last executing test programs: 35.019781631s ago: executing program 2 (id=719): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000001080)='./file1\x00') pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (fail_nth: 37) 34.889642518s ago: executing program 2 (id=722): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000180)="95f3dc41b8", 0x5, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000100)='trusted\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd00fbffffff000008000340000100000500010001"], 0x24}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xfc, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xf69a214fda618004, 0xc2c, {}, {0x4, 0x8, 0x2, 0xb7, 0x0, 0x7, "784fa10e"}, 0x6, 0x1, {0x0}, 0x80}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000480)="ed6f5c45ba71feb568202046ba6bc367", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x1, 0x4, 0x801, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24008800}, 0x20000090) 34.787639333s ago: executing program 2 (id=724): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@release={0x40046306, 0x2}], 0xf0, 0x0, &(0x7f0000000240)="79b5707485f583f9742f9c00eb20aacf580f50bfd5d106a589344edea6c6ed75487a9b1d0a80f1e550b047a6da26f6b072daa9f1f3086699021e38d2de59a9f47c57e65a418571536587fea932dc930fa58934d43ceddb8d318f292a18921c220e8672a0870a128d00582bbe64d6d5a33931996350d5eb170cb19af4e936067ccaf499e862ca0af4c9a85d162d79d6317bb357f78e61eb96fbf8acd7b00709b1ee460822cde008e1699152f1ad05f182e30160d4c9928f028a8c925367d3bc1f30f3c977877ea328e1ec8919e73240c568f98b51a4b69609929014edd2693d024050bbce372824b9ce27fb21a33945c5"}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x17, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6447}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x1}]}, &(0x7f0000000380)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0xa0000000, 0x4b}, 0x10, 0x20348, 0xffffffffffffffff, 0x6, 0x0, &(0x7f00000005c0)=[{0x3, 0x2, 0x4, 0x1}, {0x0, 0x3, 0xb, 0x2}, {0x3, 0x1, 0x7, 0xc}, {0x5, 0x3, 0x3, 0xb}, {0x3, 0x5, 0x5, 0x1}, {0x4, 0x1, 0x6, 0xa}], 0x10, 0x7fffffff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r1, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb5, &(0x7f00000007c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x4d, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) socket$nl_generic(0x11, 0x3, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r8, &(0x7f0000000700)={&(0x7f0000000040)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000280)=0x1) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f0000000140)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r11, 0x0) ioctl$TCSETS(r10, 0x89f0, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) r12 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCGSERIAL(r12, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/22}) (async) r13 = dup3(r2, r0, 0x80000) getsockname$inet(r11, &(0x7f0000000a00)={0x2, 0x0, @private}, &(0x7f0000000a40)=0x10) (async) ioctl$SG_BLKTRACESTART(r13, 0x1274, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x2}], 0x0, 0x1000000, 0x0}) 34.65989286s ago: executing program 2 (id=726): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000140)=0x400000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000000100)={0x48, 0x15, 0x7a2adb2c071a3d17, 0x70bd27, 0x25dfdbfb, "", [@generic="644ca6cce58c32a751f282c67e27f7813cb45c08adbfe1f84a7df188627d9a3ff1b36fa27654fd74b6fcf923d699451904917dca84480a9e"]}, 0x48}], 0x1, 0x0, 0x0, 0x20000800}, 0x810) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendto$inet6(r0, 0x0, 0xffffffffffffff64, 0x800, 0x0, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000180)=""/228, 0xe4}, {&(0x7f0000000280)=""/166, 0xa6}], 0x3, 0x735f, 0x40000000, 0x9) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000380)=@gcm_128={{0x304}, "a15719b54f69e588", "cb6b5e7ec60f5d982daeb89d24c9a3b0", "1e021beb", "c590b1d28c683dbb"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "aa578b1ba510dd3d", "c5c1a0dddf0d213d781af0fdab2125c9", "db05f7de", "02a4ef6947209db1"}, 0x28) 34.576531199s ago: executing program 2 (id=727): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3", 0x99, 0xc001, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = memfd_secret(0x0) write$P9_RLINK(r3, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0xffffffffffffff10, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r4}]}}]}, 0x3c}}, 0x0) 34.479000263s ago: executing program 2 (id=730): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) r1 = socket$inet(0x2, 0x6, 0x1) sendmsg$inet(r1, &(0x7f0000000200)={&(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000100)="08001efbb07d58", 0x7}, {&(0x7f0000000940)="9b", 0x1}], 0x2, 0x0, 0x0, 0x60000000}, 0x910) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r0, 0x0) (async) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async) socket$inet(0x2, 0x6, 0x1) (async) sendmsg$inet(r1, &(0x7f0000000200)={&(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000100)="08001efbb07d58", 0x7}, {&(0x7f0000000940)="9b", 0x1}], 0x2, 0x0, 0x0, 0x60000000}, 0x910) (async) 30.690647776s ago: executing program 3 (id=786): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$unix(r1, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r4, 0x8910, &(0x7f00000000c0)={'bond_slave_1\x00', @ifru_addrs=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x10082) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) listen(r0, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) connect$unix(r1, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_ifreq(r4, 0x8910, &(0x7f00000000c0)={'bond_slave_1\x00', @ifru_addrs=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) dup(r5) (async) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x10082) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) 30.639547483s ago: executing program 3 (id=788): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000280)={0x48}) (async) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) ioctl$TIOCL_SETSEL(r0, 0x560c, 0x0) 30.638668795s ago: executing program 3 (id=791): pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)="dc", 0x1}], 0x1, 0x3) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) r3 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000002c0), 0x402040, 0x0) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000380)) (async) setresgid(0xee00, 0xee01, 0x0) (async) setregid(0xffffffffffffffff, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x10000, 0x0, 0x0, 0x0, 0x8001, 0x4], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{}, {0xfffffffd}, {}, {0x3, 0x0, 0x0, 0x1, 0x1}, {0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}], '\x00', 0x1000}) (async) close(r1) (async) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000007c0), 0x80000, 0x0) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f00000029c0)={{r4}, "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"}) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="0500000000000000bc900000000000000fa00000000000009500000000000000f42d5f8a8fb17816"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000000)=0x3) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="038000002ebe0ed4204bed8f0000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100001042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="c00104005d594d55351e37c3e80ef95d00000000001c0012800900a90200006e64000000"], 0x3c}}, 0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000dc0)={0x0, 0x28e81e0c, 0x40}) (async) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f00000011c0)={0x0, "5bb891658d0c7ea6ad5345caa9ad0bbe"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000021c0)={0x0, 0x7fff, 0x1}) (async) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r12, &(0x7f0000000100), 0xfffffed5) (async) ioctl$BTRFS_IOC_BALANCE_V2(r8, 0xc4009420, &(0x7f00000025c0)={0x19, 0x1, {0x8f02, @usage=0x2b5fb229, r9, 0x8, 0x8, 0xc22, 0x2, 0x1fd4ff60, 0x37, @struct={0xffff, 0xfaed}, 0x8000, 0x1ef9, [0x5, 0xffff, 0x5, 0x4000000000001, 0x7, 0x2e]}, {0xfffffffffffffff1, @struct={0x1ff, 0x3}, r10, 0x5, 0xfbd, 0xfffffffffffffffc, 0x6, 0x100000001, 0x2, @usage=0x6, 0x6, 0x7fffffff, [0x4, 0x3, 0x4, 0x3ff, 0xff, 0x5]}, {0x4, @usage=0x8, r11, 0x1, 0x9, 0xb, 0x6, 0x8a, 0x40, @struct={0x6, 0x187}, 0x2, 0x0, [0xf, 0x8, 0x262, 0x3, 0x3, 0x7fffffff]}, {0x3ff, 0x0, 0x101}}) 30.568680975s ago: executing program 3 (id=792): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000000fe00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 30.50917219s ago: executing program 3 (id=796): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000001080)='./file1\x00') pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (fail_nth: 41) 29.870799202s ago: executing program 3 (id=803): socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001f80)={'ip6gre0\x00', &(0x7f0000001f00)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x1, 0x889d, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, @private0, 0x20, 0x0, 0xfffffff7, 0x10}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001f80)={'ip6gre0\x00', &(0x7f0000001f00)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x1, 0x889d, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, @private0, 0x20, 0x0, 0xfffffff7, 0x10}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000001e00)=""/219, 0xdb, 0x0, &(0x7f0000001fc0)={0x11, 0x8, r3, 0x1, 0xef, 0x6, @broadcast}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x409, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x0, 0x80c2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x409, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x0, 0x80c2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}]}, 0x4c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001d40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000001480)=[{&(0x7f00000001c0)="75c85d9f0cf8ee8c94c3284e113dd61bdc9ad8383e64f181560aa1bb7327305c78eb5f99d6d4af94c4c5503cbf03495dd79eb8c97a90ee72bd01262bfb05a5207fcc970de5a67ee171299e692dcb39c25a79ba6a68178370023e3ad819f1f2f9ad87881144306414e9eae5acf2207dd356a53a3ad35fe1e4565781eab9fe56896ec853b75a86b8dfb539ab7fffd2e14c95b26c49c140c5f4f24e8cb50c04d381bb66d4954a509412043b23ce33735480b2f356eef1b8159b6b9d785d59fde8", 0xbf}, {&(0x7f00000000c0)="c06f774ade8ca55ba4c599de45cf4ed5a4d32066e998ebbf78f17f", 0x1b}, {&(0x7f0000000280)="71d636d34bcb0d316e43def05ac5364be98a5e89103c9ef7900085b1e827966978a7950c10ddc352953c468d2ae8e20c60e4912da7a186e86b4566f2edefbe6b89e1a1c0452f26b99d91845f68c3d3f32f99e16ea762deb5beb296d71a28651431e6d5badfc7e00fe620da94597dd8e7f70fc0b607912dcb71b51905ef0fc74cbf97c79b6b04fe1df1a8ef87769db6a87c7b9cbac53245ab63d3698c2d7121e2b7576a308ae7689a679ad52afd8dc53b577f1c745ac03f5beb1ed152ba2b085a896aabfa3ebca46320de64a51f23376c830273dae7700459773c657fd1d61fe54bd85a60ea04f3c2404116ea1a5c85", 0xef}, {&(0x7f0000000380)="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", 