0fb86282cc168b46c8cda311ec4123ca2ae8da8c9a323cd59e5f02d71c7f23c87bb796c3a0a8508b326ac6a7259c34bce9846af90a12449429e1ea9e2666acd2c8d9fd0b797bf8b9fe6e138cfe5ffefdbc77b65daaf8461866311bf859f7305e2e84fd6e534eebddf75f2204d64b77fc3910e8d1a329c9d3fa004e1a071d59478b4e4c5b8e57287271c8ba99f1f05861f52e750be0f7b7cf637ec42f57841fdb74b07bcf395f099bf6a9babbdbcbb802c9b7c190e6eb5b05179f5fc8a0d23addfd62ec888305d9f7616ecd3c727e64a22e084c5842709c8deb4fd54dc6cc89b654af0096633733b496cb005e87992b0cd8c0fc1b3d3eaab112a959c95a328e40e20c39e70b20984769b7aa657bce8f8093c0969a755fb8eedb90418fbd0aa80ce5e0577df2ec88c2dbf6d72d603957508ca61348a65b8dcbb8680edb225d60e3077abf59918e6f75e32e1255b0bdbaf96ee7b2165a5927a6585922626c294e6d4c69182e9a92466547e858ba29dcad1d589afbf91cddad118e192e3b89a3aa0ae87e715111694034aa49fb17a55db615f6effc92493b4eb8da12ded4a824b26d9ef7fe93e50098727a3b390cb6b6e85e7ceffbaad1193cfeac7e7eefb402e89cd9d52cad611bbe931122cdacba21608c28adcfe71074779f03d3a5b59905038b3631a04eb8db6ec22321e4c6d3010003a3be1bd41b54b4b44e765bb3af6c05d2b6383ee8b4bf754182f738ab7af6469cb804ae67915f67af170b8610278f260730c2dc900a741543137913628f9ba24c9fa3e0dc569b2805febb17913db9ef3cad19785cee0889dc10a80d82dca28d448544aae17e7d5afd7e25016a5a3b09cab2d1697f2de69fef73fc6b0ea390f3795527f6b361d768e5c549bf75394da429d4ef5d9ca26d69df7c54c154d7be60948f53777b6355fe691695e7217e52307feef4fb760d42f54d26ed9edc33a6216ee45554a98c2b19fea495349204e71516e3795e4ff9bdf6345ece83553a2cfe22adc2a6d0d72befb8945f3cd5ca1368ebda74085d3f39e6e968be6d96a6f167f9b9ab3d80456fabd240e7503b4af3dc75b41f8d543324f0aa5e0932367f676fcf8978c824d30fc58ce0e2c0d97db5d443ffa48c316d6b57c91ee448f98f8b32540f7d1b1e00a7020192e9c6da2e1851f7fca03a43148a50bfd0fe199f2b68c5c7fca934b69a99b99b866a7168b46be26f50bf2cb60117c4c3b5298b7c38eabc9d8a486bdedee5d47b7fb48b29194b9dd859ada5e99fea9943db9c7720af909d30cfe73804f82f3821488a2fe4b238a1670e4eac090ad3cbe19828ea97df384b9f66a1"}) 204.201692ms ago: executing program 5 (id=3565): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0], 0x1c}}, 0x0) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0x9, 0xb}) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000190001002dbd7000fcdbdf251d01020015000200000000a06c5cd1ce72ee3a9b2c0603000054b511902381fccb06000000150004000100000005020000b3f6b1b8554b91369d9644a23c27"], 0x44}}, 0x40800) 203.862199ms ago: executing program 5 (id=3566): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket(0x15, 0x5, 0x40) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2000, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) r5 = dup2(r4, r3) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0405"], 0x7) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xc, 0x3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ftruncate(r6, 0xc17a) setresuid(0x0, 0xee01, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000200)=""/188) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000400)={@any, 0x6, 0xdc41, 0x3, 0x8, 0x9, "14f6fc4c6d0d6775c60f42204b5e3a1f290cb5fec7ea0dda1f35283622565c453e9f9db53b64bbf4d7a0c2a4a3bc9d1ef9e3b5c547da67c199593473ea3b12fb239111133803f4c16a2299d630db31da8c9aff5713ecc610e941ef03844af88aabda3e0a5f54f57c297a00c07b1cc5e9e2c74f143c7ebe778d6a36c4e0de0747"}) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x0, &(0x7f0000000140)=0x100, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xaa}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) 127.522281ms ago: executing program 6 (id=3567): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x48, 0x10, 0x401, 0x0, 0xfffffffc, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}]}, 0x48}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x1, 0x0) (async) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@dev, 0x4e22, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2e}, {}, {0x0, 0x3e3}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0x4}}, 0xe8) write$FUSE_ATTR(r3, &(0x7f0000000180)={0x78, 0x0, 0x0, {0x4db, 0x19, 0x0, {0x3, 0x2a, 0x3, 0x200, 0x5, 0x4, 0x8, 0xac, 0x5, 0x0, 0x1, 0xee00, 0x0, 0xb3, 0x1}}}, 0x78) (async) write$FUSE_ATTR(r3, &(0x7f0000000180)={0x78, 0x0, 0x0, {0x4db, 0x19, 0x0, {0x3, 0x2a, 0x3, 0x200, 0x5, 0x4, 0x8, 0xac, 0x5, 0x0, 0x1, 0xee00, 0x0, 0xb3, 0x1}}}, 0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x700, 0x6, 0x7f, 0x4, {{0xa, 0x4, 0x3, 0x6, 0x28, 0x64, 0x0, 0x6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@generic={0x82, 0x6, "944d49e3"}, @timestamp={0x44, 0xc, 0xbe, 0x0, 0x0, [0x800, 0x1]}]}}}}}) syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') (async) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r7, 0x0, 0x42, 0x0, &(0x7f0000000180)) preadv(r6, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0x0, 0xa8}, 0xc) (async) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0x0, 0xa8}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r9, 0x2, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000740)={r10, 0x0, 0x0, 0x4}, 0x20) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000740)={r10, 0x0, 0x0, 0x4}, 0x20) r11 = signalfd4(r6, &(0x7f00000005c0)={[0x8]}, 0x8, 0x80800) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e00000008000000e0000000a00e000001000000", @ANYRES32=r11, @ANYBLOB="000100"/20, @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="0100000002000000010000000900000000008563d48433105dcb3b36"], 0x50) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e00000008000000e0000000a00e000001000000", @ANYRES32=r11, @ANYBLOB="000100"/20, @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="0100000002000000010000000900000000008563d48433105dcb3b36"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = syz_open_dev$mouse(&(0x7f0000000540), 0x6, 0xa41c2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x9, &(0x7f0000000180)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff9}, @generic={0x0, 0x9, 0xa, 0x99c5, 0x7}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], &(0x7f0000000100)='GPL\x00', 0x6, 0x67, &(0x7f0000000340)=""/103, 0x41000, 0x21, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000480)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x8, 0x4, 0x65b2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r8, r10, r12, r13], 0x0, 0x10, 0x1}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x9, &(0x7f0000000180)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff9}, @generic={0x0, 0x9, 0xa, 0x99c5, 0x7}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], &(0x7f0000000100)='GPL\x00', 0x6, 0x67, &(0x7f0000000340)=""/103, 0x41000, 0x21, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000480)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x8, 0x4, 0x65b2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r8, r10, r12, r13], 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 126.889384ms ago: executing program 6 (id=3568): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcff"], 0x509) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1900000200000000000000000000000085000000a000000018f60000", @ANYRES16, @ANYRES8=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') (async) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcff"], 0x509) (async) close(r1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1900000200000000000000000000000085000000a000000018f60000", @ANYRES16, @ANYRES8=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) (async) 63.697381ms ago: executing program 2 (id=3569): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000002100010000000000fddbdf25fc000000000000000000000000000001fc020000000000000000000000000001fffc0000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000005000118400000000000009000000ffff7f00000100000000000000000000ffff0a01010264010102000000000000000000000000e00000010000000000000000000000003c00000000000000020008002c001300ff010000000000000000000000000001fe8000000000000000000000000000bb0000000002"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x42000) 62.803696ms ago: executing program 6 (id=3570): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) write(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffffffffffffffe) 62.500096ms ago: executing program 2 (id=3571): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) (async) close(r0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) (async) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f00000000c0)={0xffffffff, 0x10001, 0x1a0, 0xfffffffffffffffd, 0x8000000, 0x1000}) (async) pread64(r1, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 214.798µs ago: executing program 2 (id=3572): r0 = syz_io_uring_setup(0x111, &(0x7f00000003c0)={0x0, 0xf5cc, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r0, 0x66a8, 0x9c65, 0xf, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="da421a1937ae9ebcd1f386d276a7c3798b41205f83ea267c29d2a9c555110313e0fb43cb0c0e9cf580693a22e4c6bc40b30f8de568cb6a21aac1dd28aa325492398beb864d4788330e8068cdfd28b6b49123656a8a9fcd8a84d8a692eeb70d65c309555edc8fc2ce07ed2c7a5ed2044e447b39869dce1a24f7daf7bd777fab5d8a3cbdb76c9e59973267615db4b50a48c86973133ccffd4316146e3a8dec2f", @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 0s ago: executing program 6 (id=3573): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) creat(&(0x7f0000000180)='./file0\x00', 0x10) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fanotify_init(0x10, 0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r3, 0x41, 0x8000038, r4, 0x0) fanotify_mark(r3, 0x80, 0x0, r4, 0x0) sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @bcast, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80", @ANYRES32=r6], 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) kernel console output (not intermixed with test programs): n invalid length. [ 295.367832][T16163] netlink: 'syz.9.2889': attribute type 1 has an invalid length. [ 295.371563][T16163] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 295.418782][ T53] usb 9-1: GET_CAPABILITIES returned 0 [ 295.424186][ T53] usbtmc 9-1:16.0: can't read capabilities [ 295.741995][ T7076] usb 9-1: USB disconnect, device number 15 [ 295.813772][T16147] syz.3.2885 (16147): drop_caches: 1 [ 295.995528][T16147] syz.3.2885 (16147): drop_caches: 1 [ 296.393224][T16190] loop2: detected capacity change from 0 to 7 [ 296.396673][T16190] Dev loop2: unable to read RDB block 7 [ 296.400238][T16190] loop2: unable to read partition table [ 296.402924][T16190] loop2: partition table beyond EOD, truncated [ 296.405442][T16190] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 296.586896][T16211] Invalid ELF header type: 0 != 1 [ 296.624658][ T64] Bluetooth: hci3: command 0x1003 tx timeout [ 296.627669][ T5957] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 296.660400][T16218] loop2: detected capacity change from 0 to 7 [ 296.663723][T16218] Dev loop2: unable to read RDB block 7 [ 296.673717][T16218] loop2: unable to read partition table [ 296.676384][T16218] loop2: partition table beyond EOD, truncated [ 296.679511][T16218] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 296.705702][T16226] binder: BC_ATTEMPT_ACQUIRE not supported [ 296.707743][T16226] binder: 16224:16226 ioctl c0306201 2000000001c0 returned -22 [ 296.713377][T16228] syz_tun: refused to change device tx_queue_len [ 296.737078][T16231] __nla_validate_parse: 7 callbacks suppressed [ 296.737105][T16231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2911'. [ 296.745667][T16231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2911'. [ 296.748805][T16231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2911'. [ 296.766518][T16233] netlink: 'syz.4.2912': attribute type 3 has an invalid length. [ 296.769830][T16233] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2912'. [ 296.883950][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2915'. [ 297.050867][T16252] netlink: zone id is out of range [ 297.054770][T16252] netlink: get zone limit has 4 unknown bytes [ 297.291594][T16264] loop2: detected capacity change from 0 to 7 [ 297.294749][T16264] Dev loop2: unable to read RDB block 7 [ 297.297397][T16264] loop2: unable to read partition table [ 297.300274][T16264] loop2: partition table beyond EOD, truncated [ 297.302915][T16264] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 297.392357][T16273] tipc: Enabled bearer , priority 10 [ 297.452104][T16273] overlayfs: missing 'lowerdir' [ 297.491468][T16285] program syz.9.2924 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.596250][T16291] netlink: 'syz.3.2926': attribute type 8 has an invalid length. [ 297.597162][T16285] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 297.599917][T16291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2926'. [ 297.662275][T16298] loop2: detected capacity change from 0 to 7 [ 297.665638][T16298] Dev loop2: unable to read RDB block 7 [ 297.671368][T16298] loop2: unable to read partition table [ 297.673874][T16298] loop2: partition table beyond EOD, truncated [ 297.676618][T16298] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 297.734466][T16308] block nbd3: Dead connection, failed to find a fallback [ 297.740589][T16308] block nbd3: shutting down sockets [ 297.748500][T16308] ldm_validate_partition_table(): Disk read failed. [ 297.751815][T16308] Dev nbd3: unable to read RDB block 0 [ 297.754722][T16308] nbd3: unable to read partition table [ 297.801040][T16313] fuse: Unknown parameter 'uid>00000000000000000000' [ 297.883527][ T5957] Bluetooth: hci6: SCO packet for unknown connection handle 201 [ 297.922318][T16337] loop2: detected capacity change from 0 to 7 [ 297.923461][T16338] hugetlbfs: Unknown parameter 'nr_inodes58<' [ 297.925242][T16337] Dev loop2: unable to read RDB block 7 [ 297.932292][T16337] loop2: unable to read partition table [ 297.934490][T16337] loop2: partition table beyond EOD, truncated [ 297.937070][T16337] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 298.087288][T16369] ubi31: attaching mtd0 [ 298.095555][T16369] ubi31: scanning is finished [ 298.097135][T16369] ubi31: empty MTD device detected [ 298.163998][T16366] netlink: 'syz.9.2949': attribute type 2 has an invalid length. [ 298.165008][ T53] e1000 0000:00:06.0 eth0: Reset adapter [ 298.167382][T16366] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2949'. [ 298.222359][T16369] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 298.225362][T16369] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 298.227842][T16369] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 298.232793][T16382] loop2: detected capacity change from 0 to 7 [ 298.234375][T16369] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 298.237039][T16382] Dev loop2: unable to read RDB block 7 [ 298.239104][T16369] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 298.240836][T16382] loop2: unable to read partition table [ 298.244109][T16369] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 298.246295][T16382] loop2: partition table beyond EOD, truncated [ 298.251850][T16369] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2004292654 [ 298.253406][T16382] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 298.257820][T16369] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 298.269157][T16381] ubi31: background thread "ubi_bgt31d" started, PID 16381 [ 298.272408][T16384] tmpfs: Unknown parameter 'nr_inod q'";YdՂ' [ 298.324204][ T53] e1000 0000:00:06.0 eth0: Reset adapter [ 300.645713][ T53] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 301.006258][ T40] kauditd_printk_skb: 144 callbacks suppressed [ 301.006272][ T40] audit: type=1400 audit(543.322:52773): avc: denied { create } for pid=16394 comm="syz.1.2958" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 301.019645][ T40] audit: type=1400 audit(543.332:52774): avc: denied { create } for pid=16393 comm="syz.4.2957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 301.037940][ T40] audit: type=1400 audit(543.332:52775): avc: denied { write } for pid=16393 comm="syz.4.2957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 301.044550][ T40] audit: type=1400 audit(543.332:52776): avc: denied { nlmsg_write } for pid=16393 comm="syz.4.2957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 301.051475][ T40] audit: type=1400 audit(543.332:52777): avc: denied { open } for pid=16399 comm="syz.3.2959" path="/dev/ptyqa" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 