0xfd}, {&(0x7f0000000480)="122dbfcce9491ac12bd0e871e6f37861b4859b1c342ae78d0fcb2067c461298ecb7fe4fe9468afc4639429130bd4faaf6ebcdb87939ebce161a4232c1939dda64decd3dde49743d5f960ef2397b6c13fd7dd95999f69a002ad5bc6985b6c8ca3164c67b881244f644b2fc75f9a07bad23133b76bf2ac049032825ad61923816419daf1348e9bf138886fbee7d0fb974c6c1d25936de928c3cdbf0663b99d324182566e35de8a07f48cf11a0130b48688591535271722e5acf2cc2682992ac8764abcd56d2a86bc088b2a51f58c00df562affada1883f477723204e0889a555c9a6959247a413669e8f770ee640aefa9be041180fdf1e4f90e32c1b4dba996090c6daea50f7e8c0ade916c9c13160cdf5b69d14286751e4f0ec285daeac3e7394d50f45da781f48b8e0caf729c14eccd588093b8961b546136a83b8617f8fd76d89552ddfe00ada2161337b43126412370738f0c7a024d95abf14bc74d3a5b4eb533b32094681f96d5032d392107cef4a484fecdd19b9d1d7898ab9e1f374e02d5e24b451ebb03f76400b1ce2bf69827c7fe1231edbeb37f82ac3d7628c4f63fd972631e8d9cbd1eaaa214a251ab8e05d42503ea7c5cae3b635409db0e5cd126e74b6d673e8c8650d41929b607a9fb9932be053df5edd5c439fdc91d5e64460ed9dfb1b018d047fdc95a4cd8b5639fa0495558bb10a33ad6acad23c398a2846c9a1e19e9d6306b1b3f392d3157c4e747503544fb25a699dd0d67a8d97bab1d0edda77166e4f04e0aac11bcb0cf3b52d0195f0e9e78bfeaad0b7ffbfe58c9593a1e999cb68300311fc910195d547739bec2593a1b2cd2467c37a018224b99cea2565c704da11bbe6042aa885a3684c076870ef5866332e0f0938719997f3390abac92c4e8146c87e356bb39dc5b5ed244eea39ac47f0a892a11a6438351c9d10cf6853bf07b51ec1315919e76f194e8e3ada2dbfd0527ace7e4670baa692a75bf6aaa908c0cb152e2fe6fda038b8a0a043a22c22c91fec5997909c69b484fc04d26e1d15e27b5016e4b25ec361d07d90cc0bc28e88eab5c84d9b9c078629897a7d5a048a693b11283a5ce4d36dee11b0a0ded708b6c049b3a37f1a156d3f44c5bf32d8c27a38167128fb28701a989a08faec88189ead967b03cb0f2454b2487ed39728388efbf19d3a48c5e5ff93863173e301a9aa867f94f429ac4e4f6ea80361c710e4999a8ed151d943c2b3848691a0c27af06c2cf6abd22d885632e1dce0dd78b6c9d1867ce6f0d42f9b5be6bf0e92c404b6af378ddce8b823151d548d5bada417198c51cbc9f4d496a74a9a2fd41808591b602c8e798146168dbb15cd39e2760d3606524ce71eb01903ca2281f1a346978721799decb8b99fde94ad98cdfe67567e0e7a5f6299a3ad7f291e067883b3913bf0ceb34840a88ac150b0347b28f33cab6754bb9f736ee6c1223e09e6bccd99ab50331fc85d7af995b93b007f2557b54bf07e2557f4361a7b900df8d7f09f85b82057945911058cfd565ef887a6f50789a6a32d7211a8989b7a8dad4c142822d942c1a95b670c84fe6f28da50d254819f0db138328887fcc1cb9ee31e06b616c23f02375fa8cb67db7d6555736c17d9e83f700ca06ceef8944ae70edd76cd629e54cf304d9eef931527f17961f72c906ce6b3488a6dea4df95c90ef7a804145c9e6b0b88e44f557ba60e684543ae00c342c1b1293a429cbb9f5071d36aad1cf736a3462561f904ab1f6032d3cbad09418cdeaf8d2576b57659481d1e6b738139d6eb60d007dfedbe29cc62fd6e1d77299f10f8fe4a15990fada9e3e6f5555b30dfee1223ae5e4298c53c99a009165d6597665624eae5a1a314e59db432152797f6bdcd7bde8919fcfff8c11cb460eb46833706e790c70c9eeced3efc592698490745b6c7b0eaeb01ec403082aa718b38b1554eae3b84ce0f2ec80d97a2faa5d375f5665dbb2a29d6a001063a250df7891fa5574605ad03b8273176e4f60f5307895d5ec106c7c124d479365e2749f06f099466d6a9563d493a8ae22ec44f9d53bf365473db319399d67059451419025df6475820a6887b80b3fe7782517b4d0796022c6e4c02c80fd9ad1e8faaf609ba0f9e71b522a4f2ba697b612c000bf8643505ac7e18b7b8074ba22dd7e8bcf51a0ef398001d413a5257dcb9b47de3bf2d3c57f88102ab7e74b10a8d821e6628cb95f4ac841ebffe7f3aed4ba3d4628ecf8d313511a084e39aedee727daab78d187faca3f71609511c9ee0605947ed749a536e6b9ae229731199e034f17b8ce15ece530fbdfeaf470d25dcdeac4f841c303bf341d475eb1e2992ded00ffd1e4f54db685ad5a12cd1e2d77f9e85442d69799e98faf8666e7cd91e06b9f1445687ed61bc348feb804178ddaf4e0790b977949b243a2d4771a6244bb83fef541c698e2ed2b98cfc4b0da043b4b239a07585364e29cd42ad5d0623670945ae43df09c0fe96cc333d3b9c1cbe5a9af5fc811fef0702a35b941be64539710180aec912b6cf699e534cbd974dd05aa9c5dbfd0983851a8c8c4f62cce060b021fd527eb6f1feed7122c3af670dc532edf82f2b5d6f7eec1a0e8d136b0def7dc11750eda41bae3cbe6a9855fb4cd30afcddf12bf153f3d08cabc6f3b77ad8f1ddce66cf1703ab4c6cb5b08b2920cb8dd72a46d6bdb13ce076ae1c31380c39cf7ce7c2ace9a3a682183cca279e331f2093122514a64602a8e4295ebb29c1dba88c42e62f73eca0a5709bcf62fd59c65cf31317dcaf9f232883e56ad6823db91e21e8792be238e9d9c275a21570d4fc595fd2d9f9ffef73952074a72611adb149fed737980ea4eba57fc2ffa1152d54edfe4bbda6d6932e5d67d2fafe506085e4a8b24ffcf029836dd95cb1c16510d01bafc5d03c1cc1fd23ed6984e0476dce299fbdeeee5b0fdadd4b2304baf370dee83273789f864cf42b4bcd359bbf40bae3c288ee28e56d0df0913cb37fddc47950a9c1134941e9115aaac712406d46fef0d2d59ae63600579be099fcf1560f5782a65bb225fc436ba3dd7f613effda3b490fe5807fa253b5d974855e0ab062f98573514a417c66d4eba3c8b1bdb28c1181ae3dc9a22d25f2a6900a22afd7b8b24bf1d4305ac9c75b1c4062b542848749fb4e7e90092b6de222e67284a1d3b81a97ca716c955c2e2c3bbe4860c04f03b3cc594cf1295edb47ce6ac1a17908f92d5fdf32f4a1119d3dd6add6217c8a33241edf32a23584484f52dd53534c673e1fd3ec497bb7818b5dcd8b20ce67f5a0d9000af3e239ba4b94a6a0d9b492909b12706330336424a929981fe8800ade5a8a24868642826084e3c05e88f8d1b86d9b45e9bf1a0e17ec7fa14c255899c507457ad1488a26001152bfadf784a99e4d9198c6bed29479bb2ad418200cb9d1c6cf798008da7917eb30dcd6a11ec84cc51d19412f10edef213fcfe7f1a8b918afe0ba9cd43efe5d1a9393463c2ebcfa95971e5f9f59cb0621067f52670dea2aa0ba801a6893576e6503b7c1f0edde634005212595555dca585e68d0f2b3bcbe1d87877f8d1e563902b04478786ffef35e3446ee7e61a77f61743bf7c98ccb4ae491a9a2b562689dc242be626d492ed640902721f70f41d4b770c3484829e57a204c41cc65656df07b6520333d463f3ce1fa28e2e4fdd2193dd0b52b480fd64051e50157aad83209004e996b1f99952833387870442d29158ed25ba3597749324e4243f829ac0a37ab4a58fe0df6bdbaa522f540a184a6f7fd45401932d7cc176c772156a5ad2d94449866072cdaf03ab0af01ecf8a850c61c068c9a1c3cde08f7b8dfa22f57f65aed11d10cab71768d81f08a8bb01d80e77e653e6a688c8c03e99669f3ea758fdb5dcce7094f5853f9723350dbcc8e8faaca18d137232feda8ae991516a614f7b17031c2ee3f0d742fa792fae8c9ce8abd1dee541d2a26227b14dfe274a8208ecd620814362a795483fd30837dd3102c2fe8de831117afddb6104bee95c1f03abfb6ea5745ccf9fdad84b806b338fac18c2cb7137893fd8542e0be5365d41e5cad610c4b86ccc118cf6da1b4444c4bf9df46d6fc7f9c8c13c85c4217ab1289b16164e1bfaef695de7752123e8d73e13d958568d579cc65fc5e83a52df922eb3ee28ca3e619ddd5686729dcda618a19c1c6cdecb84e8737b95ab4d535983f7b08d5a9ec650582edf53b943d928ebc3d7fe2ca9e6e066535468dd30cd1d305e61da24a2e1335ef121ad995825d28d68eff4af631e50716093a2ab8fbb369b645967adba6ef7255fb7cb2b5b7da3427940428e14029c496e8161400623fcf27b82ba550b134903be720b802233f71de7326bfc3d16a7b4404a4053e8d4afc113a7e9133a0a0840ef6131dcb316183eb2fba830e1fbb5a0989a80b251c3783d18f33d44c712f9bd892e0d387279cd1c77b8dbe21ad040503880bfd61175469a6b4d9bc21f54959c8bb52646873740eba645e78d23829f7d8ec1ffec393eea3f2d1e1b8fab5ac02cffb92ee58bc9812e705047cc341cf3e29a415ca4c3b247549cc22c2155747c7e81c6ffc933d4579c5589097b8058fce7cdc20338dd835cc3ac6651b2d139c6c0d12ffeba0c84d8357bcde1ae78a47460dbb298740c6d902c5f42343d36c3901e21633ead9bad8bc02170ba2715830fbbf2404646b956a099c2deef14ac24cc5361d75a8049aedffecb8afaa1a9f1bad1cc7eb1a5e7c2729f75e4e848cbadab9d3a7fe16389f69177aa0d548aa04d7d3a3fcaeb1b6d04817a8e2d13ac4c10dea577da94fae2004f1526c4c51b2a08e59c20b0df5a369ac44f25648efc645d32e8e581c093de4953779c2e4c28aa5166109966172a0470945fef5240553397df6e1c69994b6ca4717aec46e0e600e2e3ff0453e73acac227c2143b265890ec89bff3273837bf07f70b133ab69a901d6e443fbe4bc4eaae867f376b9f58977b486545b537255cc65a9bd785bea74029d58c1f9718390deb1706e96af6acecd94251b761253541b38631c87caf1208bbab039ab60f8c00f4318371afcb59ee65dc3e9a46fa8a1fe1416370c10b99fa8c8a20a8c9b48a4e66df3e60a5ae9c82dc4fabf379180acaba4fda8e6a944b661c1f0b30dc2b701fbf91f5d111ba0ef99873dcf20af647991047fabad0bc27afe9594d27d81b9b1edff2cb98e019d02f730ba30e2c31028d2db7ac819161cc120b11733226d4a8678d0b661f85418632b2915572cb42ca411caf465b98822251e83777099d1beb0ee5e28a6e298aa7f8faa06c2d128c5ab397df9f7aef1d4028d13dc240b3fd4aac06a16359affdd6ee26b9f9f96604d3fb2a992dc51ef9c2da37f8d62745a17063460687b9f2146a010056d5464d7ca3028e1a875630362bc9e0bbdc931305e9e8890823f4f59d048785392dc9997f42615890860c7a2a4bb1ea4daa009d7ed80d7ca5eecac173ddd3c14d5c4fa684c00e269b5a0b42532641f73c2b5e8bed24775be6af1dc2a8ca0ff63b406f6f89c61eab7fb2658c39d0920953651c3850af9d3aaa0ad9aae4684c7b3cba2582596549fdddbd559282c3c1e944d721c0d119c5ffcc2d916ad92c7abea94bf3148a5d9ef905b5747310e2d4afedd0205de6b0cfc2963d746e44cf322f8eae529e98feeb5dfb084e3345b4afdd96c01d0d6cc2f578e7050309eb819e5bb922430046dc93ff7d3e92a5d7a7275536526010910844908a897f06742c59baa5153fc1900e15d5c1f3cd99d8154ce5ff5a292e8847662a512ec27d", 0x1000}], 0x5, &(0x7f0000001500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8b}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x93d}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x78}}, {{&(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f0000001980)=[{&(0x7f0000001580)="262c84c502ee40008349f48c84c12fd8fe8caf2bccd5b185bbfad5f67ffc8abb4f2ff06131e528356e47eeab17c27091df9d1acbe443dff5d69ce484d90ca7cb283b3e62032e049f1195385139ca9cd314da5a9826b53f4899cada281e85aa1c2feed6c72f81097b488cdfdb16a480c117bd510d3096f3b88c7db5876e39b6dddd2893e868037428bb81a4ed4f10faf0ac25689664d5fe8db0ceec4917a9ad6a9e669cc4d32c0a5ab9aba8", 0xab}, {&(0x7f0000001640)="d225f3d7e6210228c5159131afb25bac9ff4f75f2f1c5840d10fec522d6cb5893bdf45c9cb1de0bdb1985515e0620216f7cb9344eecb5b817e54dbefc3dfefe859958a159de7ec6eadf8bfcf77d700a72621a5f0d16e88f36ab45c7e95ba700ce221c5ad83b5fc2db721bc60dc07926eaab8e02281a4c9d15c36bfe8c46f76c15ee24cd63b6b8c7c96128219478c2aefd0ec36cd67db3fc116a14233ec8b099a1bcd67834780b62970fcdc3cf4c33e5e42f7b9c4f81d40f0c53683d93949b2e5a4559ce2546201ff1412cfada9182bc542ba6b2296fbf299e26ff5", 0xdb}, {&(0x7f0000001740)="e0d382b4bb9b7e256a2bc55d6c92a265bf68d5fabcdab6d370914fbc36fcc100d37447a66f54da10d4b601ba488acb060453ab95bc314b", 0x37}, {&(0x7f0000001780)="5bf5a340844d4a5997fcefffad62610cf0afa5ad703bd9777eb4c64accd509625c0c527858e1a8dea9f649d1d693a203a9d38b2d4fd470f82cea1f1394a35b18c8689ed40f39680fbdfbe398be6a479d3f50b3b7a7c342b8720c72f470003ec3460ac06b64a852575f8b4dfc802c34f7f3520037d3d9cde1b246ba15c8e73e4e438f6315787f4f048e3904b340f044f3c8bfefaf26546a9b4641faec484a6ef72af345d0c978856e36408469efc5f2f276803059d0b9463ca1f3848d4385472935835abd59c0db9b56215885ee7b3ed18e", 0xd1}, {&(0x7f0000001880)="cb7c44879fabeffafe81546fcad7f2a4e3dc2f5b3bead51772dc89afd9e9861024e0857d917795461c0992de3249462865e1ab8514c3520d3f7beb598ae77259c7f3860137752582e81666d534ab304a9bbf4bd3672ad92fe131ab08ef0cdb3ec1708a5649485de695aac0ac5e627e334bf2b0431d20c1063496cc202e5a994d876be50703b45a12b516ab19ad2ca2e1245d4c7e97b8d53e1151bef05c9b1fa1cd67be4923f2cf3bc7dbaeb24bce41c317c3c227763d5b58fcb456eb47025fdbed79267526332ad522c8e4afa7253e846997604dbc0cef7da244", 0xda}], 0x5, &(0x7f0000001a00)=[@ip_retopts={{0xa0, 0x0, 0x7, {[@noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0x9a, 0x0, 0xe, [0x8, 0x3, 0x7e, 0x5, 0x81, 0x4, 0x38f, 0x3]}, @timestamp={0x44, 0x10, 0x44, 0x0, 0x1, [0x2, 0x101, 0x7]}, @cipso={0x86, 0x3d, 0xffffffffffffffff, [{0x1, 0xb, "3114cec9802f1591a8"}, {0x1, 0x5, 'SB+'}, {0x5, 0x3, '!'}, {0x2, 0xc, "fbc425099d3e94e5d2fd"}, {0x2, 0xc, "67a7ec493a4f465cd8da"}, {0x2, 0xa, "d19a1e9bd1c47d04"}, {0x6, 0x2}]}, @end, @rr={0x7, 0x7, 0x24, [@remote]}, @generic={0x7, 0x11, "683f6cc3a5cf6ade5786d6fc909887"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x40}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0xd8}}, {{&(0x7f0000001b00)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000001b40)="a445f548144d1e14c32845838269be2e76bc1bef6aa793ac033b22584f11d1913152e98661528812966091cdeb3a7bce", 0x30}, {&(0x7f0000001b80)="9232b7ae96a8e4873866c91821c69312dacbf593cc86df3d6326c728203121cec5940dea0649be8867d8bc90513ffbf239493f16105b49ad6d2ff2e4838847501cdb083585640e", 0x47}], 0x2, &(0x7f0000001c40)=[@ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x90, 0x0, 0x7, {[@cipso={0x86, 0x4e, 0x3, [{0x0, 0x5, "df3611"}, {0x5, 0xd, "68e93d7f3a96836109a797"}, {0x6, 0x12, "b48ff4119914b06a3cedcd416ab57637"}, {0x5, 0x12, "8b40a9456f547abcfbb2dd0e8bb59bcb"}, {0x6, 0x12, "c0958f8e18dc2472f710c278b82bd470"}]}, @end, @timestamp={0x44, 0x8, 0x34, 0x0, 0x3, [0x7]}, @end, @ssrr={0x89, 0x1f, 0xb, [@remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010101, @broadcast, @broadcast, @loopback]}, @timestamp={0x44, 0x8, 0x60, 0x0, 0xa, [0x3]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0xd8}}], 0x3, 0x4c886) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb3f66d6361dbb7d553b4e92155", 0x39}], 0x1}, 0x0) 29.767784655s ago: executing program 32 (id=803): socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001f80)={'ip6gre0\x00', &(0x7f0000001f00)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x1, 0x889d, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, @private0, 0x20, 0x0, 0xfffffff7, 0x10}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001f80)={'ip6gre0\x00', &(0x7f0000001f00)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x1, 0x889d, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, @private0, 0x20, 0x0, 0xfffffff7, 0x10}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000001e00)=""/219, 0xdb, 0x0, &(0x7f0000001fc0)={0x11, 0x8, r3, 0x1, 0xef, 0x6, @broadcast}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x409, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x0, 0x80c2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x409, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x0, 0x80c2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}]}, 0x4c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001d40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000001480)=[{&(0x7f00000001c0)="75c85d9f0cf8ee8c94c3284e113dd61bdc9ad8383e64f181560aa1bb7327305c78eb5f99d6d4af94c4c5503cbf03495dd79eb8c97a90ee72bd01262bfb05a5207fcc970de5a67ee171299e692dcb39c25a79ba6a68178370023e3ad819f1f2f9ad87881144306414e9eae5acf2207dd356a53a3ad35fe1e4565781eab9fe56896ec853b75a86b8dfb539ab7fffd2e14c95b26c49c140c5f4f24e8cb50c04d381bb66d4954a509412043b23ce33735480b2f356eef1b8159b6b9d785d59fde8", 0xbf}, {&(0x7f00000000c0)="c06f774ade8ca55ba4c599de45cf4ed5a4d32066e998ebbf78f17f", 0x1b}, {&(0x7f0000000280)="71d636d34bcb0d316e43def05ac5364be98a5e89103c9ef7900085b1e827966978a7950c10ddc352953c468d2ae8e20c60e4912da7a186e86b4566f2edefbe6b89e1a1c0452f26b99d91845f68c3d3f32f99e16ea762deb5beb296d71a28651431e6d5badfc7e00fe620da94597dd8e7f70fc0b607912dcb71b51905ef0fc74cbf97c79b6b04fe1df1a8ef87769db6a87c7b9cbac53245ab63d3698c2d7121e2b7576a308ae7689a679ad52afd8dc53b577f1c745ac03f5beb1ed152ba2b085a896aabfa3ebca46320de64a51f23376c830273dae7700459773c657fd1d61fe54bd85a60ea04f3c2404116ea1a5c85", 0xef}, {&(0x7f0000000380)="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", 0xfd}, {&(0x7f0000000480)="122dbfcce9491ac12bd0e871e6f37861b4859b1c342ae78d0fcb2067c461298ecb7fe4fe9468afc4639429130bd4faaf6ebcdb87939ebce161a4232c1939dda64decd3dde49743d5f960ef2397b6c13fd7dd95999f69a002ad5bc6985b6c8ca3164c67b881244f644b2fc75f9a07bad23133b76bf2ac049032825ad61923816419daf1348e9bf138886fbee7d0fb974c6c1d25936de928c3cdbf0663b99d324182566e35de8a07f48cf11a0130b48688591535271722e5acf2cc2682992ac8764abcd56d2a86bc088b2a51f58c00df562affada1883f477723204e0889a555c9a6959247a413669e8f770ee640aefa9be041180fdf1e4f90e32c1b4dba996090c6daea50f7e8c0ade916c9c13160cdf5b69d14286751e4f0ec285daeac3e7394d50f45da781f48b8e0caf729c14eccd588093b8961b546136a83b8617f8fd76d89552ddfe00ada2161337b43126412370738f0c7a024d95abf14bc74d3a5b4eb533b32094681f96d5032d392107cef4a484fecdd19b9d1d7898ab9e1f374e02d5e24b451ebb03f76400b1ce2bf69827c7fe1231edbeb37f82ac3d7628c4f63fd972631e8d9cbd1eaaa214a251ab8e05d42503ea7c5cae3b635409db0e5cd126e74b6d673e8c8650d41929b607a9fb9932be053df5edd5c439fdc91d5e64460ed9dfb1b018d047fdc95a4cd8b5639fa0495558bb10a33ad6acad23c398a2846c9a1e19e9d6306b1b3f392d3157c4e747503544fb25a699dd0d67a8d97bab1d0edda77166e4f04e0aac11bcb0cf3b52d0195f0e9e78bfeaad0b7ffbfe58c9593a1e999cb68300311fc910195d547739bec2593a1b2cd2467c37a018224b99cea2565c704da11bbe6042aa885a3684c076870ef5866332e0f0938719997f3390abac92c4e8146c87e356bb39dc5b5ed244eea39ac47f0a892a11a6438351c9d10cf6853bf07b51ec1315919e76f194e8e3ada2dbfd0527ace7e4670baa692a75bf6aaa908c0cb152e2fe6fda038b8a0a043a22c22c91fec5997909c69b484fc04d26e1d15e27b5016e4b25ec361d07d90cc0bc28e88eab5c84d9b9c078629897a7d5a048a693b11283a5ce4d36dee11b0a0ded708b6c049b3a37f1a156d3f44c5bf32d8c27a38167128fb28701a989a08faec88189ead967b03cb0f2454b2487ed39728388efbf19d3a48c5e5ff93863173e301a9aa867f94f429ac4e4f6ea80361c710e4999a8ed151d943c2b3848691a0c27af06c2cf6abd22d885632e1dce0dd78b6c9d1867ce6f0d42f9b5be6bf0e92c404b6af378ddce8b823151d548d5bada417198c51cbc9f4d496a74a9a2fd41808591b602c8e798146168dbb15cd39e2760d3606524ce71eb01903ca2281f1a346978721799decb8b99fde94ad98cdfe67567e0e7a5f6299a3ad7f291e067883b3913bf0ceb34840a88ac150b0347b28f33cab6754bb9f736ee6c1223e09e6bccd99ab50331fc85d7af995b93b007f2557b54bf07e2557f4361a7b900df8d7f09f85b82057945911058cfd565ef887a6f50789a6a32d7211a8989b7a8dad4c142822d942c1a95b670c84fe6f28da50d254819f0db138328887fcc1cb9ee31e06b616c23f02375fa8cb67db7d6555736c17d9e83f700ca06ceef8944ae70edd76cd629e54cf304d9eef931527f17961f72c906ce6b3488a6dea4df95c90ef7a804145c9e6b0b88e44f557ba60e684543ae00c342c1b1293a429cbb9f5071d36aad1cf736a3462561f904ab1f6032d3cbad09418cdeaf8d2576b57659481d1e6b738139d6eb60d007dfedbe29cc62fd6e1d77299f10f8fe4a15990fada9e3e6f5555b30dfee1223ae5e4298c53c99a009165d6597665624eae5a1a314e59db432152797f6bdcd7bde8919fcfff8c11cb460eb46833706e790c70c9eeced3efc592698490745b6c7b0eaeb01ec403082aa718b38b1554eae3b84ce0f2ec80d97a2faa5d375f5665dbb2a29d6a001063a250df7891fa5574605ad03b8273176e4f60f5307895d5ec106c7c124d479365e2749f06f099466d6a9563d493a8ae22ec44f9d53bf365473db319399d67059451419025df6475820a6887b80b3fe7782517b4d0796022c6e4c02c80fd9ad1e8faaf609ba0f9e71b522a4f2ba697b612c000bf8643505ac7e18b7b8074ba22dd7e8bcf51a0ef398001d413a5257dcb9b47de3bf2d3c57f88102ab7e74b10a8d821e6628cb95f4ac841ebffe7f3aed4ba3d4628ecf8d313511a084e39aedee727daab78d187faca3f71609511c9ee0605947ed749a536e6b9ae229731199e034f17b8ce15ece530fbdfeaf470d25dcdeac4f841c303bf341d475eb1e2992ded00ffd1e4f54db685ad5a12cd1e2d77f9e85442d69799e98faf8666e7cd91e06b9f1445687ed61bc348feb804178ddaf4e0790b977949b243a2d4771a6244bb83fef541c698e2ed2b98cfc4b0da043b4b239a07585364e29cd42ad5d0623670945ae43df09c0fe96cc333d3b9c1cbe5a9af5fc811fef0702a35b941be64539710180aec912b6cf699e534cbd974dd05aa9c5dbfd0983851a8c8c4f62cce060b021fd527eb6f1feed7122c3af670dc532edf82f2b5d6f7eec1a0e8d136b0def7dc11750eda41bae3cbe6a9855fb4cd30afcddf12bf153f3d08cabc6f3b77ad8f1ddce66cf1703ab4c6cb5b08b2920cb8dd72a46d6bdb13ce076ae1c31380c39cf7ce7c2ace9a3a682183cca279e331f2093122514a64602a8e4295ebb29c1dba88c42e62f73eca0a5709bcf62fd59c65cf31317dcaf9f232883e56ad6823db91e21e8792be238e9d9c275a21570d4fc595fd2d9f9ffef73952074a72611adb149fed737980ea4eba57fc2ffa1152d54edfe4bbda6d6932e5d67d2fafe506085e4a8b24ffcf029836dd95cb1c16510d01bafc5d03c1cc1fd23ed6984e0476dce299fbdeeee5b0fdadd4b2304baf370dee83273789f864cf42b4bcd359bbf40bae3c288ee28e56d0df0913cb37fddc47950a9c1134941e9115aaac712406d46fef0d2d59ae63600579be099fcf1560f5782a65bb225fc436ba3dd7f613effda3b490fe5807fa253b5d974855e0ab062f98573514a417c66d4eba3c8b1bdb28c1181ae3dc9a22d25f2a6900a22afd7b8b24bf1d4305ac9c75b1c4062b542848749fb4e7e90092b6de222e67284a1d3b81a97ca716c955c2e2c3bbe4860c04f03b3cc594cf1295edb47ce6ac1a17908f92d5fdf32f4a1119d3dd6add6217c8a33241edf32a23584484f52dd53534c673e1fd3ec497bb7818b5dcd8b20ce67f5a0d9000af3e239ba4b94a6a0d9b492909b12706330336424a929981fe8800ade5a8a24868642826084e3c05e88f8d1b86d9b45e9bf1a0e17ec7fa14c255899c507457ad1488a26001152bfadf784a99e4d9198c6bed29479bb2ad418200cb9d1c6cf798008da7917eb30dcd6a11ec84cc51d19412f10edef213fcfe7f1a8b918afe0ba9cd43efe5d1a9393463c2ebcfa95971e5f9f59cb0621067f52670dea2aa0ba801a6893576e6503b7c1f0edde634005212595555dca585e68d0f2b3bcbe1d87877f8d1e563902b04478786ffef35e3446ee7e61a77f61743bf7c98ccb4ae491a9a2b562689dc242be626d492ed640902721f70f41d4b770c3484829e57a204c41cc65656df07b6520333d463f3ce1fa28e2e4fdd2193dd0b52b480fd64051e50157aad83209004e996b1f99952833387870442d29158ed25ba3597749324e4243f829ac0a37ab4a58fe0df6bdbaa522f540a184a6f7fd45401932d7cc176c772156a5ad2d94449866072cdaf03ab0af01ecf8a850c61c068c9a1c3cde08f7b8dfa22f57f65aed11d10cab71768d81f08a8bb01d80e77e653e6a688c8c03e99669f3ea758fdb5dcce7094f5853f9723350dbcc8e8faaca18d137232feda8ae991516a614f7b17031c2ee3f0d742fa792fae8c9ce8abd1dee541d2a26227b14dfe274a8208ecd620814362a795483fd30837dd3102c2fe8de831117afddb6104bee95c1f03abfb6ea5745ccf9fdad84b806b338fac18c2cb7137893fd8542e0be5365d41e5cad610c4b86ccc118cf6da1b4444c4bf9df46d6fc7f9c8c13c85c4217ab1289b16164e1bfaef695de7752123e8d73e13d958568d579cc65fc5e83a52df922eb3ee28ca3e619ddd5686729dcda618a19c1c6cdecb84e8737b95ab4d535983f7b08d5a9ec650582edf53b943d928ebc3d7fe2ca9e6e066535468dd30cd1d305e61da24a2e1335ef121ad995825d28d68eff4af631e50716093a2ab8fbb369b645967adba6ef7255fb7cb2b5b7da3427940428e14029c496e8161400623fcf27b82ba550b134903be720b802233f71de7326bfc3d16a7b4404a4053e8d4afc113a7e9133a0a0840ef6131dcb316183eb2fba830e1fbb5a0989a80b251c3783d18f33d44c712f9bd892e0d387279cd1c77b8dbe21ad040503880bfd61175469a6b4d9bc21f54959c8bb52646873740eba645e78d23829f7d8ec1ffec393eea3f2d1e1b8fab5ac02cffb92ee58bc9812e705047cc341cf3e29a415ca4c3b247549cc22c2155747c7e81c6ffc933d4579c5589097b8058fce7cdc20338dd835cc3ac6651b2d139c6c0d12ffeba0c84d8357bcde1ae78a47460dbb298740c6d902c5f42343d36c3901e21633ead9bad8bc02170ba2715830fbbf2404646b956a099c2deef14ac24cc5361d75a8049aedffecb8afaa1a9f1bad1cc7eb1a5e7c2729f75e4e848cbadab9d3a7fe16389f69177aa0d548aa04d7d3a3fcaeb1b6d04817a8e2d13ac4c10dea577da94fae2004f1526c4c51b2a08e59c20b0df5a369ac44f25648efc645d32e8e581c093de4953779c2e4c28aa5166109966172a0470945fef5240553397df6e1c69994b6ca4717aec46e0e600e2e3ff0453e73acac227c2143b265890ec89bff3273837bf07f70b133ab69a901d6e443fbe4bc4eaae867f376b9f58977b486545b537255cc65a9bd785bea74029d58c1f9718390deb1706e96af6acecd94251b761253541b38631c87caf1208bbab039ab60f8c00f4318371afcb59ee65dc3e9a46fa8a1fe1416370c10b99fa8c8a20a8c9b48a4e66df3e60a5ae9c82dc4fabf379180acaba4fda8e6a944b661c1f0b30dc2b701fbf91f5d111ba0ef99873dcf20af647991047fabad0bc27afe9594d27d81b9b1edff2cb98e019d02f730ba30e2c31028d2db7ac819161cc120b11733226d4a8678d0b661f85418632b2915572cb42ca411caf465b98822251e83777099d1beb0ee5e28a6e298aa7f8faa06c2d128c5ab397df9f7aef1d4028d13dc240b3fd4aac06a16359affdd6ee26b9f9f96604d3fb2a992dc51ef9c2da37f8d62745a17063460687b9f2146a010056d5464d7ca3028e1a875630362bc9e0bbdc931305e9e8890823f4f59d048785392dc9997f42615890860c7a2a4bb1ea4daa009d7ed80d7ca5eecac173ddd3c14d5c4fa684c00e269b5a0b42532641f73c2b5e8bed24775be6af1dc2a8ca0ff63b406f6f89c61eab7fb2658c39d0920953651c3850af9d3aaa0ad9aae4684c7b3cba2582596549fdddbd559282c3c1e944d721c0d119c5ffcc2d916ad92c7abea94bf3148a5d9ef905b5747310e2d4afedd0205de6b0cfc2963d746e44cf322f8eae529e98feeb5dfb084e3345b4afdd96c01d0d6cc2f578e7050309eb819e5bb922430046dc93ff7d3e92a5d7a7275536526010910844908a897f06742c59baa5153fc1900e15d5c1f3cd99d8154ce5ff5a292e8847662a512ec27d", 0x1000}], 0x5, &(0x7f0000001500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8b}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x93d}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x78}}, {{&(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f0000001980)=[{&(0x7f0000001580)="262c84c502ee40008349f48c84c12fd8fe8caf2bccd5b185bbfad5f67ffc8abb4f2ff06131e528356e47eeab17c27091df9d1acbe443dff5d69ce484d90ca7cb283b3e62032e049f1195385139ca9cd314da5a9826b53f4899cada281e85aa1c2feed6c72f81097b488cdfdb16a480c117bd510d3096f3b88c7db5876e39b6dddd2893e868037428bb81a4ed4f10faf0ac25689664d5fe8db0ceec4917a9ad6a9e669cc4d32c0a5ab9aba8", 0xab}, {&(0x7f0000001640)="d225f3d7e6210228c5159131afb25bac9ff4f75f2f1c5840d10fec522d6cb5893bdf45c9cb1de0bdb1985515e0620216f7cb9344eecb5b817e54dbefc3dfefe859958a159de7ec6eadf8bfcf77d700a72621a5f0d16e88f36ab45c7e95ba700ce221c5ad83b5fc2db721bc60dc07926eaab8e02281a4c9d15c36bfe8c46f76c15ee24cd63b6b8c7c96128219478c2aefd0ec36cd67db3fc116a14233ec8b099a1bcd67834780b62970fcdc3cf4c33e5e42f7b9c4f81d40f0c53683d93949b2e5a4559ce2546201ff1412cfada9182bc542ba6b2296fbf299e26ff5", 0xdb}, {&(0x7f0000001740)="e0d382b4bb9b7e256a2bc55d6c92a265bf68d5fabcdab6d370914fbc36fcc100d37447a66f54da10d4b601ba488acb060453ab95bc314b", 0x37}, {&(0x7f0000001780)="5bf5a340844d4a5997fcefffad62610cf0afa5ad703bd9777eb4c64accd509625c0c527858e1a8dea9f649d1d693a203a9d38b2d4fd470f82cea1f1394a35b18c8689ed40f39680fbdfbe398be6a479d3f50b3b7a7c342b8720c72f470003ec3460ac06b64a852575f8b4dfc802c34f7f3520037d3d9cde1b246ba15c8e73e4e438f6315787f4f048e3904b340f044f3c8bfefaf26546a9b4641faec484a6ef72af345d0c978856e36408469efc5f2f276803059d0b9463ca1f3848d4385472935835abd59c0db9b56215885ee7b3ed18e", 0xd1}, {&(0x7f0000001880)="cb7c44879fabeffafe81546fcad7f2a4e3dc2f5b3bead51772dc89afd9e9861024e0857d917795461c0992de3249462865e1ab8514c3520d3f7beb598ae77259c7f3860137752582e81666d534ab304a9bbf4bd3672ad92fe131ab08ef0cdb3ec1708a5649485de695aac0ac5e627e334bf2b0431d20c1063496cc202e5a994d876be50703b45a12b516ab19ad2ca2e1245d4c7e97b8d53e1151bef05c9b1fa1cd67be4923f2cf3bc7dbaeb24bce41c317c3c227763d5b58fcb456eb47025fdbed79267526332ad522c8e4afa7253e846997604dbc0cef7da244", 0xda}], 0x5, &(0x7f0000001a00)=[@ip_retopts={{0xa0, 0x0, 0x7, {[@noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0x9a, 0x0, 0xe, [0x8, 0x3, 0x7e, 0x5, 0x81, 0x4, 0x38f, 0x3]}, @timestamp={0x44, 0x10, 0x44, 0x0, 0x1, [0x2, 0x101, 0x7]}, @cipso={0x86, 0x3d, 0xffffffffffffffff, [{0x1, 0xb, "3114cec9802f1591a8"}, {0x1, 0x5, 'SB+'}, {0x5, 0x3, '!'}, {0x2, 0xc, "fbc425099d3e94e5d2fd"}, {0x2, 0xc, "67a7ec493a4f465cd8da"}, {0x2, 0xa, "d19a1e9bd1c47d04"}, {0x6, 0x2}]}, @end, @rr={0x7, 0x7, 0x24, [@remote]}, @generic={0x7, 0x11, "683f6cc3a5cf6ade5786d6fc909887"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x40}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0xd8}}, {{&(0x7f0000001b00)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000001b40)="a445f548144d1e14c32845838269be2e76bc1bef6aa793ac033b22584f11d1913152e98661528812966091cdeb3a7bce", 0x30}, {&(0x7f0000001b80)="9232b7ae96a8e4873866c91821c69312dacbf593cc86df3d6326c728203121cec5940dea0649be8867d8bc90513ffbf239493f16105b49ad6d2ff2e4838847501cdb083585640e", 0x47}], 0x2, &(0x7f0000001c40)=[@ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x90, 0x0, 0x7, {[@cipso={0x86, 0x4e, 0x3, [{0x0, 0x5, "df3611"}, {0x5, 0xd, "68e93d7f3a96836109a797"}, {0x6, 0x12, "b48ff4119914b06a3cedcd416ab57637"}, {0x5, 0x12, "8b40a9456f547abcfbb2dd0e8bb59bcb"}, {0x6, 0x12, "c0958f8e18dc2472f710c278b82bd470"}]}, @end, @timestamp={0x44, 0x8, 0x34, 0x0, 0x3, [0x7]}, @end, @ssrr={0x89, 0x1f, 0xb, [@remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010101, @broadcast, @broadcast, @loopback]}, @timestamp={0x44, 0x8, 0x60, 0x0, 0xa, [0x3]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0xd8}}], 0x3, 0x4c886) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb3f66d6361dbb7d553b4e92155", 0x39}], 0x1}, 0x0) 29.300734536s ago: executing program 0 (id=811): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x28, r1, 0xef5ebf77ce25880d, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01020008000900", @ANYRES32, @ANYBLOB="08000a00e1"], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000380)=@userptr={0x2, 0x8, 0x4, 0x20, 0x37, {}, {0x2, 0x0, 0x9, 0x0, 0x3a, 0xf, "7a9ebb17"}, 0x7fb, 0x2, {&(0x7f00000001c0)}, 0x5}) r4 = syz_io_uring_complete(0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r4, 0x400c330d, &(0x7f0000000040)={0x200, 0x46a4}) 29.300047278s ago: executing program 0 (id=812): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000402505a8a440000102030109021b000101000000090400000207010100090501020081"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x2d, 0x1001, r6, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x103bff, 0x111) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r10 = socket(0x1, 0x803, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_delvlan={0x17, 0x70, 0x1, 0x0, 0x2, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x43, 