301.058958][ T40] audit: type=1400 audit(543.332:52778): avc: denied { mounton } for pid=16394 comm="syz.1.2958" path="/143/file0" dev="tmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 301.066450][ T40] audit: type=1400 audit(543.341:52779): avc: denied { write } for pid=16399 comm="syz.3.2959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 301.074760][ T40] audit: type=1400 audit(543.341:52780): avc: denied { read } for pid=16399 comm="syz.3.2959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 301.081319][ T40] audit: type=1400 audit(543.341:52781): avc: denied { execute } for pid=16399 comm="syz.3.2959" name="file0" dev="tmpfs" ino=1615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 301.088969][ T40] audit: type=1400 audit(543.341:52782): avc: denied { create } for pid=16399 comm="syz.3.2959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 302.908898][T16413] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2963'. [ 302.939061][T16417] loop2: detected capacity change from 0 to 7 [ 302.942642][T16417] Dev loop2: unable to read RDB block 7 [ 302.945094][T16417] loop2: unable to read partition table [ 302.947646][T16417] loop2: partition table beyond EOD, truncated [ 302.950533][T16417] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 302.988756][T16419] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2966'. [ 303.040439][ T5988] hid-generic 0005:00B6:0009.0014: unknown main item tag 0x0 [ 303.043017][ T5988] hid-generic 0005:00B6:0009.0014: unknown main item tag 0x0 [ 303.045501][ T5988] hid-generic 0005:00B6:0009.0014: unknown main item tag 0x0 [ 303.048067][ T5988] hid-generic 0005:00B6:0009.0014: unknown main item tag 0x0 [ 303.050816][ T5988] hid-generic 0005:00B6:0009.0014: unknown main item tag 0x0 [ 303.055872][ T5988] hid-generic 0005:00B6:0009.0014: unknown main item tag 0x0 [ 303.058665][ T5988] hid-generic 0005:00B6:0009.0014: unknown main item tag 0x0 [ 303.061308][ T5988] hid-generic 0005:00B6:0009.0014: unknown main item tag 0x0 [ 303.063668][ T5988] hid-generic 0005:00B6:0009.0014: unknown main item tag 0x0 [ 303.065930][ T5988] hid-generic 0005:00B6:0009.0014: unknown main item tag 0x0 [ 303.076963][T16426] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2969'. [ 303.080976][T16426] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2969'. [ 303.092767][ T5988] hid-generic 0005:00B6:0009.0014: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 303.210845][T16437] tmpfs: Cannot change global quota limit on remount [ 303.285283][T16444] loop2: detected capacity change from 0 to 7 [ 303.290290][T16444] Dev loop2: unable to read RDB block 7 [ 303.292537][T16444] loop2: unable to read partition table [ 303.294924][T16444] loop2: partition table beyond EOD, truncated [ 303.299203][T16444] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 303.355429][T16449] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 303.413527][T16452] bridge_slave_1: left allmulticast mode [ 303.445376][T16452] bridge_slave_1: left promiscuous mode [ 303.447346][T16452] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.453235][T16452] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 303.567360][T16454] vlan0: entered promiscuous mode [ 303.569244][T16454] vlan0: entered allmulticast mode [ 303.571136][T16454] hsr_slave_1: entered allmulticast mode [ 303.636374][T16455] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2979'. [ 303.879217][T16464] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2982'. [ 303.917124][T16466] ip6gre0: entered promiscuous mode [ 303.920470][T16466] team0: Device ip6gre0 is of different type [ 304.085859][T16472] loop2: detected capacity change from 0 to 7 [ 304.088708][T16472] Dev loop2: unable to read RDB block 7 [ 304.090788][T16472] loop2: unable to read partition table [ 304.093094][T16472] loop2: partition table beyond EOD, truncated [ 304.095451][T16472] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 305.289241][T16570] loop2: detected capacity change from 0 to 7 [ 305.292825][T16570] Dev loop2: unable to read RDB block 7 [ 305.295979][T16570] loop2: unable to read partition table [ 305.298765][T16570] loop2: partition table beyond EOD, truncated [ 305.301639][T16570] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 305.342774][T16576] futex_wake_op: syz.3.2996 tries to shift op by -1; fix this program [ 305.348889][T16576] netlink: 'syz.3.2996': attribute type 16 has an invalid length. [ 305.357059][T16576] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2996'. [ 305.535973][T16607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3008'. [ 305.545759][T16606] loop2: detected capacity change from 0 to 7 [ 305.549666][T16606] Dev loop2: unable to read RDB block 7 [ 305.552260][T16606] loop2: unable to read partition table [ 305.555924][T16606] loop2: partition table beyond EOD, truncated [ 305.557393][T16607] 8021q: adding VLAN 0 to HW filter on device bond6 [ 305.558210][T16606] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 305.567361][T16607] bond0: (slave bond6): Enslaving as an active interface with an up link [ 305.600620][T16620] Cannot find del_set index 4 as target [ 305.859716][T16647] netlink: 'syz.1.3016': attribute type 10 has an invalid length. [ 305.862558][T16647] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3016'. [ 305.874371][T16649] loop2: detected capacity change from 0 to 7 [ 305.879007][T16649] Dev loop2: unable to read RDB block 7 [ 305.881052][T16649] loop2: unable to read partition table [ 305.882961][T16649] loop2: partition table beyond EOD, truncated [ 305.885081][T16649] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 305.888400][T16645] syzkaller0: entered promiscuous mode [ 305.888424][T16645] syzkaller0: entered allmulticast mode [ 305.939261][T16651] netlink: 'syz.9.3021': attribute type 1 has an invalid length. [ 305.942203][T16651] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3021'. [ 305.951253][T16651] netlink: 'syz.9.3021': attribute type 1 has an invalid length. [ 305.951308][ T61] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.956871][ T61] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.960487][ T61] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.963927][ T61] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.415591][ T35] block nbd0: Possible stuck request ffff888028250000: control (read@0,1024B). Runtime 150 seconds [ 307.420105][ T35] block nbd0: Possible stuck request ffff888028250200: control (read@1024,1024B). Runtime 150 seconds [ 307.423989][ T35] block nbd0: Possible stuck request ffff888028250400: control (read@2048,1024B). Runtime 150 seconds [ 307.428236][ T35] block nbd0: Possible stuck request ffff888028250600: control (read@3072,1024B). Runtime 150 seconds [ 308.157882][T16675] loop2: detected capacity change from 0 to 7 [ 308.161017][T16675] Dev loop2: unable to read RDB block 7 [ 308.163723][T16675] loop2: unable to read partition table [ 308.166514][T16675] loop2: partition table beyond EOD, truncated [ 308.169019][T16675] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 308.240931][T16681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16681 comm=syz.3.3031 [ 308.268952][ T40] kauditd_printk_skb: 169 callbacks suppressed [ 308.268970][ T40] audit: type=1400 audit(550.110:52952): avc: denied { create } for pid=16682 comm="syz.4.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 308.282666][ T40] audit: type=1400 audit(550.120:52953): avc: denied { ioctl } for pid=16682 comm="syz.4.3032" path="socket:[76904]" dev="sockfs" ino=76904 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 308.297779][ T40] audit: type=1400 audit(550.138:52954): avc: denied { unlink } for pid=16685 comm="syz.9.3033" name="#53" dev="tmpfs" ino=2758 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 308.309710][ T40] audit: type=1400 audit(550.138:52955): avc: denied { mount } for pid=16685 comm="syz.9.3033" name="/" dev="overlay" ino=2753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 308.347500][T16686] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 308.354519][T16686] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 308.355936][ T40] audit: type=1400 audit(550.157:52956): avc: denied { mount } for pid=16685 comm="syz.9.3033" name="/" dev="autofs" ino=74126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 308.381957][ T40] audit: type=1400 audit(550.157:52957): avc: denied { create } for pid=16680 comm="syz.3.3031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 308.387879][T16686] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 308.392969][T16690] netlink: 'syz.3.3031': attribute type 1 has an invalid length. [ 308.396446][ T40] audit: type=1400 audit(550.157:52958): avc: denied { bind } for pid=16680 comm="syz.3.3031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 308.417230][ T40] audit: type=1400 audit(550.157:52959): avc: denied { module_request } for pid=16680 comm="syz.3.3031" kmod="crypto-sha256-mb" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 308.472577][ T40] audit: type=1400 audit(550.297:52960): avc: denied { unmount } for pid=10576 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 308.506023][ T40] audit: type=1400 audit(550.316:52961): avc: denied { execute } for pid=16692 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 308.571590][T16699] netlink: 'syz.9.3038': attribute type 1 has an invalid length. [ 308.587283][T16699] 8021q: adding VLAN 0 to HW filter on device bond7 [ 308.601956][T16699] bond7: option tlb_dynamic_lb: unable to set because the bond device is up [ 308.613565][T16699] netlink: 'syz.9.3038': attribute type 8 has an invalid length. [ 308.617347][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.626321][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.631239][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.668273][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.678488][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 308.734837][T16701] xfrm0 speed is unknown, defaulting to 1000 [ 308.800352][T16712] loop2: detected capacity change from 0 to 7 [ 308.802926][T16712] Dev loop2: unable to read RDB block 7 [ 308.810793][T16712] loop2: unable to read partition table [ 308.813013][T16712] loop2: partition table beyond EOD, truncated [ 308.815174][T16712] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 308.868718][T16701] chnl_net:caif_netlink_parms(): no params data found [ 308.973945][T16724] __nla_validate_parse: 2 callbacks suppressed [ 308.973965][T16724] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3044'. [ 308.982641][T16724] FAT-fs (nullb0): bogus number of reserved sectors [ 308.982670][T16701] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.985419][T16724] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 308.992635][T16701] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.994938][T16701] bridge_slave_0: entered allmulticast mode [ 308.997914][T16701] bridge_slave_0: entered promiscuous mode [ 309.011575][T16701] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.018995][T16701] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.022045][T16701] bridge_slave_1: entered allmulticast mode [ 309.025898][T16701] bridge_slave_1: entered promiscuous mode [ 309.054736][T16701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.060242][T16726] 9pnet_fd: p9_fd_create_tcp (16726): problem binding to privport [ 309.065124][T16701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.084841][T16701] team0: Port device team_slave_0 added [ 309.090752][T16701] team0: Port device team_slave_1 added [ 309.132200][T16701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.139200][T16701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.154436][T16701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.161459][T16701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.163854][T16701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.164277][T16730] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3046'. [ 309.173121][T16701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.213051][T16701] hsr_slave_0: entered promiscuous mode [ 309.215436][T16701] hsr_slave_1: entered promiscuous mode [ 309.217636][T16701] debugfs: 'hsr0' already exists in 'hsr' [ 309.219533][T16701] Cannot create hsr debugfs directory [ 309.242509][T16732] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 309.304168][T16734] loop2: detected capacity change from 0 to 7 [ 309.318718][T16734] Dev loop2: unable to read RDB block 7 [ 309.320701][T16734] loop2: unable to read partition table [ 309.322845][T16734] loop2: partition table beyond EOD, truncated [ 309.325002][T16734] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 309.432552][T16735] SELinux: Context is not valid (left unmapped). [ 309.435857][T16735] SELinux: Context is not valid (left unmapped). [ 309.579575][T16749] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3054'. [ 309.583833][T16749] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3054'. [ 309.648488][T16765] loop2: detected capacity change from 0 to 7 [ 309.649275][T16760] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 309.653379][T16765] Dev loop2: unable to read RDB block 7 [ 309.655789][T16760] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 309.657029][T16765] loop2: unable to read partition table [ 309.662192][T16760] UDF-fs: warning (device nbd9): udf_load_vrs: No anchor found [ 309.667945][T16765] loop2: partition table beyond EOD, truncated [ 309.670852][T16765] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 309.670906][T16760] UDF-fs: Scanning with blocksize 512 failed [ 309.678514][T16760] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 309.681897][T16760] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 309.685245][T16760] UDF-fs: warning (device nbd9): udf_load_vrs: No anchor found [ 309.687621][T16760] UDF-fs: Scanning with blocksize 1024 failed [ 309.690584][T16760] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 309.694271][T16760] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 309.697675][T16760] UDF-fs: warning (device nbd9): udf_load_vrs: No anchor found [ 309.700508][T16760] UDF-fs: Scanning with blocksize 2048 failed [ 309.703114][T16760] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 309.706830][T16760] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 309.710403][T16760] UDF-fs: warning (device nbd9): udf_load_vrs: No anchor found [ 309.713162][T16760] UDF-fs: Scanning with blocksize 4096 failed [ 309.718183][T16760] UDF-fs: warning (device nbd9): udf_fill_super: No partition found (1) [ 309.751963][ T4359] Bluetooth: (null): Too short H5 packet [ 309.754916][ T4359] Bluetooth: (null): Invalid header checksum [ 309.761834][T16767] netlink: 'syz.4.3059': attribute type 10 has an invalid length. [ 309.768754][T16767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.774012][T16767] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 309.937245][T16701] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 309.948049][T16701] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 309.949045][T16781] NILFS (nbd4): device size too small [ 309.958885][T16701] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 309.976131][T16701] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 310.056561][T16701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.061095][T16798] loop2: detected capacity change from 0 to 7 [ 310.064510][T16798] Dev loop2: unable to read RDB block 7 [ 310.066573][T16701] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.066922][T16798] loop2: unable to read partition table [ 310.072980][T16798] loop2: partition table beyond EOD, truncated [ 310.075281][ T219] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.075895][T16798] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 310.078501][ T219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.100724][ T4359] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.103998][ T4359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.132781][T16801] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3068'. [ 310.280274][T16816] SQUASHFS error: Failed to read block 0x0: -5 [ 310.285652][T16816] unable to read squashfs_super_block [ 310.298029][T16701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.349179][T16701] veth0_vlan: entered promiscuous mode [ 310.365525][T16701] veth1_vlan: entered promiscuous mode [ 310.390736][T16701] veth0_macvtap: entered promiscuous mode [ 310.397113][T16701] veth1_macvtap: entered promiscuous mode [ 310.410772][T16701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.419849][T16701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.430054][T10897] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.434423][T10897] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.439172][T10897] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.445652][T10897] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.509019][T10900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.511696][T10900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.541211][T10900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.543977][T10900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.607099][T16825] Device name not specified. [ 310.607099][T16825] [ 310.647484][T16827] loop2: detected capacity change from 0 to 7 [ 310.651172][T16827] Dev loop2: unable to read RDB block 7 [ 310.653868][T16827] loop2: unable to read partition table [ 310.656449][T16827] loop2: partition table beyond EOD, truncated [ 310.659327][T16827] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 310.701389][T16829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3076'. [ 310.912175][ T5957] Bluetooth: hci3: command tx timeout [ 310.979269][T16847] tipc: Failed to obtain node identity [ 310.982059][T16847] tipc: Enabling of bearer rejected, failed to enable media [ 311.032992][T16849] loop2: detected capacity change from 0 to 7 [ 311.036797][T16849] Dev loop2: unable to read RDB block 7 [ 311.039501][T16849] loop2: unable to read partition table [ 311.042363][T16849] loop2: partition table beyond EOD, truncated [ 311.045071][T16849] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 311.478871][T16873] SELinux: policydb version -2028895168 does not match my version range 15-35 [ 311.483007][T16873] SELinux: failed to load policy [ 311.531964][T16872] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3090'. [ 311.827506][T16885] netlink: 'syz.9.3093': attribute type 1 has an invalid length. [ 311.854989][T16885] 8021q: adding VLAN 0 to HW filter on device bond8 [ 311.991280][T16888] comedi comedi3: comedi_config --init_data is deprecated [ 311.996026][T16888] comedi comedi3: comedi_config --init_data is deprecated [ 312.125624][T16895] loop2: detected capacity change from 0 to 7 [ 312.128778][T16895] Dev loop2: unable to read RDB block 7 [ 312.130698][T16895] loop2: unable to read partition table [ 312.134656][T16895] loop2: partition table beyond EOD, truncated [ 312.136833][T16895] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 312.452409][ T6019] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 312.624922][ T6019] usb 5-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 312.628387][ T6019] usb 5-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 312.631829][ T6019] usb 5-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 312.636169][ T6019] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 312.639037][ T6019] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 312.641572][ T6019] usb 5-1: Product: syz [ 312.643129][ T6019] usb 5-1: Manufacturer: syz [ 312.898406][T16897] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1885136569 (60324370208 ns) > initial count (9117579936 ns). Using initial count to start timer. [ 312.978573][ T6019] usb 5-1: USB disconnect, device number 7 [ 313.136718][ T5957] Bluetooth: hci3: command tx timeout [ 313.684187][ T40] kauditd_printk_skb: 217 callbacks suppressed [ 313.684206][ T40] audit: type=1400 audit(555.178:53179): avc: denied { create } for pid=16913 comm="syz.3.3104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 313.695171][ T40] audit: type=1400 audit(555.178:53180): avc: denied { bind } for pid=16913 comm="syz.3.3104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 313.701172][ T40] audit: type=1400 audit(555.178:53181): avc: denied { accept } for pid=16913 comm="syz.3.3104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 313.708446][ T40] audit: type=1400 audit(555.178:53182): avc: denied { write } for pid=16913 comm="syz.3.3104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 313.717687][ T40] audit: type=1400 audit(555.178:53183): avc: denied { watch watch_reads } for pid=16913 comm="syz.3.3104" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 313.726915][ T40] audit: type=1400 audit(555.178:53184): avc: denied { execute } for pid=16913 comm="syz.3.3104" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 313.733892][ T40] audit: type=1400 audit(555.178:53185): avc: denied { execute_no_trans } for pid=16913 comm="syz.3.3104" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 313.742068][T16916] netlink: 'syz.3.3105': attribute type 12 has an invalid length. [ 313.811187][ T40] audit: type=1400 audit(555.300:53186): avc: denied { map } for pid=16915 comm="syz.3.3105" path="socket:[77835]" dev="sockfs" ino=77835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 313.844232][ T40] audit: type=1400 audit(555.328:53187): avc: denied { read write } for pid=16701 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 313.854681][ T40] audit: type=1400 audit(555.328:53188): avc: denied { open } for pid=16701 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.127560][T16923] netlink: 'syz.0.3106': attribute type 1 has an invalid length. [ 314.138848][T16923] vlan2: entered promiscuous mode [ 314.153703][T16923] gretap1: entered promiscuous mode [ 314.325148][T16934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3109'. [ 314.325265][T16935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3109'. [ 314.379443][T16940] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 314.382036][T16940] IPv6: NLM_F_CREATE should be set when creating new route [ 314.440165][T16941] program syz.0.3110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.440410][T16940] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.446534][T16941] qnx4: unable to read the superblock [ 314.447473][T16940] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.541182][T16940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.555865][T16940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.665207][T10887] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.668462][T16944] blk_print_req_error: 64 callbacks suppressed [ 314.668484][T16944] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.669578][T10887] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.672078][T16944] buffer_io_error: 70 callbacks suppressed [ 314.672090][T16944] Buffer I/O error on dev nbd3, logical block 0, async page read [ 314.672164][T16944] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.676376][T10887] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.682903][T16944] Buffer I/O error on dev nbd3, logical block 1, async page read [ 314.685992][T10887] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.689236][T16944] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.689268][T16944] Buffer I/O error on dev nbd3, logical block 2, async page read [ 314.689304][T16944] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.689327][T16944] Buffer I/O error on dev nbd3, logical block 3, async page read [ 314.689374][T16944] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.689395][T16944] Buffer I/O error on dev nbd3, logical block 0, async page read [ 314.689427][T16944] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.689446][T16944] Buffer I/O error on dev nbd3, logical block 1, async page read [ 314.689478][T16944] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.689497][T16944] Buffer I/O error on dev nbd3, logical block 2, async page read [ 314.689529][T16944] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.734888][T16944] Buffer I/O error on dev nbd3, logical block 3, async page read [ 314.738249][T16944] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.743265][T16944] Buffer I/O error on dev nbd3, logical block 0, async page read [ 314.746311][T16944] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.749383][T16944] Buffer I/O error on dev nbd3, logical block 1, async page read [ 314.753171][T16944] ldm_validate_partition_table(): Disk read failed. [ 314.756091][T16944] Dev nbd3: unable to read RDB block 0 [ 314.759093][T16944] nbd3: unable to read partition table [ 314.764223][T16944] F2FS-fs (nbd3): Unable to read 1th superblock [ 314.766490][T16944] F2FS-fs (nbd3): Unable to read 2th superblock [ 314.973484][T16959] loop2: detected capacity change from 0 to 7 [ 314.976006][T16959] Dev loop2: unable to read RDB block 7 [ 314.977783][T16959] loop2: unable to read partition table [ 314.979632][T16959] loop2: partition table beyond EOD, truncated [ 314.981730][T16959] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 315.361356][ T5957] Bluetooth: hci3: command tx timeout [ 315.895086][T16994] loop2: detected capacity change from 0 to 7 [ 315.899290][T16994] Dev loop2: unable to read RDB block 7 [ 315.901767][T16994] loop2: unable to read partition table [ 315.904185][T16994] loop2: partition table beyond EOD, truncated [ 315.906825][T16994] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 316.208098][ T6019] libceph: connect (1)[c::]:6789 error -101 [ 316.210803][ T6019] libceph: mon0 (1)[c::]:6789 connect error [ 316.391216][T16979] ceph: No mds server is up or the cluster is laggy [ 316.507050][ T6019] libceph: connect (1)[c::]:6789 error -101 [ 316.510676][ T6019] libceph: mon0 (1)[c::]:6789 connect error [ 317.033212][T17002] ceph: No mds server is up or the cluster is laggy [ 317.111133][T17013] o2cb: This node has not been configured. [ 317.113498][T17013] o2cb: Cluster check failed. Fix errors before retrying. [ 317.116109][T17013] (syz.0.3132,17013,0):user_dlm_register:674 ERROR: status = -22 [ 317.118480][T17013] (syz.0.3132,17013,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 317.190595][T17015] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 317.194389][ T6019] IPVS: starting estimator thread 0... [ 317.286371][T17017] IPVS: using max 24 ests per chain, 57600 per kthread [ 317.585752][ T5957] Bluetooth: hci3: command tx timeout [ 318.242374][T17022] loop2: detected capacity change from 0 to 7 [ 318.245483][T17022] Dev loop2: unable to read RDB block 7 [ 318.247873][T17022] loop2: unable to read partition table [ 318.250747][T17022] loop2: partition table beyond EOD, truncated [ 318.253451][T17022] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 318.294702][T17024] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3136'. [ 318.708251][T17031] bridge_slave_1: left allmulticast mode [ 318.710621][T17031] bridge_slave_1: left promiscuous mode [ 318.712752][T17031] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.940662][T17040] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3142'. [ 319.207129][T17047] loop2: detected capacity change from 0 to 7 [ 319.210590][T17047] Dev loop2: unable to read RDB block 7 [ 319.213514][T17047] loop2: unable to read partition table [ 319.215950][T17047] loop2: partition table beyond EOD, truncated [ 319.218792][T17047] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 319.263867][ T40] kauditd_printk_skb: 91 callbacks suppressed [ 319.263886][ T40] audit: type=1400 audit(560.386:53280): avc: denied { read write } for pid=17048 comm="syz.0.3146" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 319.278246][ T40] audit: type=1400 audit(560.386:53281): avc: denied { open } for pid=17048 comm="syz.0.3146" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 319.288591][ T40] audit: type=1400 audit(560.395:53282): avc: denied { mount } for pid=17048 comm="syz.0.3146" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 319.324634][ T40] audit: type=1400 audit(560.451:53283): avc: denied { write } for pid=17048 comm="syz.0.3146" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 319.334643][ T40] audit: type=1400 audit(560.451:53284): avc: denied { open } for pid=17048 comm="syz.0.3146" path="/41/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 319.345030][ T40] audit: type=1400 audit(560.451:53285): avc: denied { ioctl } for pid=17048 comm="syz.0.3146" path="/41/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 319.355317][ T40] audit: type=1400 audit(560.461:53286): avc: denied { unmount } for pid=16701 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 319.381699][T17052] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode [ 319.381744][ T40] audit: type=1400 audit(560.498:53287): avc: denied { setopt } for pid=17051 comm="syz.0.3147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 319.469172][ T40] audit: type=1400 audit(560.592:53288): avc: denied { getopt } for pid=17051 comm="syz.0.3147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 319.477666][ T40] audit: type=1400 audit(560.592:53289): avc: denied { read write } for pid=17051 comm="syz.0.3147" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 319.484982][ T7632] hid_parser_main: 4086 callbacks suppressed [ 319.484995][ T7632] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 319.499606][ T7632] hid-generic 0006:0000:0000.0015: hidraw1: VIRTUAL HID v0.07 Device [syz0] on syz1 [ 319.504852][T17053] mac80211_hwsim hwsim40 wlan0: left promiscuous mode [ 319.722342][T17064] tmpfs: Bad value for 'mpol' [ 319.726789][T17064] hsr_slave_0: left promiscuous mode [ 319.729544][T17064] hsr_slave_1: left promiscuous mode [ 320.416824][T17077] xfrm0 speed is unknown, defaulting to 1000 [ 320.543082][T17085] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3157'. [ 320.550477][T17085] /dev/sg0: Can't lookup blockdev [ 320.730176][ T6083] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 320.893229][ T6083] usb 9-1: config 128 has no interfaces? [ 320.898360][ T6083] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 320.904524][ T6083] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.908346][ T6083] usb 9-1: Product: syz [ 320.910466][ T6083] usb 9-1: Manufacturer: syz [ 320.913258][ T6083] usb 9-1: SerialNumber: syz [ 321.150768][ T839] usb 9-1: USB disconnect, device number 16 [ 321.783756][T17104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3164'. [ 321.784498][T17106] netlink: 'syz.4.3163': attribute type 1 has an invalid length. [ 321.808067][T17106] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3163'. [ 321.815048][T17104] macvlan2: entered promiscuous mode [ 321.817297][T17104] macvlan2: entered allmulticast mode [ 321.860345][T17109] tmpfs: Unknown parameter 'pol' [ 321.876838][T17109] No such timeout policy "syz1" [ 321.891199][T17110] openvswitch: netlink: IP tunnel TTL not specified. [ 322.103159][T17132] binder: 17131:17132 ioctl c0306201 200000000640 returned -22 [ 322.107968][T17132] loop6: detected capacity change from 0 to 524279808 [ 322.123913][T17134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.153736][T17132] loop6: detected capacity change from 524279808 to 1 [ 322.160314][T17132] Dev loop6: unable to read RDB block 1 [ 322.162648][T17132] loop6: unable to read partition table [ 322.165183][T17132] loop6: partition table beyond EOD, truncated [ 322.167956][T17132] loop_reread_partitions: partition scan of loop6 (u0v ) failed (rc=-5) [ 322.333824][T17146] exFAT-fs (nbd4): unable to read boot sector [ 322.337808][T17146] exFAT-fs (nbd4): failed to read boot sector [ 322.340556][T17146] exFAT-fs (nbd4): failed to recognize exfat type [ 322.486949][T17150] vivid-000: disconnect [ 322.489733][T17150] vivid-000: reconnect [ 322.537992][T17152] binder: 17151:17152 ioctl c0286405 200000000100 returned -22 [ 322.654052][T17158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3182'. [ 322.655934][ T839] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 322.661328][T17158] ptrace attach of "/syz-executor exec"[16701] was attempted by ""[17158] [ 322.815758][ T839] usb 9-1: Using ep0 maxpacket: 8 [ 