0x4}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) r13 = syz_open_dev$char_usb(0xc, 0xb4, 0x7fff) pwritev(r13, &(0x7f00000004c0)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1, 0x9) 27.670650399s ago: executing program 0 (id=819): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000180)='./file1\x00') chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1f) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 26.528931993s ago: executing program 0 (id=822): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000000000000000fe00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 26.439512756s ago: executing program 0 (id=823): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1810000000000000000000000300000085000000110000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x45008600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x98990100, 0x0, 0x0, 0x0, 0x0, 0x0) 25.91071436s ago: executing program 0 (id=828): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x34, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}]]}, 0x34}}, 0x10) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan1\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x2, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 25.759143522s ago: executing program 33 (id=828): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x34, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}]]}, 0x34}}, 0x10) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan1\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x2, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19.46078054s ago: executing program 34 (id=730): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) r1 = socket$inet(0x2, 0x6, 0x1) sendmsg$inet(r1, &(0x7f0000000200)={&(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000100)="08001efbb07d58", 0x7}, {&(0x7f0000000940)="9b", 0x1}], 0x2, 0x0, 0x0, 0x60000000}, 0x910) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r0, 0x0) (async) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async) socket$inet(0x2, 0x6, 0x1) (async) sendmsg$inet(r1, &(0x7f0000000200)={&(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000100)="08001efbb07d58", 0x7}, {&(0x7f0000000940)="9b", 0x1}], 0x2, 0x0, 0x0, 0x60000000}, 0x910) (async) 17.437595743s ago: executing program 4 (id=907): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}, 0x1, 0xffff8e88}, 0x10) 17.360312213s ago: executing program 4 (id=908): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) (async) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) (async) r2 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x18\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r2, 0x10000) (async) fcntl$addseals(r2, 0x409, 0x7) (async) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000440)=0x2) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32) r6 = socket(0x10, 0x803, 0x4000) (async, rerun: 32) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) (async) unshare(0x40200) (async) r9 = semget(0x1, 0x4, 0x39c) semop(r9, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x470d0, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048090}, 0x8000) (async) semop(r9, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}, {0x2, 0x100, 0x800}], 0x2) semctl$SETALL(r9, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) (async) unshare(0x40400) (async, rerun: 64) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r8}}, 0x18) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x26}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 17.36013245s ago: executing program 4 (id=909): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x8, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x80000001, 0x5000, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b80100000066ba2100b8be435372efb80000010066bad10466ed0f300f300fc79d53bf0000c4b9e16dc301012202", 0x66}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17.080775332s ago: executing program 4 (id=912): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000001200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 17.030683982s ago: executing program 4 (id=913): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x6576, 0xd}) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) (async) 16.649022866s ago: executing program 4 (id=918): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x40141) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x9}, {}, {0x7, 0xb}}}, 0x24}}, 0x20000000) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r10 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r11 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r10, 0x4018aebd, &(0x7f0000000040)={0x0, r11}) r12 = eventfd(0x3) setreuid(0xee01, 0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = getpgid(0x0) fcntl$setownex(r14, 0xf, &(0x7f0000000140)={0x0, r15}) sendmmsg$unix(r13, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x26048041) ioctl$KVM_HYPERV_EVENTFD(r10, 0x4018aebd, &(0x7f00000000c0)={0x0, r12}) r16 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3b) ioctl$KVM_SET_USER_MEMORY_REGION(r16, 0x4020ae46, &(0x7f0000000180)={0x0, 0x7, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_IRQ_LINE(r10, 0x4008ae61, &(0x7f0000000000)={0xfffffffe, 0x7}) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0xc06c4124, &(0x7f0000000080)) writev(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000740)='X', 0x1}], 0x2) 16.545579636s ago: executing program 35 (id=918): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x40141) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x9}, {}, {0x7, 0xb}}}, 0x24}}, 0x20000000) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r10 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r11 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r10, 0x4018aebd, &(0x7f0000000040)={0x0, r11}) r12 = eventfd(0x3) setreuid(0xee01, 0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = getpgid(0x0) fcntl$setownex(r14, 0xf, &(0x7f0000000140)={0x0, r15}) sendmmsg$unix(r13, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x26048041) ioctl$KVM_HYPERV_EVENTFD(r10, 0x4018aebd, &(0x7f00000000c0)={0x0, r12}) r16 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3b) ioctl$KVM_SET_USER_MEMORY_REGION(r16, 0x4020ae46, &(0x7f0000000180)={0x0, 0x7, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_IRQ_LINE(r10, 0x4008ae61, &(0x7f0000000000)={0xfffffffe, 0x7}) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0xc06c4124, &(0x7f0000000080)) writev(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000740)='X', 0x1}], 0x2) 15.480959077s ago: executing program 5 (id=929): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000000001200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 15.417498095s ago: executing program 5 (id=931): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000}, 0x48) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000240)=0x2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) getpeername$netrom(r5, &(0x7f0000000100)={{}, [@remote, @null, @netrom, @rose, @default, @netrom, @rose, @rose]}, &(0x7f00000001c0)=0x48) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="460f01c8f3420f5f8a00500000c4c1f058d048b800380000000000000f23c00f21f835020004000f23f8670f01cb0f011d00000000410f01d167410f01f8b9800000c00f3235000100000f302e260f07", 0x50}], 0x1, 0x66, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.248733451s ago: executing program 5 (id=935): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000598000/0x3000)=nil, 0x3000, 0xf, 0x2010, r3, 0x30e6a000) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x30, r1, 0xb97534d5fe9704cf, 0x70bd2c, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000002a0000000500000000000000", @ANYRES32, @ANYBLOB="0000000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0xa}}, 0x14}}, 0x20048000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000598000/0x3000)=nil, 0x3000, 0xf, 0x2010, r3, 0x30e6a000) (async) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x30, r1, 0xb97534d5fe9704cf, 0x70bd2c, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000002a0000000500000000000000", @ANYRES32, @ANYBLOB="0000000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r5}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0xa}}, 0x14}}, 0x20048000) (async) 13.830337674s ago: executing program 5 (id=938): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000000004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 13.739385402s ago: executing program 5 (id=939): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000280)='.@@\x00', &(0x7f00000002c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ftruncate(r1, 0x200c17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket(0x1e, 0x4, 0xf79) keyctl$revoke(0x3, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0, r0}, &(0x7f0000000440)=""/246, 0xf6, &(0x7f0000000340)={&(0x7f0000000240)={'hmac(sha1-ce)\x00'}, &(0x7f0000000380)="2789a5346e2d0f804a8a8897033a178e3a372e381ed690f7b8a1bc05000000000000007d41e77abff1d0dc161d3ea91c5f1cf1957bcbf8387eb9411ac34ef004720ffb41c47685f98c2f3a4927679d6319990a2ef422aa1ac53c3acd0a32554aad3fd6fe41b0e7d7ac21b42b5d546db43c28c95773a78bf17d8849f16421f3f6ae7e9c10ecffa7015c0d171fee18a1429f5ffccf098f4726df9bde3875d85bcec0cce7781b42c08871532d220e1a6ea03bb3", 0xb2}) 13.360645741s ago: executing program 5 (id=948): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_THP_DISABLE(0x29, 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000300)={r3, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}}, [0x1, 0x400, 0x5cf, 0x4, 0x8, 0x1, 0x1, 0x993c, 0xa, 0x9, 0x200, 0x9, 0xfffffffffffffb1c, 0x0, 0x8]}, &(0x7f0000000140)=0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) madvise(&(0x7f000011e000/0x2000)=nil, 0x2000, 0x9) 13.292912739s ago: executing program 36 (id=948): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_THP_DISABLE(0x29, 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000300)={r3, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}}, [0x1, 0x400, 0x5cf, 0x4, 0x8, 0x1, 0x1, 0x993c, 0xa, 0x9, 0x200, 0x9, 0xfffffffffffffb1c, 0x0, 0x8]}, &(0x7f0000000140)=0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) madvise(&(0x7f000011e000/0x2000)=nil, 0x2000, 0x9) 4.930403349s ago: executing program 7 (id=1040): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x3f}, 0x10) 4.820522931s ago: executing program 7 (id=1042): creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (rerun: 32) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/287], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002"], 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) chown(&(0x7f00000003c0)='./file0\x00', r0, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) recvmsg(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x0) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x4b52, &(0x7f0000000000)) (async) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x1) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064d1, &(0x7f0000000080)={0x0, 0x0, 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0xf1, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000340), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) r5 = fsopen(&(0x7f0000000000)='iso9660\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f00000010c0)={{r4}, "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"}) 4.760845479s ago: executing program 7 (id=1043): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x5d, &(0x7f0000000000), &(0x7f0000000080)=""/93, 0x0, 0x0, 0x9d, 