322.820623][ T839] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 322.823752][ T839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.830441][ T839] pvrusb2: Hardware description: Terratec Grabster AV400 [ 322.832770][ T839] pvrusb2: ********** [ 322.834134][ T839] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 322.837627][ T839] pvrusb2: Important functionality might not be entirely working. [ 322.840414][ T839] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 322.843871][ T839] pvrusb2: ********** [ 323.043846][ T2489] pvrusb2: Invalid write control endpoint [ 323.078408][ T2489] pvrusb2: Invalid write control endpoint [ 323.080533][ T2489] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 323.083719][ T2489] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 323.086440][ T2489] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 323.089961][ T2489] pvrusb2: Device being rendered inoperable [ 323.092011][ T2489] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 323.094831][ T2489] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 323.097931][ T2489] pvrusb2: Attached sub-driver cx25840 [ 323.099837][ T2489] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 323.103363][ T2489] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 323.260199][T17148] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 323.268050][T17148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.272379][T17148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.293033][ T6083] usb 9-1: USB disconnect, device number 17 [ 323.592827][ T5957] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 323.684819][T17179] tmpfs: Unknown parameter 'usrqYYnbta_block' [ 323.686585][T17180] overlay: Unknown parameter 'obj_role' [ 323.739512][T17186] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 323.742633][T17186] ALSA: mixer_oss: invalid index 1374389 [ 323.966883][T17184] Device name cannot be null; rc = [-22] [ 324.155138][T17214] xfrm0 speed is unknown, defaulting to 1000 [ 324.260135][ T7632] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 324.423298][ T7632] usb 9-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 324.426909][ T7632] usb 9-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 324.430772][ T7632] usb 9-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 324.436055][ T7632] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 324.439460][ T7632] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 324.442574][ T7632] usb 9-1: Product: syz [ 324.444003][ T7632] usb 9-1: Manufacturer: syz [ 324.673814][ T7632] usb 9-1: USB disconnect, device number 18 [ 325.571208][ T40] kauditd_printk_skb: 139 callbacks suppressed [ 325.571228][ T40] audit: type=1400 audit(566.286:53429): avc: denied { create } for pid=17219 comm="syz.4.3197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 325.582935][ T40] audit: type=1400 audit(566.286:53430): avc: denied { create } for pid=17219 comm="syz.4.3197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 325.591644][ T40] audit: type=1400 audit(566.286:53431): avc: denied { create } for pid=17219 comm="syz.4.3197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 325.600133][ T40] audit: type=1400 audit(566.286:53432): avc: denied { read write } for pid=17219 comm="syz.4.3197" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 325.609347][ T40] audit: type=1400 audit(566.286:53433): avc: denied { open } for pid=17219 comm="syz.4.3197" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 325.620783][ T40] audit: type=1400 audit(566.333:53434): avc: denied { create } for pid=17222 comm="syz.4.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 325.629616][ T40] audit: type=1400 audit(566.333:53435): avc: denied { write } for pid=17222 comm="syz.4.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 325.631390][T17223] comedi comedi1: s526: I/O port conflict (0x9,64) [ 325.638357][ T40] audit: type=1400 audit(566.333:53436): avc: denied { read } for pid=17222 comm="syz.4.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 325.650667][ T40] audit: type=1400 audit(566.333:53437): avc: denied { mount } for pid=17222 comm="syz.4.3198" name="/" dev="9p" ino=71827647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 325.660200][ T40] audit: type=1400 audit(566.333:53438): avc: denied { ioctl } for pid=17222 comm="syz.4.3198" path="socket:[80120]" dev="sockfs" ino=80120 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 326.227680][ T64] Bluetooth: hci3: command 0x0405 tx timeout [ 326.720312][T17248] openvswitch: netlink: IP tunnel TTL not specified. [ 326.801514][T17250] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 326.918077][T17258] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3210'. [ 327.060791][T17266] 9p: Could not find request transport: virtic [ 327.125357][T17271] xfrm0 speed is unknown, defaulting to 1000 [ 327.568693][T17290] misc userio: Can't change port type on an already running userio instance [ 327.834460][T17294] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3220'. [ 328.235945][ T64] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 328.244341][ T64] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 328.248181][ T64] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 328.253124][ T64] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 328.256435][ T64] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 328.265184][T17306] can0: slcan on ttyS3. [ 328.291017][T17303] xfrm0 speed is unknown, defaulting to 1000 [ 328.346058][T17306] can0 (unregistered): slcan off ttyS3. [ 328.404974][T17303] chnl_net:caif_netlink_parms(): no params data found [ 328.489916][T17303] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.492762][T17303] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.495732][T17303] bridge_slave_0: entered allmulticast mode [ 328.498903][T17303] bridge_slave_0: entered promiscuous mode [ 328.502677][T17303] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.505093][T17303] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.507725][T17303] bridge_slave_1: entered allmulticast mode [ 328.510385][T17303] bridge_slave_1: entered promiscuous mode [ 328.531095][T17303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.539324][T17303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.568859][T17303] team0: Port device team_slave_0 added [ 328.575116][T17303] team0: Port device team_slave_1 added [ 328.603695][T17303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.606564][T17303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.617674][T17303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.624675][T17303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.627634][T17303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.639012][T17303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.660222][T17329] tmpfs: Unknown parameter 'nGswap' [ 328.665036][T17330] tmpfs: Unknown parameter 'nGswap' [ 328.685933][T17303] hsr_slave_0: entered promiscuous mode [ 328.690590][T17303] hsr_slave_1: entered promiscuous mode [ 328.694614][T17303] debugfs: 'hsr0' already exists in 'hsr' [ 328.697134][T17303] Cannot create hsr debugfs directory [ 328.770511][T17336] usb 1-1: USB disconnect, device number 2 [ 329.336498][T17303] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 329.342166][T17303] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 329.347343][T17303] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 329.353394][T17303] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 329.381667][T17303] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.385142][T17303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.388960][T17303] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.392523][T17303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.454093][T17303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.469604][ T1195] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.474947][ T1195] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.492581][T17303] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.500841][ T4359] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.502953][ T4359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.512016][ T1195] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.515302][ T1195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.709901][T17303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.931241][T17303] veth0_vlan: entered promiscuous mode [ 329.945480][T17303] veth1_vlan: entered promiscuous mode [ 329.978369][T17303] veth0_macvtap: entered promiscuous mode [ 329.986588][T17303] veth1_macvtap: entered promiscuous mode [ 329.997548][T17392] program syz.0.3245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.004056][T17392] program syz.0.3245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.006979][T17303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.023068][T17303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.037336][T10902] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.041175][T10902] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.059692][T10902] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.063528][T10902] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.116562][T17403] netlink: 'syz.0.3249': attribute type 1 has an invalid length. [ 330.154321][T17403] 8021q: adding VLAN 0 to HW filter on device bond2 [ 330.162872][T17404] gretap1: entered promiscuous mode [ 330.170672][T17404] bond2: (slave gretap1): making interface the new active one [ 330.175331][T17404] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 330.187606][T10887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.191257][T10887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.236275][T10897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.239404][T10897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.254278][T17411] ip6gretap1: entered promiscuous mode [ 330.256793][T17411] ip6gretap1: entered allmulticast mode [ 330.420934][ T5957] Bluetooth: hci6: command tx timeout [ 330.575572][T17446] kAFS: unable to lookup cell '(,cL' [ 330.578400][T17446] kAFS: unable to lookup cell '(,cL' [ 330.594656][T17446] tipc: Started in network mode [ 330.596243][T17446] tipc: Node identity 12afd13f2e65, cluster identity 4711 [ 330.598755][T17446] tipc: Enabled bearer , priority 0 [ 330.618374][T17445] tipc: Disabling bearer [ 330.646910][T17449] syzkaller0: entered promiscuous mode [ 330.649614][T17449] syzkaller0: entered allmulticast mode [ 330.769903][T17454] kAFS: unable to lookup cell '(,' [ 330.833092][T17458] tmpfs: Unknown parameter 'usrquota_inod_hardlimit' [ 330.875230][T17456] netlink: 'syz.4.3267': attribute type 10 has an invalid length. [ 330.878609][T17456] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3267'. [ 330.929527][ T40] kauditd_printk_skb: 139 callbacks suppressed [ 330.929542][ T40] audit: type=1400 audit(571.297:53578): avc: denied { create } for pid=17455 comm="syz.4.3267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 330.941269][ T40] audit: type=1400 audit(571.297:53579): avc: denied { setopt } for pid=17455 comm="syz.4.3267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 330.949913][ T40] audit: type=1400 audit(571.307:53580): avc: denied { write } for pid=17455 comm="syz.4.3267" name="vbi6" dev="devtmpfs" ino=1016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 330.958577][ T40] audit: type=1400 audit(571.307:53581): avc: denied { bind } for pid=17455 comm="syz.4.3267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 330.966479][ T40] audit: type=1400 audit(571.307:53582): avc: denied { map } for pid=17455 comm="syz.4.3267" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 330.974602][ T40] audit: type=1400 audit(571.307:53583): avc: denied { execute } for pid=17455 comm="syz.4.3267" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 330.983900][ T40] audit: type=1400 audit(571.307:53584): avc: denied { create } for pid=17455 comm="syz.4.3267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 330.994134][ T40] audit: type=1400 audit(571.316:53585): avc: denied { ioctl } for pid=17455 comm="syz.4.3267" path="socket:[78775]" dev="sockfs" ino=78775 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 331.109092][ T40] audit: type=1400 audit(571.466:53586): avc: denied { read } for pid=17475 comm="syz.0.3272" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 331.118493][ T40] audit: type=1400 audit(571.466:53587): avc: denied { open } for pid=17475 comm="syz.0.3272" path="/dev/input/event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 331.132606][T17476] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 331.149365][T17476] VFS: Can't find a romfs filesystem on dev nullb0. [ 331.149365][T17476] [ 331.154966][T17476] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3272'. [ 331.192859][T17482] netlink: 'syz.0.3275': attribute type 2 has an invalid length. [ 331.192881][T17482] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3275'. [ 331.196331][T17482] netlink: 'syz.0.3275': attribute type 9 has an invalid length. [ 331.241730][T17480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3274'. [ 331.288112][T17489] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3277'. [ 331.292896][T17489] unsupported nlmsg_type 40 [ 331.607219][T17513] usb usb7: usbfs: process 17513 (syz.4.3285) did not claim interface 2 before use [ 331.609193][T17515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3285'. [ 331.685516][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.688665][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.693808][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.697896][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.701465][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.709378][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.725026][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.728631][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.732506][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.739065][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.747465][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.750799][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.755009][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.762018][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.766331][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.771299][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.775199][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.779543][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.783218][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.788691][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.796072][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.800144][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.803738][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.807469][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.812570][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.817113][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.820750][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.832800][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.837571][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.850253][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.864465][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.868040][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.871830][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.879937][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.883670][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.887579][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.891618][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.895458][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.901995][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.906310][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.911007][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.914807][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.919904][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.922465][T17530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3289'. [ 