0x1000, &(0x7f0000000180)="047ca2f2fd57cfef7704a3012d7781793b4cbd6e98e9997cefe3ffe593794896d6547da42ffa49fd6d92a9f6d3774ec3c485573df08ef03a8c1621683952ee88c65f0046270498ec64f92ee03fec344fc1581a8ec196af4167e647016da8a9130d6198a44d99c13d2f827b905a7a90b03e1112a233b201b983014ae0fd325c56bbec774092cb61ed121751cbc2cfc2df345bbe03c15c0bcb9ff12b4c22", &(0x7f00000006c0)="d38fbde6c0cf4ede6a6ca4a0972bac0087351d64e449ece793eaf6c03c5ba19b38dacd7c650866d325781ea76b4c8855f99f69843a4335d142b9b0bccf2ff19bfd7558a2757d48b159e0a55f9c9a52070288fc694ce885b354e143f3c7768429c6afe5eeca86d806f5129f5a3ade63f9b0b1faf3a6a8fa4da2f641e946c6a830273a22566d564dc64fcb3b9368bf499cf08c217854d7edd13cb4c37f7109ab29e837b256d1c19d9abaac5c273a781c79d4cce1da40c1859fa0be40cc027ecd45a96331810f8a94085b2b446ea9efc9551ed0859b38a4a8e35456380fe19661557aab3c7577236ec3cc11e366ebe1f00ea20ad5a82c895072786753a60c914efdad3430d976246089118ec769a846002ba06912147630fcda7fbf17f0c640c43d849b2eb388ee2bf95e57609fadf6e705b9cd03f5e0cf48e3e10e516527f4db6acae7d59937acf61d46ec85a641110f0004d7f0b8270f58ad47399250845dd247d29642b8b18b8b64c0ee764c139cc25c05d77f2058a14af59f3f0c7ee9cfb2fde06acd7f75e6e19efa0219beee028c9455f3c7af92a7dc466b8246884ca8a84ea7c95c389f065153c3bede8bd50f45702d077f04417bdafa7e006c8844ca1520f576bede3110b0fda343c06d4483f8089167d2ca6ba80784ec5b11d8e8f286a0a99c75b49581a21576fd4c0b872f5a25dad1e92d03675efbdaee791db9da6ab66da250fdadc576b56ca748929341e10f56c7c2f26f2566c76f588f351252590d8c390e60ad386d2c5dfa4f716a57f0024e963e616589a7aefba9375dd10a4ca3f1300d96c042bc5bfb32da1334e9d410c688ea96f54378950f7139a7c566b1e290c2beb18876eec319ebda297c305d597deffb27019e731f4fb6aeb2a7b438fa37d254e429bf75706dbee777cb7125ac9d49ee07c2aab72457abbfe9eedf9d890aad963c2dda59362711e1e3229eafaad6a432a82024baa63406b1a5025a380b2013f54a8a1a81d00c1e5aa666a7c4c6d2f06a65872c5d52f4e42d0634edb31f43b4bd3f20b86f574f28ee7a97318e762ccb14ca8b8353deca3a7dbd153358425d8c27baeea00218a83715b495d5533e834e7c91bf33641673ac744a1160868b728848d27d042ec2f3b4c73825dba778de11d44705551cc283950a3007cbac6aad8b0cb585d44d73bfde0f223fc218efadc6d9391f10b435c34ed8e7a582e78144f66160ba55cd8a23d7dbe1eec691524ca2d635e185516e8230dca06a406ee2f5aca383152c98d276af565ba98eb9f1c73bc834b471a2567fbe230e6ca7dcf09372e326b4b8c8fd10dc5200fafde0a260fb66bd4c8587a070b9616640f5e68141195ce434ac897b94ab52c441c4b73de39f344eebd50f2010189d437619a5a430a070e04b68ca57550da31b09c08109130a6450e7fcffdad996b03b223f8035408803b3d0ddd6169ca8c652cd5aa48649dd906935c99a801814bf597eabf649b5412caea16f30085a331ab8ce096918f24452b37b84881a1d048caf2bab7b511454c56ac9a76b92bfd0a1926061f1873b96b80f1de3cf276139fcc8fca9788591fec487ff96c620dc0be16c2887923e4907e9d186211d3de3b20ced3347d41d8b5a03836d4fb1af68d2a247f85a42bc79340d080dbcdb937bad0d2766f532ab21d5d2897771cd9d8959d258f741b7a2787d08d96a2d4ed76f4a831767ace070641facee343a48a18c4ae2dd979e4f63713c415e83a7cbd831435efa797abfee1037845d0d61467ddff79068b59cc643ee1fa7328b038c210214f792fba6498cb6a946912a413226ecbb79d3dad2ea56da723124d88b830b1d4e4dc8ac0566c4993f271b83b69aa79f73bb26014272c93a20a7b3daffc225ed873a4ea58129accdb084726ceadbd7420c7f24e1b922a81c291e51ed1c8635cd3c8eb7c5b9a44e146351a7b01ffc775e76ed929d50e8fbd30e9083ba64ac39cd5055f3ccaf1204c691d966d5b4e410f1aaeb32c9dbc0b32f60a108d9891135457302a913a5c5ef4885e993dc5a309a718bd04ce97ee5e072fb0ff2992ba790ec614077dbdfc2fc99dadec32e37b771ae4a2b72def9fe2c133a548e7385a8cbd168eb4c1e0580450f14c0568b1b7a4188889f0789336b872ad96c39cfafb8c53b0305fd10918c59b5d2465ceb53009dfe5415f190db49aa871c669317b2e2a3df4e21bac8c0542b70375765d0610618b670128f8d63434a64ce8d13f093d7abc03cb6313fa7e7a369aa00f21ca557183391a2430e278b3cb731006c6f6bc5b56df247a26461ef63311fddef2ec43323de938f5b11693fee2ba5cc86704aa0148c1dd06c3d94999d3d00bd32f3eb6d066de80923fc36c70549184555eb5dcf02157e5916de452cd507f4ca6ab0441cd105e605630b042d018600940676ac8291d46e53cdf6620377df36820e88604c849bcecd68fe6e1d0b0382ab64e54b749a24bb385fbab3178a8616bec2de2535119d73b0e4a760c1f9791d1dcd1366aef5ef95af05fdbbde8d5cfc62e3ab9c4c411f0d5bfd3ec73405d7bdabb089392a70e7826c7c9e704cadc9340b9bcd60536eedc22cb8581824c668b195da0d9b39375b146a8c094d525381e82c9a743710b7a251a56bcd05ead6c211dd8bf6a8c75a2d2a249dea58b441e5fec32baea291b170e7c621744eb8c9d66244b57ab2cf51712c5c3c60782dd92d52c0503d0bf23f884744d2afb05dd3bee4b49732b6105b8da836aea525e395b5ce8bb13fc735110e94a23ad001ed48ff2646b887367ae90e939dcb1cb0534164d7a744267224e108c100f11dde5ed7856fb93d7334991ad5f1c19a171173e39ddde88119c95c664410ed013b7a6646ea281e974bf05a7a84a01dc3896c500a7e62b1fa2843012081c0e29983e29b50886beefc0f522d38a3608537dc01c4cddfb580d9e840abd9bb13f44b769d9d5fe81ec37e21762b24d7d90f4abdd95d34db280821f587ddc2c0fb1cf3bf75d47d2dee22fb4a2dfc4bbaa84eb5fd5a5f9fa8096dc8def646c5af421bb47933023c5e4c91dadd904570ff92a28ee2c97a28012dc8141680ca86c184bceaa0a3c291a7bb65b1e415b6b27c3e79837a9753c67ebed7d03d89ce43ec30eb45d631629ac6b63afa1d047ca3045636079bbf641f68dc15747cbb5a597d9deeaf345c9e7ee6315e188fc687b0ffd92e3d85b77c9cd742a2ad29e03b0703de15bed0df16bcfce332d4dee9cb71e49e27cb4767506e3ab593cfdc67c160608a0329c8b66ed60a136927a7aad5d58ed48dd8fc87597a870b7a765c5cd6c80671c883a5fa0dc8508b1a65255ddbcf94f373aefe8d272476a6e0a2a45687c99888bdb6aa7fd2d652f8f51c88a47dcd586f0019af9d0230798fd2cd98966e1b5916a58d7d315f365d53baf60209672e481cbfb925c5e1cc706ae75e3a30ff33332b4bfaa6078fe2da9707d5b050b8269b2b10c537f3f7447ad356dae8f4cc590321aa4689646d16d75b4acd7904e3fb6e10ced69d8a73479889e1e89caeb6ed8aca78ab5654893a82ac918f274c0ccb85dada4e286235ccd1a7829b2482060ff843acddeee28a3a808bdad4633a3bc9af3a8dbbe3b374cb8a8795729b14fbd90687d9f7cc34af4f94806d1b055751cff3fe5520d91bf8d2aeb2588f9acb8bde978ec6abb75a5edeea4049edabf677abbac80be09418deaba5380c342f82c31fdf82f5ae2965d3124c953e2c92fed00c69b54b4623fa8a513803f31d5f8ac5fe8d3a0984fb4aee8b9c688be21fc5cf127cde4d828e41ff3eecde2da237ade222423d673557c225c9eb34e808d56655d70c427609d4033c6a0ae3b8fd5c8e127821b71fd03b0b7024339dcfa107e540860152d6a7a0e904151f442429c4bfca933e89c54709a0c6d1932964be79e21fb6802c595b75d07c8a674ac1a80ff1d2ce5041c47af2eaf4dd88375866b0db34824e71c7267542a909f9585b185e327e28f99b7f63ec464e3b81c581b27718b700303d8e75b63054172baaf5ead65fb0ce6ce1ae8a7c779ade040ccbe756217c8bb7c6cc4c6333f635218dee73cee6fd7a89cf86dcc0abd5da8ed80deb1dfaf3a8be064d3c1579d30ec7e0641b93535f31966dde13fd91d19464a22b9ac8346053d31b13050b55c5759716dfe83ff68ed6834562f37d9c094fca07445300127d7716b5eb66c37ee69c70cbd78d5e5c2fed5fcaf82089a7da8f6300ff41a1d95b6ae821d0cf6e3e3ce9b4056a68377601999da7df53d9ff206169d93b26322cee13affd43ea0deb6c373c7b889eef781552e2cc27006305b357216e1f71f8c7186dfa6007fc6de92f6eb1de11415a7d3438a3f9b8518be25880644326d51d422eec39c7711dee5f8de7c563ae1e612d0642cba8e8e4c9406ad6c4bd391d36e32b35a84630d6ecb2436b8686a8ef695d3174ce63a4bb2fee6e77c1fc6151ad09afadb4178a6a9035766061234aa9ff18d4f92f97fe1a71c5c9688f35fb6a72e423522fec8eb72ef5647f47bc32c5655412f7e299c7ca606a34b0b6e1048adeb6a1489e8f25f70c5b47ae88d63b73d5c4325df90b6414cb96913332aff7698c2e6998a3ab111c1b13f81393561d5fcb66d7e9a4f1a6cc1a5cc9d9523fe88a2d07887d78eb2a6d95d83e0c40967c73d4154e305017339aad33b5576c24835e044450229458d5fc049f70be3ada6c7cff0a4039251a304208dd0e620c807f19269b04358a7aa1583a8ff878c5886ceb95e7d56c75fe0e7bbeb43121112921270181e3876f24035eb546cbd2208565490f08b17b766dc123c1e18fcba3dfec59cb9edf7fe5958a19fdd8f768d01d14c0842b32a848347a77b0df71f825e3d6c1c1b7190436be0db54bc5ddf412851fd2ca23b38f34dd760a2fc8d4688c13a489e7e2dfcabeafe62afe57a0553da454d271db302b18256be6a2e135d58795c1596ec96cf06347487a8e9ea5591396ca8bbdeb5fff0682be0eadeda85db5bef0e6942bbaaa05b7f7b121dfd161f031282781bcdd0cc2dadea70a9e28081384ea7c86528c65e63b7df61993cf252343b2e2bb3432afec8d795ea3de2fd3be3a1b0d555b75285bf6e99e8044c7c26876e8b7902734a1dd69ce7a585af1625201af9f1783fb856ab9e91c662beb6d9c99c810a016d3c55396256663699dec4140f75e112776acdc7e692e0cf04f40aab52047d6ffd683789de615fc55595babf7f23102b3176b70ba5169d63ec6365cd30238efc8f9e4ad1fa3d7f5b69ca2b24ba256b5f5585bd665b463bd73345aee34030de61856ad2e626a16186dcf61519ff601dc2088e543a28ffc1b194197f9d23ec17243c29c886161b9405707358e0f003d70e03d8feb943aed04126df019e884563aa7239c44cc82581c558f8842f4bb06dd23047c9be8d1ea03514db0df4ff7bf40b8af86704a50488dabc701d41bad3e1024ccd65afdaa94729bf1c22adc99e6742d44191901c203fb4a1e1902500116be19a5ad8c07d76353976631f8ce7584b566b34b9c9d54964f1b83589220f8cd55f039681e28932906d327d8c7adbcf76851619bc60dc0710c1a535bc12ace47e2da3461fe19f621a5f4ce1ee418e28719d81f8d6a7f35101d085fd7607dfb03b9d34f6809b07e591dc088bd271895b15e6771cfc9988876444d3ed739db8dceacc5983c43b87c67ee0fd59f7e665f7b2d0ec9d119be1a3fdb8c12677ad09400788b47f95b9616ac7f1d4c19baaee1cb602370726d629f69b6d87af903bd716b381971e14c2bf781afbcabcc", 0x4, 0x0, 0x8}, 0x50) 4.577895159s ago: executing program 7 (id=1048): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000001200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 4.576272524s ago: executing program 7 (id=1049): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) (async, rerun: 64) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'/20, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000400"], 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000080)={0x1, @capture={0x0, 0x0, {0x0, 0x1}, 0x0, 0x33}}) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="62000000004000001c0012800900010069706970000000000c"], 0x3c}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040880}, 0x40004) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@newlink={0x6c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x6}, @IFLA_ADDRESS={0xa, 0x1, @random="c05cae3494d6"}]}, 0x6c}}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x1, 0x2000) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f00000002c0)={0x7, [[0x100, 0x0, 0x9e3, 0x3, 0x1, 0xdd, 0x401, 0x1ee1], [0x401, 0x1, 0xb, 0x6, 0x8000, 0x5, 0x7, 0x5], [0x7, 0x9, 0x10000, 0x3, 0xe75, 0x958f, 0x4, 0x7fff]], '\x00', [{0x4080, 0x3, 0x1, 0x1, 0x1, 0x1}, {0x0, 0x2, 0x1, 0x1}, {0x3, 0x1000}, {0x4, 0x7, 0x1, 0x1}, {0x4, 0xd9d, 0x1, 0x1, 0x1, 0x1}, {0x1000, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5, 0xc, 0x1, 0x1, 0x1, 0x1}, {0x8, 0x7, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x400, 0x0, 0x1, 0x0, 0x1}, {0xfffffffc, 0x2c2a, 0x1}, {0x3c, 0xe, 0x1, 0x0, 0x1, 0x1}, {0xd8b, 0x0, 0x1, 0x0, 0x0, 0x1}], '\x00', 0xba}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x2f000000, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.254676985s ago: executing program 7 (id=1054): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xd0, 0x0, &(0x7f0000000040)) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = accept4$rose(r1, &(0x7f0000000000)=@full={0xb, @remote, @default, 0x0, [@rose, @default, @remote, @null, @null, @default]}, &(0x7f0000000040)=0x40, 0x0) getsockopt$rose(r2, 0x104, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000100)=0x2, 0x4) 4.164763624s ago: executing program 37 (id=1054): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xd0, 0x0, &(0x7f0000000040)) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = accept4$rose(r1, &(0x7f0000000000)=@full={0xb, @remote, @default, 0x0, [@rose, @default, @remote, @null, @null, @default]}, &(0x7f0000000040)=0x40, 0x0) getsockopt$rose(r2, 0x104, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000100)=0x2, 0x4) 4.010599793s ago: executing program 6 (id=1058): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x2, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.885361961s ago: executing program 6 (id=1059): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe800000000000000000f5ffffff00aaff020000000000000000000000000001330022eb"], 0x10da) 3.731005571s ago: executing program 6 (id=1060): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffff9, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0x8, 0xb}, {0xd, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x24}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x38}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0x9, 0x0, &(0x7f0000000100)) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 3.177393407s ago: executing program 6 (id=1067): r0 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r0, 0x4147, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f00000003c0)=@framed={{}, [@ldst={0x2, 0x0, 0x3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000210001fdffffffffffffff00ac1ee100000000002000000000000000403403f438bd9e28000000000000000000000000000000000a0000edffffff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011"], 0xec}}, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r5, r5, 0x2f, 0x0, 0x4, @void, @value=r5}, 0x20) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000002080)={0xc, {"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", 0xfffffffffffffedd}}, 0x1006) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r9, 0x29, 0x2d, &(0x7f0000000bc0)={0x9, {{0xa, 0x4e22, 0x6, @mcast1}}}, 0x88) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, r6, 0x711, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x28008000}, 0x20044804) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8088000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r6, 0x6, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x2c}}, 0x48004) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r12, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44101}, 0x8800) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r15 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r17 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r17, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x38, r14, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff28093c0e}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x6c, r12, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0xa, 0x57}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4001000}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000001840)={0xaf0, r10, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x48, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd202}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\'\'@\'^^[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-.-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x358, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd8, 0x5, "6bf728e6dd1250f8de8f95d77e64ff9f2e8b069563b2b38dbd6138a397271f42bb2ef2d6a749ea5174f41a7fb188b03d23c9630bba7c81190a85e2a2820aeb856908c95e64ea2b138968fd8095079945c4070e53945bf6e97cd884b247f9acaa103004f71b017ae0c0a994c45356effeddf8961175944a9a8a07b2cefe94ef9cb2ae10e7e6bf7fc41c73a8f213a7f48403e6d7beda35df28b229638a457f472b19a41853cf850224584d352450f0f05ef92e09d256de66b8c0509a6159c51f6257ce2bc47ba83d2978007913e4f2c4967e853744"}, @ETHTOOL_A_BITSET_MASK={0x10, 0x5, "357fdf4c8c8dac8a6e9d6458"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x138, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x496e}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa06a}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'o\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$![+\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '):\xc5!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '(s]\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}]}, @ETHTOOL_A_BITSET_VALUE={0x89, 0x4, "1c6e34925716346313300e7736d0f4d7b712c46c2b3232b858da4a7cb2d6d91d0ba2eb20fe467ffc5664736839eed5c628587dbb527d80dd4c803bbc67cecb91f354e1bb691af71b1b8dffd3aae5b1d9eb4f49210534129d88e7569584f6e222d7a85a2d85f2f7599b1d8804e147a3a2e1528796dbb8ba6e0f5e8b5973aae9918060530e78"}, @ETHTOOL_A_BITSET_VALUE={0x9c, 0x4, "ddfb47dcad74ef67701daebad1296fb799d6808755b70b6dd895416dfa7030c74a654c6c6466348fa5c6e8cc2acd6d31e29fa7fc21180fbbdc2819b31c6c79892a9aea649b5deb4b8e69cbe053e2ba66a57fe167dc33356593a6c6e167ed877d2d44a976b9e371dd5f7aaeb536020b531d3ed464a0032c62e8753edd7905bd71b2c4ae65f7ab54f759b08a33d83eed7646eed36971e44236"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x200}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x120, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xdc, 0x4, "e42b9d4a30ba13c38426b7af1119dd28ef24d10a38049f4bbb5c2656f19bba02820ccc7fd1a10267f53ad98ab40a3e49d8fef9fa6780c509e834de49af1e104153880e8c92f7bafc917b7e776f0650cc0c79ffdeac8bde009959be9334e44b4149cb455b780815f9f50cb06440017e95cbd4bc9463ce73b6f5d16836a1d96a7eb5caf3c93566643d17a7d2741bfcd6a65610b1d917002e1b74bc4258eaf8efd66d678519cb99b9e6807122c3fb5a664297a9cd13d87df8133dc03121bf36043ee3ed77df40b475cff356f1da9a48ec85f54da78d18cddc21"}, @ETHTOOL_A_BITSET_VALUE={0x3e, 0x4, "66f10f36a070ae4a92e26054dacf7f12e14289932fd472453755257c73200ec96c822c90c032a12aac03643d09a5c719008d03165e56a20a058f"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x3dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x200}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xad, 0x5, "cc52ddbecec4056b7d08ebf9b3f2f61416f58099b3cde6b835ff683246879aac147a4e4f81875ea04f18617d52fe70597aca13e3e2e1fd6175876be21c0185b46bd7946f6c9ff541e4a0558c0def724494156651b13dad15ab9040db9c6485c5f2a41dfd13972f272c2769ae3b977dac4947c77881c129a6be1f87949c5633b0e639ca9c85286e43dc0a15426ab05dea80510622ad2825cd7eaa8293a7aecdcbc2fb1b1b4ed4bdcd0e"}, @ETHTOOL_A_BITSET_VALUE={0x32, 0x4, "0e7ba04b0a65c076f27e0317c66bbdecd773ba9db02035b87bd2ac74c9b8c770a8d92fb7e919d4e26acb62c0c533"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0x54, 0x4, "4d72ef3eb5cd138152528055deb15c677faa2568e1db5e7f249c7bcbacfff5c5931abb8e3b3889324a4d6ab660a26ddd64858180f0b3a223edaf81ddedf455d74c5ee4d1cb67283dd37538376fba2c41"}, @ETHTOOL_A_BITSET_VALUE={0x61, 0x4, "1a16cf3f0838eefc2f89eeefe98156566e3f89a9452aa94b23ea2d8b06e9dac4591f4f8690865d33bcd29463abf017bcaca0af79910f9f2d7cf475273a762a37284861d23f555e8b0a60d05fe2b1acb9fc32c0a9358cae455a9fe11726"}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '#8+-&#{/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9ef}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81b}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '&\'.\']\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xef\\#,\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_MASK={0x3b, 0x5, "d7325eb78ffa46749894f0f44b0b2a42cfa0cae5f7ec7dd2e4961d844d6b9e609e77714e9be7acd18a6bdad61f44b839a12a0a57e7c4c5"}, @ETHTOOL_A_BITSET_BITS={0x148, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\,]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x90%X)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/snd/pcmC#D#c\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '($\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/snd/pcmC#D#c\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/snd/pcmC#D#c\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1c0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffc01}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x79}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x85}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',({$-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' +\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x612c}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x69, 0x5, "b51427e1ae9b360f9323789d0ec2f20f6b9049acda093b906d4dc84bcf00972cd12be3a4b4d23dfeeee44e794530644bd45d9598f18a11df0744b0bd940bbcb7a32df521681df9a0a6973ef2c2655448dc14e8569cb6553497412ed91b5a6bbba3277f8612"}, @ETHTOOL_A_BITSET_VALUE={0x97, 0x4, "b07396af5fee6559f22135285a49c6f6744982e03c2d8f2d4db97448d9ed7a40e9f7ebf0b7903b27aef6ec88f0580b27b04ec1ebbed9db1edff55c5fe65311c57abf9e32492ad2e8478b9554f48a699d5d28a6c91e8691ce8d8fe3014086f088bf5c0686c5a4bcfdc242e489a59a96720e38285f32f682bb9ba3b6aac66881db36557f39a7e65a95d8c6318abf5a811a105db5"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x54, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x42, 0x4, "468a19d657562222cce6817246b66fe6b96a2a8e1c6b931d7aa8826fcc72f2ff10f813038264bd007f0c9d1b6d1a6ac76a1df20e4d4bf5a98aed30f530ce"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0xaf0}, 0x1, 0x0, 0x0, 0x200088c5}, 0x80) 2.990573147s ago: executing program 6 (id=1069): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x700}, 0x10) 2.990191352s ago: executing program 6 (id=1070): mount(&(0x7f0000000100)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='udf\x00', 0x1214091, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b40000000000009d0011500000009b7950bb38205cc2dd94f4434ef9000004000000000000009500000000009e00"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10, 0x0, r1}, 0x94) 1.760941529s ago: executing program 8 (id=1077): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x2, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0xfb7f000000000000) 1.570638928s ago: executing program 8 (id=1078): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0xc00}, 0x10) 1.550491s ago: executing program 8 (id=1079): ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usbip_server_init(0x1) socket(0x400000000010, 0x3, 0x0) fsopen(0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x100, 0x8, 0xffffffffffffffff, 0xe, 0x2, 0x5, 0x80000000, 0x80000000, 0x8000, 0xfe, 0x1, 0xfff, 0x4, 0x4, 0x2, 0xfffffffffffffffe], 0x5000, 0x20001}) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="3504000040000511d25a35400c0002000200002037153e371d040180c70b1028bc3f3ac1b406ffffffffffffff7f5600", 0x30}, {&(0x7f0000000a40)="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", 0x3d7}], 0x2}, 0x10049014) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="c2fb1a94", 0x4}], 0x1) syz_genetlink_get_family_id$tipc(0x0, r0) write$usbip_server(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000100)) 697.234266ms ago: executing program 1 (id=1081): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x88203, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) dup(r1) (async) r2 = dup(r1) read$FUSE(r2, &(0x7f00000014c0)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f00000014c0)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f046}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r3, 0xaea2, 0x0) 540.160533ms ago: executing program 1 (id=1082): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) ioctl$CDROMPAUSE(r0, 0x5301) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000005c0)=@broute={'broute\x00', 0x20, 0x2, 0x484, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000100], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x14, 0x10, 'wg0\x00', 'rose0\x00', 'ip_vti0\x00', 'pimreg1\x00', @multicast, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0xff, 0xff, 0xff], 0xa6, 0x166, 0x1de, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x7, 0x1, 0x0, 0x1}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"0397266925e74586394367abb91966eb7d0ece7f68e60927c8936231ba2d"}}, @common=@nflog={'nflog\x00', 0x50, {{0x1b, 0x7, 0x0, 0x0, 0x0, "657934266180ddb8a8455ebd449ffaed56481bbe5c8f2bc0609be73704e7a0b1f291ffc075d19c71433d435ad8a0d229969b84c5c579b392f4202b5caf6cfad9"}}}], @common=@nflog={'nflog\x00', 0x50, {{0x8, 0x2, 0x90f, 0x0, 0x0, "1d8ba8cfbe9fc16c96ee31bc62b2a4b6f8a9a9e08246f311acdf6302f2b1d2cf2b2264d1ca58b9dfc3fe84e8b45a5753a1f1442b07a244e84150f91c73e1c2f4"}}}}, {0x9, 0x7c, 0x86dd, 'netdevsim0\x00', 'veth1_macvtap\x00', 'veth1_to_team\x00', 'bond_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @multicast, [0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x216, [@state={{'state\x00', 0x0, 0x8}, {{0x5}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x4, 'system_u:object_r:pam_exec_t:s0\x00'}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x8, 0x4, {0x8}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x4fc) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000640)={0x1, 'macvtap0\x00'}, 0x18) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000680)='RATEEST\x00', 0x0, r0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f00000006c0)=[0x7, 0x8], 0x2) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000740)={0x5, 0x1}) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000780), 0x222841, 0x0) ioctl$CDROMREADCOOKED(r3, 0x5315, &(0x7f00000007c0)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001280)=@o_path={&(0x7f0000001240)='./file0\x00', r2}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x40, 0x140b, 0x8, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x4) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00000013c0), 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000001400)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000001440)={0x2815, 0x1, 0xa, 0x9, 0x2}) ioctl$SNDRV_PCM_IOCTL_LINK(0xffffffffffffffff, 0x40044160, &(0x7f0000001480)=0x8) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000014c0)={'\x00', 0xd, 0x4, 0x3ff, 0x1, 0x8000000000000000, 0xffffffffffffffff}) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000001540)="0f53bbec9e4116192c534ef111bd20641ebe9d9ea546f6e461f17e30157f023fec4ff3810535148be209c75dbf36978eb4f570a0fe5756e924a5223552b8282f4b98725033bbd9102817c56eab2f87e591b6438fdc03a9dbc6059b58554fbac702d9581f460480773792f272f40572fd6554d96539f841fbde21034fae5ae81f19ea9a4da02f14b1c86d16c3c986a655ba28789805d3599761ad25f1ae88e1eb6dade5d9adc5c7d368") ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000001600)={0x4, 0x0, [{0x6, 0x834, 0x7, [0xa18, 0x5, 0x0, 0x400, 0xff, 0x9, 0x3, 0xfffffffc]}, {0x0, 0x5, 0x6, [0x8, 0x7, 0x200, 0x9, 0x1, 0x8001, 0x80000001, 0x7fff]}, {0x7fff, 0x7, 0x8, [0x5, 0x5, 0x3, 0x96, 0x7, 0x0, 0x9, 0xfffff1ef]}, {0x0, 0x81, 0x5, [0x5, 0x80000001, 0x80, 0x6, 0xdf1, 0x7, 0x10001, 0x1]}]}) r6 = ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r6, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x28, 0x140a, 