331.927271][T17530] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3289'. [ 331.927723][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.936605][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.944717][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.948268][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.952403][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.956348][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.959779][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.963559][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.966542][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.970527][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.974462][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.977599][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.980524][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.983509][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.987343][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.990923][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.993975][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.996483][T17519] overlay: filesystem on ./bus not supported as upperdir [ 331.998996][T17519] overlay: filesystem on ./bus not supported as upperdir [ 332.001609][T17519] overlay: filesystem on ./bus not supported as upperdir [ 332.005581][T17519] overlay: filesystem on ./bus not supported as upperdir [ 332.202133][T17544] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 332.646295][ T5957] Bluetooth: hci6: command tx timeout [ 332.658688][ T64] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 332.663895][ T64] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 332.665025][T17577] binder: 17576:17577 ioctl c018620c 200000002480 returned -22 [ 332.670897][ T64] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 332.675412][ T64] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 332.679634][ T64] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 332.726611][T17574] xfrm0 speed is unknown, defaulting to 1000 [ 332.825405][T17574] chnl_net:caif_netlink_parms(): no params data found [ 332.894277][T17574] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.897471][T17574] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.900635][T17574] bridge_slave_0: entered allmulticast mode [ 332.904985][T17574] bridge_slave_0: entered promiscuous mode [ 332.910496][T17574] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.913836][T17574] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.916933][T17574] bridge_slave_1: entered allmulticast mode [ 332.921151][T17574] bridge_slave_1: entered promiscuous mode [ 332.945812][T17574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.950845][T17574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.976701][T17574] team0: Port device team_slave_0 added [ 332.982250][T17574] team0: Port device team_slave_1 added [ 333.008906][T17574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.011655][T17574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.019873][T17574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.025298][T17574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.027708][T17574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.039164][T17574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.075788][T17574] hsr_slave_0: entered promiscuous mode [ 333.079499][T17574] hsr_slave_1: entered promiscuous mode [ 333.082701][T17574] debugfs: 'hsr0' already exists in 'hsr' [ 333.085381][T17574] Cannot create hsr debugfs directory [ 333.731307][T17574] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 333.737031][T17574] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 333.742600][T17574] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 333.747327][T17574] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 333.765198][T17574] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.767715][T17574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.770456][T17574] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.773179][T17574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.816332][T17574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.826678][T10902] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.831035][T10902] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.847642][T17574] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.852713][T17617] serio: Serial port ptm0 [ 333.859086][ T1195] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.861626][ T1195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.872610][T10902] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.875837][T10902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.036846][T17574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.250985][T17574] veth0_vlan: entered promiscuous mode [ 334.267587][T17574] veth1_vlan: entered promiscuous mode [ 334.285314][T17649] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3319'. [ 334.306945][T17574] veth0_macvtap: entered promiscuous mode [ 334.315920][T17574] veth1_macvtap: entered promiscuous mode [ 334.353615][T17574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.369823][T17574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.389100][T10902] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.392955][T10902] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.402584][T10902] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.406342][T10902] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.491787][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.505426][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.519629][T17666] dlm: non-version read from control device 8224 [ 334.531307][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.534844][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.682551][T17676] SELinux: failed to load policy [ 334.685506][T17679] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3329'. [ 334.849819][T17687] netlink: 'syz.4.3334': attribute type 1 has an invalid length. [ 334.857762][T17689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.873585][T17689] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3335'. [ 334.880122][ T5957] Bluetooth: hci7: command tx timeout [ 334.880124][ T64] Bluetooth: hci6: command tx timeout [ 334.886763][T17687] bond7: entered promiscuous mode [ 334.889328][T17687] 8021q: adding VLAN 0 to HW filter on device bond7 [ 334.900961][T17689] xfrm1: entered promiscuous mode [ 334.909077][T17689] xfrm1: entered allmulticast mode [ 334.918463][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.925470][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.928716][T17687] bond7: (slave bridge2): making interface the new active one [ 334.932073][T17687] bridge2: entered promiscuous mode [ 334.932891][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.935662][T17687] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 334.938706][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.941435][T17687] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3334'. [ 334.950538][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.045821][T17691] xfrm0 speed is unknown, defaulting to 1000 [ 335.360361][T10895] bridge_slave_0: left allmulticast mode [ 335.363242][T10895] bridge_slave_0: left promiscuous mode [ 335.365781][T10895] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.446917][ T53] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 335.459252][T17727] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3346'. [ 335.574493][T10895] bond2 (unregistering): (slave gretap1): Releasing active interface [ 335.619466][ T53] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 335.622625][ T53] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.626114][ T53] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 335.632148][ T53] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.637193][ T53] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.642706][ T53] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 335.645717][ T53] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 335.648655][ T53] usb 11-1: Product: syz [ 335.650904][ T53] usb 11-1: Manufacturer: syz [ 335.657465][ T53] cdc_wdm 11-1:1.0: skipping garbage [ 335.659218][ T53] cdc_wdm 11-1:1.0: skipping garbage [ 335.662001][ T53] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 335.663973][ T53] cdc_wdm 11-1:1.0: Unknown control protocol [ 335.881350][T17713] netlink: 'syz.6.3343': attribute type 4 has an invalid length. [ 335.918296][T10895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.925945][T10895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.936756][T10895] bond0 (unregistering): Released all slaves [ 335.940228][T17737] netlink: 'syz.6.3343': attribute type 4 has an invalid length. [ 335.951255][T10895] bond1 (unregistering): Released all slaves [ 336.121232][T10895] bond2 (unregistering): Released all slaves [ 336.127719][T17691] chnl_net:caif_netlink_parms(): no params data found [ 336.156114][ T7632] usb 11-1: USB disconnect, device number 3 [ 336.214063][T10895] tipc: Left network mode [ 336.291463][ T40] kauditd_printk_skb: 215 callbacks suppressed [ 336.291474][ T40] audit: type=1400 audit(576.309:53803): avc: denied { unmount } for pid=17743 comm="syz.4.3351" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 336.344238][T17691] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.348425][T17691] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.351691][T17691] bridge_slave_0: entered allmulticast mode [ 336.356061][T17691] bridge_slave_0: entered promiscuous mode [ 336.415706][T17691] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.415856][ T40] audit: type=1400 audit(576.431:53804): avc: denied { create } for pid=17750 comm="syz.5.3353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 336.418812][T17691] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.419028][T17691] bridge_slave_1: entered allmulticast mode [ 336.430037][ T40] audit: type=1400 audit(576.449:53805): avc: denied { setopt } for pid=17750 comm="syz.5.3353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 336.436407][T17691] bridge_slave_1: entered promiscuous mode [ 336.455347][ T40] audit: type=1400 audit(576.468:53806): avc: denied { map } for pid=17750 comm="syz.5.3353" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 336.464173][ T40] audit: type=1400 audit(576.468:53807): avc: denied { mounton } for pid=17750 comm="syz.5.3353" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 336.470792][T17691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.475043][ T40] audit: type=1400 audit(576.468:53808): avc: denied { mount } for pid=17750 comm="syz.5.3353" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 336.482377][T17691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.487216][ T40] audit: type=1400 audit(576.468:53809): avc: denied { write } for pid=17750 comm="syz.5.3353" name="igmp" dev="proc" ino=4026535127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 336.501155][ T40] audit: type=1400 audit(576.468:53810): avc: denied { call } for pid=17750 comm="syz.5.3353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 336.507968][ T40] audit: type=1400 audit(576.468:53811): avc: denied { transfer } for pid=17750 comm="syz.5.3353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 336.516873][ T40] audit: type=1400 audit(576.468:53812): avc: denied { unmount } for pid=17750 comm="syz.5.3353" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 336.534231][T10895] hsr_slave_1: left promiscuous mode [ 336.537116][T10895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.543868][T10895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.823634][T17758] dns_resolver: Unsupported server list version (0) [ 337.029428][T17762] netlink: 'syz.6.3357': attribute type 21 has an invalid length. [ 337.032906][T17762] IPv6: NLM_F_CREATE should be specified when creating new route [ 337.094574][ T64] Bluetooth: hci6: command tx timeout [ 337.097567][ T5957] Bluetooth: hci7: command tx timeout [ 337.108604][T17766] netlink: 124 bytes leftover after parsing attributes in process `syz.6.3359'. [ 337.155707][T10895] team0 (unregistering): Port device team_slave_1 removed [ 337.197733][ T5957] Bluetooth: hci3: command tx timeout [ 337.218627][T10895] team0 (unregistering): Port device team_slave_0 removed [ 337.302087][T17774] ALSA: mixer_oss: invalid OSS volume '' [ 337.370816][T17775] program syz.6.3362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.388368][T17775] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input49 [ 337.775973][T17691] team0: Port device team_slave_0 added [ 337.797472][T17691] team0: Port device team_slave_1 added [ 337.815570][T17691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.818067][T17691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.826798][T17691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.831542][T17691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.834639][T17691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.843506][T17691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.912547][T17781] xfrm0 speed is unknown, defaulting to 1000 [ 337.919390][T17691] hsr_slave_0: entered promiscuous mode [ 337.922645][T17691] hsr_slave_1: entered promiscuous mode [ 337.925592][T17691] debugfs: 'hsr0' already exists in 'hsr' [ 337.928674][ T7632] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 337.934085][T17691] Cannot create hsr debugfs directory [ 338.129468][ T7632] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 338.141908][ T7632] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 338.147208][ T7632] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 338.151268][ T7632] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 338.157418][ T7632] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 338.161311][ T7632] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.167267][ T7632] usb 11-1: config 0 descriptor?? [ 338.222710][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 338.226169][ T64] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.234227][T17789] syzkaller0: entered promiscuous mode [ 338.234505][ T64] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.236763][T17789] syzkaller0: entered allmulticast mode [ 338.242602][ T64] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.251990][T17789] TC_ACT_REPEAT abuse ? [ 338.252777][ T64] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.256824][T10895] IPVS: stop unused estimator thread 0... [ 338.258116][T17789] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3368'. [ 338.263840][ T64] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.360554][T17790] xfrm0 speed is unknown, defaulting to 1000 [ 338.568172][T17798] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 338.575986][T17798] overlayfs: failed to set xattr on upper [ 338.579424][T17798] overlayfs: ...falling back to redirect_dir=nofollow. [ 338.586033][T17798] overlayfs: ...falling back to index=off. [ 338.588659][T17798] overlayfs: ...falling back to uuid=null. [ 338.592408][T17798] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 338.611371][ T7632] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 338.716646][T17790] chnl_net:caif_netlink_parms(): no params data found [ 338.734086][T17798] infiniband syz0: set active [ 338.740141][T17798] infiniband syz0: added bond_slave_0 [ 338.774681][T17798] RDS/IB: syz0: added [ 338.777248][T17798] smc: adding ib device syz0 with port count 1 [ 338.782759][T17798] smc: ib device syz0 port 1 has no pnetid [ 338.840641][T17691] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 338.845740][T17691] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 338.862121][T17790] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.865057][T17790] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.868012][T17790] bridge_slave_0: entered allmulticast mode [ 338.873393][T17790] bridge_slave_0: entered promiscuous mode [ 338.877926][T17691] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 338.897259][T17790] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.900414][T17790] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.904565][T17790] bridge_slave_1: entered allmulticast mode [ 338.908891][T17790] bridge_slave_1: entered promiscuous mode [ 338.914457][T17691] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 338.962532][T17790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.973662][T17790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.007470][T17790] team0: Port device team_slave_0 added [ 339.024286][T17790] team0: Port device team_slave_1 added [ 339.065899][T17790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.068356][T17790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.078171][T17790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.085742][T17790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.088658][T17790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.097577][T17790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.101910][T10895] bridge_slave_1: left allmulticast mode [ 339.104925][T10895] bridge_slave_1: left promiscuous mode [ 339.107243][T10895] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.112078][T10895] bridge_slave_0: left allmulticast mode [ 339.114294][T10895] bridge_slave_0: left promiscuous mode [ 339.116645][T10895] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.318998][ T5957] Bluetooth: hci7: command tx timeout [ 339.404927][ T5957] Bluetooth: hci3: command tx timeout [ 339.472494][ T6019] usb 11-1: USB disconnect, device number 4 [ 339.542417][T10895] bond7 (unregistering): (slave bridge2): Releasing backup interface [ 339.546510][T10895] bridge2 (unregistering): left promiscuous mode [ 339.575693][ T35] block nbd0: Possible stuck request ffff888028250000: control (read@0,1024B). Runtime 180 seconds [ 339.579396][ T35] block nbd0: Possible stuck request ffff888028250200: control (read@1024,1024B). Runtime 180 seconds [ 339.582894][ T35] block nbd0: Possible stuck request ffff888028250400: control (read@2048,1024B). Runtime 180 seconds [ 339.586721][ T35] block nbd0: Possible stuck request ffff888028250600: control (read@3072,1024B). Runtime 180 seconds [ 339.604668][T10895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.616516][T10895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.620703][T10895] bond0 (unregistering): (slave bond6): Releasing backup interface [ 339.624140][T10895] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 339.630742][T10895] bond0 (unregistering): Released all slaves [ 339.636358][T10895] bond1 (unregistering): Released all slaves [ 339.758903][T10895] bond2 (unregistering): left allmulticast mode [ 339.762780][T10895] bond2 (unregistering): Released all slaves [ 339.927464][T10895] bond3 (unregistering): (slave veth3): Releasing active interface [ 339.932530][T10895] bond3 (unregistering): Released all slaves [ 339.944991][T10895] bond4 (unregistering): Released all slaves [ 339.953625][T10895] bond5 (unregistering): Released all slaves [ 340.118179][T10895] bond6 (unregistering): Released all slaves [ 340.250307][T10895] bond7 (unregistering): Released all slaves [ 340.311631][T17815] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 340.319851][T17815] bond1: (slave lo): speed changed to 0 on port 1 [ 340.325502][T17815] bond1: (slave lo): Enslaving as a backup interface with an up link [ 340.334819][T17815] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 340.405340][T10895] tipc: Disabling bearer [ 340.420299][T10895] tipc: Left network mode [ 340.435797][T17790] hsr_slave_0: entered promiscuous mode [ 340.439201][T17790] hsr_slave_1: entered promiscuous mode [ 340.442691][T17790] debugfs: 'hsr0' already exists in 'hsr' [ 340.444544][T17790] Cannot create hsr debugfs directory [ 340.516982][ T5957] Bluetooth: hci5: command tx timeout [ 340.550508][T17822] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:4096x16 (0x33424752, 8, 0, 0, 0) [ 340.570577][T17822] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 340.573903][T17822] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 340.576933][T17691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.580080][T17822] vhci_hcd vhci_hcd.0: Device attached [ 340.587297][T17823] vhci_hcd: unknown pdu 2 [ 340.597639][T10894] vhci_hcd vhci_hcd.6: stop threads [ 340.599619][T10894] vhci_hcd vhci_hcd.6: release socket [ 340.601541][T10894] vhci_hcd vhci_hcd.6: disconnect device [ 340.652527][T17691] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.671854][ T219] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.675496][ T219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.723552][T17790] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.728802][T17790] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 340.762194][ T4359] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.765055][ T4359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.818424][T17790] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.821948][T17790] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 340.910220][T17790] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.915939][T17790] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 341.020466][T17691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.166434][T17790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 341.176571][T17790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 341.193427][T17790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 341.202697][T17790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 341.270581][T17790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.294174][T17790] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.302896][T17691] veth0_vlan: entered promiscuous mode [ 341.309019][T10891] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.312260][T10891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.326154][ T1195] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.328674][ T1195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.341962][T17691] veth1_vlan: entered promiscuous mode [ 341.416598][T17691] veth0_macvtap: entered promiscuous mode [ 341.428606][T17691] veth1_macvtap: entered promiscuous mode [ 341.450606][T17691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.461716][T17691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.474167][T10894] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.477895][T10894] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.482972][T10894] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.494371][ T7473] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.545441][ T5957] Bluetooth: hci7: command tx timeout [ 341.588507][T17790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.605574][ T4359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.621969][ T4359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.628873][ T5957] Bluetooth: hci3: command tx timeout [ 341.634545][T17860] netlink: 'syz.6.3380': attribute type 10 has an invalid length. [ 341.642586][ T40] kauditd_printk_skb: 75 callbacks suppressed [ 341.642598][ T40] audit: type=1400 audit(581.321:53888): avc: denied { mounton } for pid=17859 comm="syz.6.3380" path="/37/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 341.660726][ T4359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.663496][ T4359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.675468][ T40] audit: type=1400 audit(581.349:53889): avc: denied { unmount } for pid=17303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 341.681885][ T40] audit: type=1400 audit(581.349:53890): avc: denied { mounton } for pid=17691 comm="syz-executor" path="/syzkaller.OD1EDD/syz-tmp" dev="sda1" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 341.690159][ T40] audit: type=1400 audit(581.349:53891): avc: denied { mount } for pid=17691 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 341.692219][T17790] veth0_vlan: entered promiscuous mode [ 341.697757][ T40] audit: type=1400 audit(581.358:53892): avc: denied { mounton } for pid=17691 comm="syz-executor" path="/syzkaller.OD1EDD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=83920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 341.710005][ T40] audit: type=1400 audit(581.358:53893): avc: denied { unmount } for pid=17691 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 341.718870][T17790] veth1_vlan: entered promiscuous mode [ 341.721173][ T40] audit: type=1400 audit(581.377:53894): avc: denied { mounton } for pid=17691 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 341.729939][ T40] audit: type=1400 audit(581.377:53895): avc: denied { mount } for pid=17691 comm="syz-executor" name="/" dev="gadgetfs" ino=8554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 341.741778][ T40] audit: type=1400 audit(581.377:53896): avc: denied { mount } for pid=17691 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 341.754403][ T40] audit: type=1400 audit(581.377:53897): avc: denied { mounton } for pid=17691 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 341.758439][T17790] veth0_macvtap: entered promiscuous mode [ 341.780485][T17790] veth1_macvtap: entered promiscuous mode [ 341.797591][T17790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.839828][T17790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.854143][T10902] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.858259][T10902] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.861581][T10898] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.900075][T10898] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.905183][T17876] TCP: TCP_TX_DELAY enabled [ 342.025592][ T4359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.029463][ T4359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.076921][ T4359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.079917][T17885] openvswitch: netlink: Actions may not be safe on all matching packets [ 342.081987][ T4359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.097742][T10895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.112003][T10895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.160152][T17890] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3388'. [ 342.297521][T17903] zonefs (nbd5) ERROR: Not a zoned block device [ 342.359351][T17907] tmpfs: Unknown parameter 'nr_inodx' [ 342.751683][ T5957] Bluetooth: hci5: command tx timeout [ 342.820133][T10895] team0 (unregistering): Port device team_slave_1 removed [ 342.885782][T10895] team0 (unregistering): Port device team_slave_0 removed [ 343.424049][T17907] geneve2: entered promiscuous mode [ 343.660870][T17943] netlink: 'syz.2.3406': attribute type 10 has an invalid length. [ 343.671902][T17941] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3399'. [ 343.856206][ T5957] Bluetooth: hci3: command tx timeout [ 344.480084][T17962] orangefs_devreq_write_iter: failed to copy head. [ 344.540353][T17943] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 344.545258][ C3] vcan0: j1939_session_tx_dat: 0xffff88803d3b8800: queue data error: -100 [ 344.548784][ C3] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 344.551856][ C3] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 344.555104][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.558329][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.560931][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.563525][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.566353][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.569217][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.572532][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.575365][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.578845][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.581389][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.583982][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.586990][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.589782][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.592356][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.595535][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.597727][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.600153][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.602940][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.605431][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.608120][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.611351][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.614152][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.616858][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.619446][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.622258][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.625139][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.627933][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.630547][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.633122][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.635731][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.638238][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.640881][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.643566][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.646354][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.648941][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.651510][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.654217][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.656884][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.659589][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.662516][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.665362][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.668154][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.670801][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.673546][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.676273][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.678839][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.681714][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.684638][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.687484][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.690131][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.692677][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.695371][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.698041][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.700885][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.703963][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.706908][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.709721][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.712429][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.715392][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.718437][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.721038][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.723527][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.726119][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.729307][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.732846][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.735476][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.738326][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.740975][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.743623][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.746338][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.749384][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.752845][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.756048][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.759546][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.763192][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.766899][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.769623][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.772147][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.774701][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.777146][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.779726][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.782756][