0x800, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r7, &(0x7f0000001c80)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001840)={0x400, r8, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xb8, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7192e09d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdaba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f595595}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x768c1e5b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1334}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73f2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e75}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x429ad9ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e21}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x522fe4f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x110d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x322aa4cd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x41bc}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe215}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30eacf86}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd701}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d857688}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3856b558}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ac8732e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x6c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d2a4fb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77387f76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4247b025}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b452283}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bf8bba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7321b3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40c945e8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ce7ee1a}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xe8, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac53}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d2fe02f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3522a41}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdaaf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa3f5}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5eedf1d2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee92}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e05d556}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2740}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6540}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf34d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfa49}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x310a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc1b0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cf563ce}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x105278d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf331}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe2e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee1d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28bb8a2d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcce7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43ad15d6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8090}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x17c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a67a6d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x216b673f}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6d0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f562980}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71af53f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x11d2}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x596c5b94}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58c55756}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf72b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd3c8ec2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1292acdc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7bc4c1e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1916}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f1bd6e}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x49a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb431}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8aba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5976856f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8270}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c4f8c19}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x469e71fa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf5d05a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe9f0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x89d0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x94c3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf13d}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x256a8e49}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5578}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa14e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23727acb}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x662d34cf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4cf425f1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96f2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8b12}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7730c663}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4dcc9f53}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fe5289a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9de1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49364391}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4550a4a7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ef6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa00e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63026146}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}]}, {0x4}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}]}]}]}, 0x400}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001d00), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x38, r9, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040041}, 0x11) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000001e00), &(0x7f0000001e40), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x7) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000001e80)=0x1) 427.032914ms ago: executing program 1 (id=1083): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) syz_emit_vhci(0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x220001, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0x0, 0xd}]}}}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 230.277969ms ago: executing program 1 (id=1084): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[], 0x64}}, 0x8090) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000150a03f5", @ANYRESOCT=r0, @ANYBLOB="d563b92e2288bc517093b20ddb4de0127208376a80c7d245a8c7949c5ddc7e9171110f6f117a860ace1f6308e5ffc87dc2fe6dcdea8459bf0b46eca875d0e7336ac2ab72dd051c139605fab87593347a5ebf7a789dbf54ce9b039a8fcc136441c5d31b040198c8544539ba54101c2bd54e70d420027224a6206bd61d1f5d9fb73b13576bc078e1d56f9cf55aedc784bffeff", @ANYRESOCT=r0], 0x34}}, 0x0) ioctl$sock_bt_hci(r1, 0x400448dc, 0x0) bind$bt_hci(r1, &(0x7f0000000000), 0x6) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x2105, 0x1}, 0x6) connect$vsock_stream(r0, &(0x7f00000011c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[], 0x64}}, 0x8090) (async) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000150a03f5", @ANYRESOCT=r0, @ANYBLOB="d563b92e2288bc517093b20ddb4de0127208376a80c7d245a8c7949c5ddc7e9171110f6f117a860ace1f6308e5ffc87dc2fe6dcdea8459bf0b46eca875d0e7336ac2ab72dd051c139605fab87593347a5ebf7a789dbf54ce9b039a8fcc136441c5d31b040198c8544539ba54101c2bd54e70d420027224a6206bd61d1f5d9fb73b13576bc078e1d56f9cf55aedc784bffeff", @ANYRESOCT=r0], 0x34}}, 0x0) (async) ioctl$sock_bt_hci(r1, 0x400448dc, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000000), 0x6) (async) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x2105, 0x1}, 0x6) (async) connect$vsock_stream(r0, &(0x7f00000011c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) (async) 229.970074ms ago: executing program 1 (id=1085): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x2, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0xffd3000000000000) 119.331524ms ago: executing program 8 (id=1086): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0xd00}, 0x10) 118.980155ms ago: executing program 8 (id=1087): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'/20, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000400"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'/20, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000400"], 0x48) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xcd, 0x1, 0x407}}}, 0x7) r1 = socket(0x22, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0xfffffffffffffd46, r3, 0x50a, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x0, 0x4, 0x9}]}, 0x3c}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0xfffffffffffffd46, r3, 0x50a, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x0, 0x4, 0x9}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r3, 0x505, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r3, 0x505, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) ioctl$IMGETCOUNT(r1, 0x80044944, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@int=0x4, 0x4) (async) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@int=0x4, 0x4) 169.805µs ago: executing program 8 (id=1088): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000003e000709fefffffffcffffff01fc0000040042801c000180100004800c000f00900000000000000006000b00bd0a0000040002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x800000000000004) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000001c0)=0x401) r5 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) lsm_get_self_attr(0x69, 0x0, &(0x7f0000000080), 0x0) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) landlock_restrict_self(r6, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000001000000146c00000000000014000000000000000000000000000000000000000001000000000000000000000000000000fffffffff7ffffff0000000000000000000000000000000000000000000000100000000000000000000000000000000002000000000000000000000000000000fcffffffffffffff0000000001040000030000000000000006350000020001065000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x4004050}, 0x20000000) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0x10000, r6}) getpid() mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f415489da2bb47b64653d30303030303030303030303030303030303034303030302c75", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000000)={0x10001f, 0xfa, 0x20000, {r5}}, 0x20) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='limits\x00') ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) lseek(r8, 0x9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007000000080000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000400004004363fb91586463219974000000000000"], 0x48) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r9, &(0x7f0000000000), 0xd) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="263e4b0fc79e0a000000c442f8f3cdc4c17e2cf7f3420fc73048b800000080ffffffff0f23c80f21f8350800c0000f23f80f20d835200000000f22d8410f2196c421f8ae9b7e000000660fc7b000000000430f01c5", 0x55}], 0x1, 0x5d, 0x0, 0x0) 0s ago: executing program 1 (id=1089): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r0, &(0x7f0000001500)=""/4075, 0xfeb, 0x7fff) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/16, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x0, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x0, 0x2, 0x26, '\x00', 0xfc}, {0x5, 0xef, 0x8d, '\x00', 0xee}, {0xfb, 0x6, 0xd, '\x00', 0x1}, {0xbc, 0xfc, 0x2, '\x00', 0x5}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x5}, {0x9, 0x4, 0x3, '\x00', 0xff}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x28, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x4, 0x3, '\x00', 0x6}, {0x4, 0x0, 0x8, '\x00', 0xe9}, {0xb, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x4}, {0x6f, 0x4, 0x1, '\x00', 0xe}, {0x7f, 0x2, 0x8, '\x00', 0x8}, {0x13, 0x7}, {0x1, 0x9, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xbd}, {0x2, 0x15, 0x2, '\x00', 0xc6}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x72a, 0x500, 0x0) read$msr(r3, &(0x7f0000000400)=""/60, 0x3c) kernel console output (not intermixed with test programs): lticast mode [ 104.102021][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 104.119726][ T8019] macsec0: entered promiscuous mode [ 104.122304][ T8019] macsec0: entered allmulticast mode [ 104.124689][ T8019] veth1_macvtap: entered allmulticast mode [ 104.213463][ T8024] netlink: 'syz.3.608': attribute type 5 has an invalid length. [ 104.215461][ T8023] netlink: 'syz.3.608': attribute type 10 has an invalid length. [ 104.526046][ T1120] sr 2:0:0:0: [sr0] tag#4 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 104.530188][ T1120] sr 2:0:0:0: [sr0] tag#4 Sense Key : Illegal Request [current] [ 104.533476][ T1120] sr 2:0:0:0: [sr0] tag#4 Add. Sense: Invalid command operation code [ 104.541220][ T1120] sr 2:0:0:0: [sr0] tag#4 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 104.545556][ T1120] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 104.549933][ T1120] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 104.746800][ T5958] Bluetooth: hci1: unexpected event for opcode 0x0c47 [ 104.793729][ T8073] syzkaller1: entered promiscuous mode [ 104.796077][ T8073] syzkaller1: entered allmulticast mode [ 104.809476][ T8073] overlayfs: unescaped trailing colons in lowerdir mount option. [ 104.875345][ T53] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 105.015279][ T53] usb 6-1: device descriptor read/64, error -71 [ 105.265687][ T53] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 105.395250][ T53] usb 6-1: device descriptor read/64, error -71 [ 105.458725][ T8085] ptm ptm34: ldisc open failed (-12), clearing slot 34 [ 105.509656][ T53] usb usb6-port1: attempt power cycle [ 105.519445][ T8070] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 105.551990][ T8098] FAULT_INJECTION: forcing a failure. [ 105.551990][ T8098] name