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.786426][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.790366][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.793841][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.797402][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.800216][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.802737][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.805425][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.807898][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.810416][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.813037][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.815668][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.818675][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.821300][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.823771][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.826384][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.828954][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.831588][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.834183][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.836906][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.839550][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.842068][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.844487][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.847206][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.849728][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.852277][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.854872][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.857518][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.860044][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.862548][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.864966][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.867433][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.870037][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.872609][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.875178][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.877870][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.880520][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.883020][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.885446][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.887962][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.890522][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.893044][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.895588][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.898360][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.901341][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.965970][ T5957] Bluetooth: hci5: command tx timeout [ 345.152684][T10895] IPVS: stop unused estimator thread 0... [ 345.170648][T17979] netlink: 'syz.6.3419': attribute type 1 has an invalid length. [ 345.173938][T17979] netlink: 'syz.6.3419': attribute type 7 has an invalid length. [ 345.176431][T17979] netlink: 'syz.6.3419': attribute type 8 has an invalid length. [ 345.179043][T17979] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3419'. [ 345.198309][T17981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3420'. [ 345.203544][T17981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3420'. [ 345.211715][T17981] netlink: 'syz.5.3420': attribute type 11 has an invalid length. [ 345.222428][T17981] netlink: 'syz.5.3420': attribute type 13 has an invalid length. [ 345.284437][T17989] netlink: 124 bytes leftover after parsing attributes in process `syz.6.3421'. [ 345.292487][T17990] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 345.356124][T17997] netlink: 'syz.8.3423': attribute type 2 has an invalid length. [ 345.359912][T17997] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3423'. [ 345.399376][T18003] raw_sendmsg: syz.6.3427 forgot to set AF_INET. Fix it! [ 345.402708][T18002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3426'. [ 345.448538][T18008] netlink: 284 bytes leftover after parsing attributes in process `syz.6.3429'. [ 345.626352][T18023] overlayfs: upper fs does not support file handles, falling back to index=off. [ 345.707142][T18022] Cannot find del_set index 1 as target [ 345.809612][T18027] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3433'. [ 345.930160][T18030] bond1: entered allmulticast mode [ 345.932347][T18030] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.359938][T18033] overlayfs: cannot append lower layer [ 346.426458][T18040] all: renamed from lo (while UP) [ 346.759768][T18045] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 346.763422][T18045] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 346.766488][T18045] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 346.769333][T18045] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 346.772059][T18045] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 346.778648][T18045] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 346.782695][T18045] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 346.784927][T18045] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 346.797597][T18045] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 346.801526][T18045] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 346.804367][T18045] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 346.855398][T18045] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 346.862114][T18045] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 346.864781][T18045] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 346.868454][T18045] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 347.009446][ T40] kauditd_printk_skb: 153 callbacks suppressed [ 347.009466][ T40] audit: type=1400 audit(586.342:54051): avc: denied { map_create } for pid=18070 comm="syz.2.3447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 347.022728][ T40] audit: type=1400 audit(586.342:54052): avc: denied { map_read map_write } for pid=18070 comm="syz.2.3447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 347.034624][ T40] audit: type=1400 audit(586.360:54053): avc: denied { name_bind } for pid=18070 comm="syz.2.3447" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 347.049010][ T40] audit: type=1400 audit(586.360:54054): avc: denied { write } for pid=18070 comm="syz.2.3447" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 347.061685][ T40] audit: type=1400 audit(586.370:54055): avc: denied { create } for pid=18073 comm="syz.6.3448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 347.068730][ T40] audit: type=1400 audit(586.370:54056): avc: denied { setopt } for pid=18073 comm="syz.6.3448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 347.076467][ T40] audit: type=1400 audit(586.370:54057): avc: denied { create } for pid=18073 comm="syz.6.3448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 347.083921][ T40] audit: type=1400 audit(586.370:54058): avc: denied { write } for pid=18073 comm="syz.6.3448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 347.091626][ T40] audit: type=1400 audit(586.370:54059): avc: denied { ioctl } for pid=18073 comm="syz.6.3448" path="socket:[88458]" dev="sockfs" ino=88458 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 347.102317][ T40] audit: type=1400 audit(586.370:54060): avc: denied { getopt } for pid=18073 comm="syz.6.3448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 347.268430][T18083] netlink: 'syz.8.3451': attribute type 2 has an invalid length. [ 347.271422][T18083] netlink: 'syz.8.3451': attribute type 1 has an invalid length. [ 347.512732][T18093] __nla_validate_parse: 2 callbacks suppressed [ 347.512747][T18093] netlink: 124 bytes leftover after parsing attributes in process `syz.5.3455'. [ 347.780759][T18103] input: syz0 as /devices/virtual/input/input51 [ 347.835876][T18107] netlink: 'syz.5.3459': attribute type 10 has an invalid length. [ 347.839188][T18107] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3459'. [ 347.905152][T18109] IPv6: sit1: Disabled Multicast RS [ 347.907954][T18109] sit1: entered allmulticast mode [ 347.987483][T18111] netlink: 'syz.6.3461': attribute type 3 has an invalid length. [ 348.068425][T18119] tipc: Started in network mode [ 348.070119][T18119] tipc: Node identity febc419a29, cluster identity 4711 [ 348.074274][T18119] tipc: Enabled bearer , priority 0 [ 348.083194][T18119] syzkaller0: entered promiscuous mode [ 348.088520][T18119] syzkaller0: entered allmulticast mode [ 348.096054][T18119] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 348.115139][T18118] tipc: Resetting bearer [ 348.141649][T18122] tmpfs: Unknown parameter 'usrquota[|V6ϡ1~"e7rpÙ:>Rlܕ^}^{MfrڀL HxLDĝA' [ 348.154817][T18118] tipc: Disabling bearer [ 348.169366][T18126] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3466'. [ 348.202941][T18122] tmpfs: Unknown parameter 'usrquota[|V6ϡ1~"e7rpÙ:>Rlܕ^}^{MfrڀL HxLDĝA' [ 348.231026][T18129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3467'. [ 348.240250][T18129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3467'. [ 348.266167][T18134] netlink: 112 bytes leftover after parsing attributes in process `syz.8.3469'. [ 348.434548][T18146] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3475'. [ 348.547963][T18155] overlayfs: missing 'lowerdir' [ 348.550194][T18153] fuse: Bad value for 'fd' [ 348.567903][T18155] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3476'. [ 348.614431][T18161] sctp: [Deprecated]: syz.2.3481 (pid 18161) Use of int in maxseg socket option. [ 348.614431][T18161] Use struct sctp_assoc_value instead [ 348.706422][T18170] Malformed UNC in devname [ 348.706422][T18170] [ 348.710052][T18170] CIFS: VFS: Malformed UNC in devname [ 348.722692][T18170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3484'. [ 348.748845][T18166] can: request_module (can-proto-0) failed. [ 348.782997][T18171] tipc: Started in network mode [ 348.784535][T18166] usb usb4: usbfs: process 18166 (syz.8.3483) did not claim interface 0 before use [ 348.785548][T18171] tipc: Node identity ac1414aa, cluster identity 4711 [ 348.792923][T18171] tipc: Enabled bearer , priority 10 [ 348.797485][T18171] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3484'. [ 348.801104][T18171] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 348.811571][T18166] 8021q: VLANs not supported on wg1 [ 348.826533][ T5957] Bluetooth: hci1: command 0x0c1a tx timeout [ 348.997675][ T5957] Bluetooth: hci3: command 0x0c1a tx timeout [ 348.997894][ T5951] Bluetooth: hci0: command 0x0c1a tx timeout [ 348.998011][ T64] Bluetooth: hci7: command 0x0c1a tx timeout [ 348.998103][ T5945] Bluetooth: hci6: command 0x0c1a tx timeout [ 349.007044][ T5947] Bluetooth: hci4: command 0x0c1a tx timeout [ 349.073441][ T5951] Bluetooth: hci5: command 0x0c1a tx timeout [ 349.121866][T18193] binder: 18192:18193 ioctl c0306201 200000000680 returned -22 [ 349.151334][T18196] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 349.571795][T18249] program syz.5.3506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.640591][ T940] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 349.800066][ T940] usb 11-1: Using ep0 maxpacket: 8 [ 349.806273][ T940] usb 11-1: config 179 has an invalid interface number: 65 but max is 0 [ 349.810129][ T940] usb 11-1: config 179 has no interface number 0 [ 349.821142][ T940] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 349.826067][ T940] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 349.830876][ T940] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 349.843926][ T940] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 349.849075][ T940] usb 11-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 349.863837][ T940] usb 11-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 349.864260][ T6083] tipc: Node number set to 2886997162 [ 349.867510][ T940] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.876917][T18225] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 349.885340][ T56] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 350.056381][ T56] usb 10-1: Using ep0 maxpacket: 32 [ 350.060260][ T56] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 350.064074][ T56] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 350.068542][ T56] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 350.072173][ T56] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 350.079543][ T56] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 350.083345][ T56] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.086888][ T56] usb 10-1: Product: syz [ 350.088991][ T56] usb 10-1: Manufacturer: syz [ 350.091355][ T56] usb 10-1: SerialNumber: syz [ 350.102927][ C3] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 350.115424][ T56] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input53 [ 350.118349][ T940] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:179.65/input/input52 [ 350.319892][T18225] binder_alloc: 18221: pid 18221 spamming oneway? 1 buffers allocated for a total size of 4096 [ 350.327487][T18225] binder: 18221:18225 ioctl c0605345 200000000240 returned -22 [ 350.333111][ T9] usb 11-1: USB disconnect, device number 5 [ 350.333149][ C2] xpad 11-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 350.339246][ C2] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 350.345187][ T56] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 350.348671][ T56] (id 0x00) [ 350.409519][ T56] rc_core: IR keymap rc-imon-pad not found [ 350.412224][ T56] Registered IR keymap rc-empty [ 350.414455][ T56] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 350.418863][ T56] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 350.538815][ T56] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0 [ 350.544849][ T56] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0/input54 [ 350.553620][ T56] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:3> initialized [ 350.854260][T18285] netlink: 'syz.8.3518': attribute type 24 has an invalid length. [ 350.959459][T18300] mac80211_hwsim hwsim43 : renamed from wlan1 (while UP) [ 351.187743][T18323] netlink: 'syz.2.3527': attribute type 12 has an invalid length. [ 351.194129][T18324] netlink: 'syz.2.3527': attribute type 12 has an invalid length. [ 351.197397][T18323] netlink: 'syz.2.3527': attribute type 11 has an invalid length. [ 351.212245][ T5947] Bluetooth: hci6: command 0x0c1a tx timeout [ 351.212675][ T5957] Bluetooth: hci7: command 0x0c1a tx timeout [ 351.212719][ T5945] Bluetooth: hci3: command 0x0c1a tx timeout [ 351.298051][ T5957] Bluetooth: hci5: command 0x0c1a tx timeout [ 351.308168][T18329] netlink: 'syz.8.3529': attribute type 24 has an invalid length. [ 351.506221][ T940] usb 10-1: USB disconnect, device number 3 [ 351.699135][T18369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.713359][T18369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.719215][T18369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.722284][T18369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.807044][T18364] syzkaller0: entered promiscuous mode [ 351.809879][T18364] syzkaller0: entered allmulticast mode [ 352.289519][T18399] misc userio: The device must be registered before sending interrupts [ 352.373855][ T40] kauditd_printk_skb: 308 callbacks suppressed [ 352.373874][ T40] audit: type=1400 audit(591.353:54369): avc: denied { read } for pid=18403 comm="syz.5.3553" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 352.398381][ T40] audit: type=1400 audit(591.353:54370): avc: denied { open } for pid=18403 comm="syz.5.3553" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 352.439051][ T40] audit: type=1400 audit(591.353:54371): avc: denied { ioctl } for pid=18403 comm="syz.5.3553" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x744c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 352.463439][ T40] audit: type=1400 audit(591.353:54372): avc: denied { create } for pid=18403 comm="syz.5.3553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 352.472414][ T40] audit: type=1400 audit(591.353:54373): avc: denied { ioctl } for pid=18403 comm="syz.5.3553" path="socket:[89110]" dev="sockfs" ino=89110 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 352.486743][ T40] audit: type=1400 audit(591.353:54374): avc: denied { ioctl } for pid=18403 comm="syz.5.3553" path="socket:[89107]" dev="sockfs" ino=89107 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 352.498204][ T40] audit: type=1400 audit(591.372:54375): avc: denied { write } for pid=18400 comm="syz.2.3552" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 352.540829][ T40] audit: type=1326 audit(591.512:54376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18409 comm="syz.8.3555" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f68d4b8f7c9 code=0x0 [ 352.884086][ T40] audit: type=1400 audit(591.830:54377): avc: denied { read } for pid=18412 comm="syz.2.3556" dev="nsfs" ino=4026534075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 352.894503][ T40] audit: type=1400 audit(591.839:54378): avc: denied { open } for pid=18412 comm="syz.2.3556" path="net:[4026534075]" dev="nsfs" ino=4026534075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 352.913478][T18413] ptrace attach of "/syz-executor exec"[17790] was attempted by ""[18413] [ 353.055790][T18424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=18424 comm=syz.2.3560 [ 353.078104][T18426] __nla_validate_parse: 10 callbacks suppressed [ 353.078116][T18426] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3561'. [ 353.176932][T18433] bond0: Error: Cannot enslave bond to itself. [ 353.273859][T18447] : renamed from vlan0 (while UP) [ 353.419990][T18466] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3572'. [ 353.436164][ T5957] Bluetooth: hci6: command 0x0c1a tx timeout [ 353.436305][ T5947] Bluetooth: hci3: command 0x0c1a tx timeout [ 353.446983][ T5947] Bluetooth: hci7: command 0x0c1a tx timeout [ 353.451700][ T5951] ================================================================== [ 353.455285][ T5951] BUG: KASAN: slab-use-after-free in le_read_features_complete+0x5b/0x390 [ 353.458243][ T5951] Write of size 4 at addr ffff88803b4f0010 by task kworker/u33:4/5951 [ 353.462838][ T5951] [ 353.464061][ T5951] CPU: 1 UID: 0 PID: 5951 Comm: kworker/u33:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 353.464080][ T5951] Tainted: [L]=SOFTLOCKUP [ 353.464084][ T5951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 353.464093][ T5951] Workqueue: hci7 hci_cmd_sync_work [ 353.464112][ T5951] Call Trace: [ 353.464117][ T5951] [ 353.464122][ T5951] dump_stack_lvl+0x116/0x1f0 [ 353.464138][ T5951] print_report+0xcd/0x630 [ 353.464163][ T5951] ? __virt_addr_valid+0x81/0x610 [ 353.464175][ T5951] ? __phys_addr+0xe8/0x180 [ 353.464185][ T5951] ? le_read_features_complete+0x5b/0x390 [ 353.464200][ T5951] kasan_report+0xe0/0x110 [ 353.464214][ T5951] ? le_read_features_complete+0x5b/0x390 [ 353.464232][ T5951] kasan_check_range+0x100/0x1b0 [ 353.464249][ T5951] le_read_features_complete+0x5b/0x390 [ 353.464265][ T5951] hci_cmd_sync_work+0x1ff/0x470 [ 353.464280][ T5951] ? __pfx_le_read_features_complete+0x10/0x10 [ 353.464296][ T5951] process_one_work+0x9ba/0x1b20 [ 353.464315][ T5951] ? __pfx_process_one_work+0x10/0x10 [ 353.464331][ T5951] ? assign_work+0x1a0/0x250 [ 353.464345][ T5951] worker_thread+0x6c8/0xf10 [ 353.464363][ T5951] ? __kthread_parkme+0x19e/0x250 [ 353.464375][ T5951] ? __pfx_worker_thread+0x10/0x10 [ 353.464389][ T5951] kthread+0x3c5/0x780 [ 353.464402][ T5951] ? __pfx_kthread+0x10/0x10 [ 353.464415][ T5951] ? rcu_is_watching+0x12/0xc0 [ 353.464426][ T5951] ? __pfx_kthread+0x10/0x10 [ 353.464438][ T5951] ret_from_fork+0x983/0xb10 [ 353.464451][ T5951] ? __pfx_ret_from_fork+0x10/0x10 [ 353.464463][ T5951] ? __switch_to+0x7af/0x10d0 [ 353.464478][ T5951] ? __pfx_kthread+0x10/0x10 [ 353.464491][ T5951] ret_from_fork_asm+0x1a/0x30 [ 353.464513][ T5951] [ 353.464517][ T5951] [ 353.469343][T18474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=68 sclass=netlink_route_socket pid=18474 comm=syz.6.3573 [ 353.470220][ T5951] Allocated by task 5957: [ 353.544308][ T5951] kasan_save_stack+0x33/0x60 [ 353.546326][ T5951] kasan_save_track+0x14/0x30 [ 353.548291][ T5951] __kasan_kmalloc+0xaa/0xb0 [ 353.550314][ T5951] __hci_conn_add+0xf8/0x1cc0 [ 353.552477][ T5951] hci_conn_add_unset+0x76/0x130 [ 353.555132][ T5951] le_conn_complete_evt+0x639/0x1fa0 [ 353.557388][ T5951] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 353.559836][ T5951] hci_le_meta_evt+0x357/0x610 [ 353.561914][ T5951] hci_event_packet+0x685/0x1210 [ 353.564165][ T5951] hci_rx_work+0x2c9/0x1020 [ 353.566178][ T5951] process_one_work+0x9ba/0x1b20 [ 353.568298][ T5951] worker_thread+0x6c8/0xf10 [ 353.570313][ T5951] kthread+0x3c5/0x780 [ 353.572284][ T5951] ret_from_fork+0x983/0xb10 [ 353.574674][ T5951] ret_from_fork_asm+0x1a/0x30 [ 353.576979][ T5951] [ 353.578270][ T5951] Freed by task 5957: [ 353.580045][ T5951] kasan_save_stack+0x33/0x60 [ 353.582121][ T5951] kasan_save_track+0x14/0x30 [ 353.583674][ T5951] kasan_save_free_info+0x3b/0x60 [ 353.585270][ T5951] __kasan_slab_free+0x5f/0x80 [ 353.586845][ T5951] kfree+0x2f8/0x6e0 [ 353.588133][ T5951] device_release+0xa4/0x240 [ 353.589659][ T5951] kobject_put+0x1ef/0x6f0 [ 353.591208][ T5951] device_unregister+0x2f/0xe0 [ 353.592756][ T5951] hci_conn_del_sysfs+0xdd/0x1a0 [ 353.594413][ T5951] hci_conn_del+0x680/0x11d0 [ 353.595956][ T5951] hci_disconn_complete_evt+0x410/0xa30 [ 353.597781][ T5951] hci_event_packet+0xa39/0x1210 [ 353.599863][ T5951] hci_rx_work+0x2c9/0x1020 [ 353.601758][ T5951] process_one_work+0x9ba/0x1b20 [ 353.603664][ T5951] worker_thread+0x6c8/0xf10 [ 353.605684][ T5951] kthread+0x3c5/0x780 [ 353.607499][ T5951] ret_from_fork+0x983/0xb10 [ 353.609558][ T5951] ret_from_fork_asm+0x1a/0x30 [ 353.611946][ T5951] [ 353.613193][ T5951] The buggy address belongs to the object at ffff88803b4f0000 [ 353.613193][ T5951] which belongs to the cache kmalloc-8k of size 8192 [ 353.619025][ T5951] The buggy address is located 16 bytes inside of [ 353.619025][ T5951] freed 8192-byte region [ffff88803b4f0000, ffff88803b4f2000) [ 353.624784][ T5951] [ 353.625823][ T5951] The buggy address belongs to the physical page: [ 353.628500][ T5951] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3b4f0 [ 353.632743][ T5951] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 353.636670][ T5951] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 353.640198][ T5951] page_type: f5(slab) [ 353.641865][ T5951] raw: 00fff00000000040 ffff88801b443180 ffffea0001645200 0000000000000005 [ 353.645266][ T5951] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 353.648850][ T5951] head: 00fff00000000040 ffff88801b443180 ffffea0001645200 0000000000000005 [ 353.652727][ T5951] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 353.656313][ T5951] head: 00fff00000000003 ffffea0000ed3c01 00000000ffffffff 00000000ffffffff [ 353.659575][ T5951] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 353.662657][ T5951] page dumped because: kasan: bad access detected [ 353.665322][ T5951] page_owner tracks the page as allocated [ 353.667759][ T5951] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 18171, tgid 18169 (syz.2.3484), ts 348781081102, free_ts 348358729208 [ 353.676492][ T5951] post_alloc_hook+0x1af/0x220 [ 353.678543][ T5951] get_page_from_freelist+0xd0b/0x31a0 [ 353.680322][ T5951] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 353.682483][ T5951] alloc_pages_mpol+0x1fb/0x550 [ 353.684494][ T5951] new_slab+0x2c3/0x430 [ 353.686267][ T5951] ___slab_alloc+0xe18/0x1c90 [ 353.688382][ T5951] __slab_alloc.constprop.0+0x63/0x110 [ 353.690870][ T5951] __kmalloc_cache_noprof+0x485/0x800 [ 353.693475][ T5951] audit_log_d_path+0xed/0x200 [ 353.695912][ T5951] audit_log_lsm_data+0xacf/0x1fe0 [ 353.698298][ T5951] common_lsm_audit+0x238/0x300 [ 353.700666][ T5951] slow_avc_audit+0x186/0x210 [ 353.702678][ T5951] avc_has_perm+0x1b5/0x1f0 [ 353.704602][ T5951] inode_has_perm+0x166/0x1d0 [ 353.706630][ T5951] selinux_file_open+0x39d/0x510 [ 353.708692][ T5951] security_file_open+0xa5/0x1e0 [ 353.710725][ T5951] page last free pid 7473 tgid 7473 stack trace: [ 353.713325][ T5951] free_unref_folios+0xa22/0x1610 [ 353.715609][ T5951] folios_put_refs+0x4be/0x750 [ 353.717887][ T5951] release_pages+0x2a2/0x4b0 [ 353.719893][ T5951] io_free_region+0x102/0x2b0 [ 353.722068][ T5951] io_ring_exit_work+0xa84/0x1170 [ 353.724194][ T5951] process_one_work+0x9ba/0x1b20 [ 353.726328][ T5951] worker_thread+0x6c8/0xf10 [ 353.728338][ T5951] kthread+0x3c5/0x780 [ 353.730185][ T5951] ret_from_fork+0x983/0xb10 [ 353.732380][ T5951] ret_from_fork_asm+0x1a/0x30 [ 353.734627][ T5951] [ 353.735675][ T5951] Memory state around the buggy address: [ 353.738035][ T5951] ffff88803b4eff00: 00 00 00 fc fc fc fc fc 00 00 00 fc fc fc fc fc [ 353.741450][ T5951] ffff88803b4eff80: 00 00 00 fc fc fc fc fc 00 00 00 fc fc fc fc fc [ 353.744827][ T5951] >ffff88803b4f0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 353.747927][ T5951] ^ [ 353.749612][ T5951] ffff88803b4f0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 353.753331][ T5951] ffff88803b4f0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 353.757276][ T5951] ================================================================== [ 353.763656][ T5947] Bluetooth: hci5: command 0x0c1a tx timeout [ 353.765793][ T5951] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 353.765814][ T5951] CPU: 1 UID: 0 PID: 5951 Comm: kworker/u33:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 353.765843][ T5951] Tainted: [L]=SOFTLOCKUP [ 353.765850][ T5951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 353.765864][ T5951] Workqueue: hci7 hci_cmd_sync_work [ 353.765892][ T5951] Call Trace: [ 353.765899][ T5951] [ 353.765907][ T5951] dump_stack_lvl+0x3d/0x1f0 [ 353.765933][ T5951] vpanic+0x640/0x6f0 [ 353.765960][ T5951] panic+0xca/0xd0 [ 353.765979][ T5951] ? __pfx_panic+0x10/0x10 [ 353.765999][ T5951] ? le_read_features_complete+0x5b/0x390 [ 353.766025][ T5951] ? preempt_schedule_common+0x44/0xc0 [ 353.766049][ T5951] ? preempt_schedule_thunk+0x16/0x30 [ 353.766069][ T5951] ? check_panic_on_warn+0x1f/0xb0 [ 353.766091][ T5951] check_panic_on_warn+0xab/0xb0 [ 353.766112][ T5951] end_report+0x107/0x160 [ 353.766136][ T5951] kasan_report+0xee/0x110 [ 353.766160][ T5951] ? le_read_features_complete+0x5b/0x390 [ 353.766189][ T5951] kasan_check_range+0x100/0x1b0 [ 353.766216][ T5951] le_read_features_complete+0x5b/0x390 [ 353.766242][ T5951] hci_cmd_sync_work+0x1ff/0x470 [ 353.766265][ T5951] ? __pfx_le_read_features_complete+0x10/0x10 [ 353.766294][ T5951] process_one_work+0x9ba/0x1b20 [ 353.822058][ T5951] ? __pfx_process_one_work+0x10/0x10 [ 353.824393][ T5951] ? assign_work+0x1a0/0x250 [ 353.826578][ T5951] worker_thread+0x6c8/0xf10 [ 353.828672][ T5951] ? __kthread_parkme+0x19e/0x250 [ 353.830604][ T5951] ? __pfx_worker_thread+0x10/0x10 [ 353.832877][ T5951] kthread+0x3c5/0x780 [ 353.834789][ T5951] ? __pfx_kthread+0x10/0x10 [ 353.836925][ T5951] ? rcu_is_watching+0x12/0xc0 [ 353.838902][ T5951] ? __pfx_kthread+0x10/0x10 [ 353.840799][ T5951] ret_from_fork+0x983/0xb10 [ 353.842842][ T5951] ? __pfx_ret_from_fork+0x10/0x10 [ 353.845103][ T5951] ? __switch_to+0x7af/0x10d0 [ 353.847163][ T5951] ? __pfx_kthread+0x10/0x10 [ 353.849057][ T5951] ret_from_fork_asm+0x1a/0x30 [ 353.850915][ T5951] [ 353.853783][ T5951] Kernel Offset: disabled [ 353.855645][ T5951] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:49:40 Registers: info registers vcpu 0 CPU#0 RAX=03658bf49eb79828 RBX=ffffffff8e3c96a0 RCX=ffffc9000351ef8c RDX=0000000000000001 RSI=ffffffff8e3c96a0 RDI=ffff88804eb154d8 RBP=0000000000000001 RSP=ffffc9000351ef80 R8 =0000000000000001 R9 =0000000003658bf4 R10=0000000000000002 R11=0000000000083b58 R12=ffffffff816cb9a4 R13=0000000000000206 R14=ffff88804eb14980 R15=0000000000000002 RIP=ffffffff8199f610 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fcfff8556c0 ffffffff 00c00000 GS =0000 ffff8880d68f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcfff834d58 CR3=000000003c29e000 CR4=00352ef0 DR0=0000000000000000 DR1=000000000000afe8 DR2=0000000000001800 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcffea15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcffea1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcffea15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcffea1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcffea150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcffea151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcffebba4a8 00007fcffebba4a0 00007fcffebba498 00007fcffebba470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfff71d100 00007fcffebba460 00007fcffebba478 00007fcffebba4c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcffebba4b8 00007fcffebba4b0 00007fcffebba4a8 00007fcffebba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000048 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853265b5 RDI=ffffffff9aeedc40 RBP=ffffffff9aeedc00 RSP=ffffc90003e57588 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3462333038387257 R12=0000000000000000 R13=000000000000006f R14=ffffffff9aeedc00 R15=ffffffff85326550 RIP=ffffffff853265df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055555c6cb808 CR3=000000004bb23000 CR4=00352ef0 DR0=0000000000000001 DR1=fffffffffffffff7 DR2=0000000000000000 DR3=000000000000000a DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd1de32ec0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcffea15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcffea1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcffea15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcffea1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcffea150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcffea151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000048 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000048 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000328b8b RBX=0000000000000002 RCX=ffffffff8b7816d9 RDX=0000000000000000 RSI=ffffffff8dace4f3 RDI=ffffffff8bf2b480 RBP=ffffed1003b5e930 RSP=ffffc90000187de8 R8 =0000000000000001 R9 =ffffed100d4c673d R10=ffff88806a6339eb R11=ffff88801daf54b0 R12=0000000000000002 R13=ffff88801daf4980 R14=ffffffff9088b9d0 R15=0000000000000000 RIP=ffffffff8b77fdcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6af5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b34563fff CR3=000000003c29e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000014 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcffea15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcffea1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcffea15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcffea1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcffea150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcffea151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcffebba4a8 00007fcffebba4a0 00007fcffebba498 00007fcffebba470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfff71d100 00007fcffebba460 00007fcffebba478 0000000500060006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcffebba4b8 00007fcffebba4b0 00007fcffebba4a8 00007fcffebba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000048 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffffea0001799374 RCX=ffffffff820e526e RDX=fffff940002f326f RSI=0000000000000004 RDI=ffffea0001799374 RBP=0000000000000082 RSP=ffffc900067bf660 R8 =0000000000000001 R9 =fffff940002f326e R10=ffffea0001799377 R11=ffff88804f5954b0 R12=0000000000000008 R13=0000000000000001 R14=ffffea0001799340 R15=ffffea0001799340 RIP=ffffffff8228b7ac RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555563315500 ffffffff 00c00000 GS =0000 ffff8880d6bf5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f68d59156c0 CR3=000000002c609000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf764f960 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68d4c15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68d4c1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68d4c15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68d4c1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68d4c150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68d4c151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000