failslab, interval 1, probability 0, space 0, times 0 [ 105.560321][ T8098] CPU: 3 UID: 0 PID: 8098 Comm: syz.3.629 Not tainted syzkaller #0 PREEMPT(full) [ 105.560360][ T8098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.560377][ T8098] Call Trace: [ 105.560386][ T8098] [ 105.560397][ T8098] dump_stack_lvl+0x16c/0x1f0 [ 105.560442][ T8098] should_fail_ex+0x512/0x640 [ 105.560476][ T8098] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 105.560517][ T8098] should_failslab+0xc2/0x120 [ 105.560544][ T8098] __kmalloc_cache_noprof+0x6a/0x3e0 [ 105.560581][ T8098] ? alloc_super+0x52/0xbd0 [ 105.560627][ T8098] alloc_super+0x52/0xbd0 [ 105.560663][ T8098] ? sget_fc+0xd3/0xc20 [ 105.560710][ T8098] sget_fc+0x116/0xc20 [ 105.560750][ T8098] ? __pfx_set_anon_super_fc+0x10/0x10 [ 105.560792][ T8098] ? __pfx_ovl_fill_super+0x10/0x10 [ 105.560821][ T8098] get_tree_nodev+0x28/0x190 [ 105.560865][ T8098] vfs_get_tree+0x8b/0x340 [ 105.560901][ T8098] path_mount+0x1516/0x2060 [ 105.560939][ T8098] ? __pfx_path_mount+0x10/0x10 [ 105.560970][ T8098] ? kmem_cache_free+0x2d1/0x4d0 [ 105.561008][ T8098] ? putname+0x154/0x1a0 [ 105.561055][ T8098] ? putname+0x154/0x1a0 [ 105.561090][ T8098] ? __x64_sys_mount+0x28d/0x310 [ 105.561117][ T8098] __x64_sys_mount+0x28d/0x310 [ 105.561146][ T8098] ? __pfx___x64_sys_mount+0x10/0x10 [ 105.561189][ T8098] do_syscall_64+0xcd/0x4e0 [ 105.561228][ T8098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.561257][ T8098] RIP: 0033:0x7ff99458eec9 [ 105.561279][ T8098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.561306][ T8098] RSP: 002b:00007ff995368038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 105.561334][ T8098] RAX: ffffffffffffffda RBX: 00007ff9947e5fa0 RCX: 00007ff99458eec9 [ 105.561352][ T8098] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 105.561369][ T8098] RBP: 00007ff995368090 R08: 0000200000000a00 R09: 0000000000000000 [ 105.561386][ T8098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 105.561402][ T8098] R13: 00007ff9947e6038 R14: 00007ff9947e5fa0 R15: 00007ffff91988b8 [ 105.561442][ T8098] [ 105.570195][ T8100] vivid-001: kernel_thread() failed [ 105.711538][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 105.711555][ T40] audit: type=1400 audit(105.607:1645): avc: denied { mount } for pid=8095 comm="syz.2.628" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 105.726266][ T40] audit: type=1400 audit(105.607:1646): avc: denied { remount } for pid=8095 comm="syz.2.628" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 105.740357][ T8110] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 105.766527][ T8110] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.810118][ T8114] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 105.935435][ T53] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 105.957739][ T53] usb 6-1: device descriptor read/8, error -71 [ 105.967841][ T40] audit: type=1400 audit(105.867:1647): avc: denied { unmount } for pid=5956 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 106.003699][ T8130] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 106.046646][ T8132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.049987][ T8132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.054363][ T8132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.058084][ T8132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.133836][ T8129] kvm: kvm [8127]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 106.225527][ T53] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 106.245895][ T53] usb 6-1: device descriptor read/8, error -71 [ 106.322267][ T40] audit: type=1400 audit(106.217:1648): avc: denied { ioctl } for pid=8139 comm="syz.0.641" path="socket:[22240]" dev="sockfs" ino=22240 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 106.332747][ T40] audit: type=1400 audit(106.217:1649): avc: denied { write } for pid=8139 comm="syz.0.641" path="socket:[22240]" dev="sockfs" ino=22240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 106.355608][ T53] usb usb6-port1: unable to enumerate USB device [ 106.382497][ T8152] netlink: 192 bytes leftover after parsing attributes in process `syz.3.643'. [ 106.485855][ T8156] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 106.494271][ T40] audit: type=1400 audit(106.387:1650): avc: denied { name_bind } for pid=8154 comm="syz.2.644" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 106.502865][ T40] audit: type=1400 audit(106.397:1651): avc: denied { read } for pid=8154 comm="syz.2.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.648196][ T8160] netlink: 32 bytes leftover after parsing attributes in process `syz.2.645'. [ 106.715304][ T5958] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.753850][ T40] audit: type=1400 audit(106.647:1652): avc: denied { ioctl } for pid=8162 comm="syz.2.646" path="/dev/uhid" dev="devtmpfs" ino=1295 ioctlcmd=0x8b19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 106.785644][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 107.126506][ T8173] overlayfs: failed lookup in lower (newroot/128, name='bus', err=-40): overlapping layers [ 107.288970][ T40] audit: type=1400 audit(107.187:1653): avc: denied { nlmsg_write } for pid=8183 comm="syz.0.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.292097][ T8184] ubi31: attaching mtd0 [ 107.298116][ T8184] ubi31 error: ubi_attach_mtd_dev: bad VID header (2) or data offsets (66) [ 107.327920][ T40] audit: type=1400 audit(107.227:1654): avc: denied { accept } for pid=8185 comm="syz.3.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.470505][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'. [ 107.474982][ T8193] netlink: 52 bytes leftover after parsing attributes in process `syz.0.656'. [ 107.508016][ T8195] bridge0: entered promiscuous mode [ 107.510371][ T8195] macsec1: entered promiscuous mode [ 107.514523][ T8195] bridge0: port 3(macsec1) entered blocking state [ 107.518536][ T8195] bridge0: port 3(macsec1) entered disabled state [ 107.521460][ T8195] macsec1: entered allmulticast mode [ 107.523740][ T8195] bridge0: entered allmulticast mode [ 107.528938][ T8195] macsec1: left allmulticast mode [ 107.531895][ T8195] bridge0: left allmulticast mode [ 107.535679][ T8195] bridge0: left promiscuous mode [ 107.681284][ T8201] FAULT_INJECTION: forcing a failure. [ 107.681284][ T8201] name failslab, interval 1, probability 0, space 0, times 0 [ 107.686052][ T8201] CPU: 0 UID: 0 PID: 8201 Comm: syz.1.659 Not tainted syzkaller #0 PREEMPT(full) [ 107.686081][ T8201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.686094][ T8201] Call Trace: [ 107.686102][ T8201] [ 107.686110][ T8201] dump_stack_lvl+0x16c/0x1f0 [ 107.686175][ T8201] should_fail_ex+0x512/0x640 [ 107.686209][ T8201] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 107.686241][ T8201] should_failslab+0xc2/0x120 [ 107.686262][ T8201] __kmalloc_cache_noprof+0x6a/0x3e0 [ 107.686298][ T8201] ? alloc_super+0x52/0xbd0 [ 107.686332][ T8201] alloc_super+0x52/0xbd0 [ 107.686357][ T8201] ? sget_fc+0xd3/0xc20 [ 107.686391][ T8201] sget_fc+0x116/0xc20 [ 107.686421][ T8201] ? __pfx_set_anon_super_fc+0x10/0x10 [ 107.686449][ T8201] ? __pfx_ovl_fill_super+0x10/0x10 [ 107.686471][ T8201] get_tree_nodev+0x28/0x190 [ 107.686501][ T8201] vfs_get_tree+0x8b/0x340 [ 107.686528][ T8201] path_mount+0x1516/0x2060 [ 107.686555][ T8201] ? __pfx_path_mount+0x10/0x10 [ 107.686578][ T8201] ? kmem_cache_free+0x2d1/0x4d0 [ 107.686606][ T8201] ? putname+0x154/0x1a0 [ 107.686630][ T8201] ? putname+0x154/0x1a0 [ 107.686655][ T8201] ? __x64_sys_mount+0x28d/0x310 [ 107.686674][ T8201] __x64_sys_mount+0x28d/0x310 [ 107.686696][ T8201] ? __pfx___x64_sys_mount+0x10/0x10 [ 107.686725][ T8201] do_syscall_64+0xcd/0x4e0 [ 107.686755][ T8201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.686777][ T8201] RIP: 0033:0x7fcbf858eec9 [ 107.686796][ T8201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.686814][ T8201] RSP: 002b:00007fcbf94c6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 107.686836][ T8201] RAX: ffffffffffffffda RBX: 00007fcbf87e5fa0 RCX: 00007fcbf858eec9 [ 107.686849][ T8201] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 107.686861][ T8201] RBP: 00007fcbf94c6090 R08: 0000200000000a00 R09: 0000000000000000 [ 107.686873][ T8201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.686883][ T8201] R13: 00007fcbf87e6038 R14: 00007fcbf87e5fa0 R15: 00007ffe5e7b3b28 [ 107.686912][ T8201] [ 107.893398][ T8210] tmpfs: Unknown parameter 'usrquota@' [ 107.893564][ T8209] tmpfs: Unknown parameter 'usrquota@' [ 107.899415][ T8210] Bluetooth: MGMT ver 1.23 [ 108.047435][ T8232] 9pnet_fd: p9_fd_create_tcp (8232): problem binding to privport [ 108.098173][ T8236] FAULT_INJECTION: forcing a failure. [ 108.098173][ T8236] name failslab, interval 1, probability 0, space 0, times 0 [ 108.102215][ T8236] CPU: 3 UID: 0 PID: 8236 Comm: syz.2.670 Not tainted syzkaller #0 PREEMPT(full) [ 108.102231][ T8236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.102238][ T8236] Call Trace: [ 108.102243][ T8236] [ 108.102247][ T8236] dump_stack_lvl+0x16c/0x1f0 [ 108.102266][ T8236] should_fail_ex+0x512/0x640 [ 108.102279][ T8236] ? __kmalloc_noprof+0xbf/0x510 [ 108.102296][ T8236] ? __list_lru_init+0xe8/0x4c0 [ 108.102310][ T8236] should_failslab+0xc2/0x120 [ 108.102320][ T8236] __kmalloc_noprof+0xd2/0x510 [ 108.102339][ T8236] __list_lru_init+0xe8/0x4c0 [ 108.102355][ T8236] alloc_super+0x8bf/0xbd0 [ 108.102373][ T8236] sget_fc+0x116/0xc20 [ 108.102388][ T8236] ? __pfx_set_anon_super_fc+0x10/0x10 [ 108.102404][ T8236] ? __pfx_ovl_fill_super+0x10/0x10 [ 108.102415][ T8236] get_tree_nodev+0x28/0x190 [ 108.102431][ T8236] vfs_get_tree+0x8b/0x340 [ 108.102445][ T8236] path_mount+0x1516/0x2060 [ 108.102460][ T8236] ? __pfx_path_mount+0x10/0x10 [ 108.102472][ T8236] ? kmem_cache_free+0x2d1/0x4d0 [ 108.102486][ T8236] ? putname+0x154/0x1a0 [ 108.102500][ T8236] ? putname+0x154/0x1a0 [ 108.102512][ T8236] ? __x64_sys_mount+0x28d/0x310 [ 108.102522][ T8236] __x64_sys_mount+0x28d/0x310 [ 108.102533][ T8236] ? __pfx___x64_sys_mount+0x10/0x10 [ 108.102549][ T8236] do_syscall_64+0xcd/0x4e0 [ 108.102564][ T8236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.102575][ T8236] RIP: 0033:0x7f52ed38eec9 [ 108.102584][ T8236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.102594][ T8236] RSP: 002b:00007f52ee26c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 108.102605][ T8236] RAX: ffffffffffffffda RBX: 00007f52ed5e5fa0 RCX: 00007f52ed38eec9 [ 108.102611][ T8236] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 108.102618][ T8236] RBP: 00007f52ee26c090 R08: 0000200000000a00 R09: 0000000000000000 [ 108.102624][ T8236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.102630][ T8236] R13: 00007f52ed5e6038 R14: 00007f52ed5e5fa0 R15: 00007ffe757b95d8 [ 108.102644][ T8236] [ 108.186783][ C3] vkms_vblank_simulate: vblank timer overrun [ 108.233327][ T8240] binder: BINDER_SET_CONTEXT_MGR already set [ 108.244404][ T8240] binder: 8239:8240 ioctl 4018620d 200000000280 returned -16 [ 108.842544][ T8229] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 108.846067][ T8229] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 108.848669][ T8229] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 108.852165][ T8229] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 108.891416][ T8259] netlink: 'syz.3.678': attribute type 5 has an invalid length. [ 108.929520][ T8262] FAULT_INJECTION: forcing a failure. [ 108.929520][ T8262] name failslab, interval 1, probability 0, space 0, times 0 [ 108.940015][ T8262] CPU: 3 UID: 0 PID: 8262 Comm: syz.3.679 Not tainted syzkaller #0 PREEMPT(full) [ 108.940032][ T8262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.940038][ T8262] Call Trace: [ 108.940043][ T8262] [ 108.940048][ T8262] dump_stack_lvl+0x16c/0x1f0 [ 108.940094][ T8262] should_fail_ex+0x512/0x640 [ 108.940113][ T8262] ? __kmalloc_noprof+0xbf/0x510 [ 108.940129][ T8262] ? __list_lru_init+0xe8/0x4c0 [ 108.940142][ T8262] should_failslab+0xc2/0x120 [ 108.940152][ T8262] __kmalloc_noprof+0xd2/0x510 [ 108.940169][ T8262] __list_lru_init+0xe8/0x4c0 [ 108.940188][ T8262] alloc_super+0x8bf/0xbd0 [ 108.940206][ T8262] sget_fc+0x116/0xc20 [ 108.940220][ T8262] ? __pfx_set_anon_super_fc+0x10/0x10 [ 108.940235][ T8262] ? __pfx_ovl_fill_super+0x10/0x10 [ 108.940245][ T8262] get_tree_nodev+0x28/0x190 [ 108.940261][ T8262] vfs_get_tree+0x8b/0x340 [ 108.940274][ T8262] path_mount+0x1516/0x2060 [ 108.940288][ T8262] ? __pfx_path_mount+0x10/0x10 [ 108.940299][ T8262] ? kmem_cache_free+0x2d1/0x4d0 [ 108.940312][ T8262] ? putname+0x154/0x1a0 [ 108.940325][ T8262] ? putname+0x154/0x1a0 [ 108.940337][ T8262] ? __x64_sys_mount+0x28d/0x310 [ 108.940346][ T8262] __x64_sys_mount+0x28d/0x310 [ 108.940362][ T8262] ? __pfx___x64_sys_mount+0x10/0x10 [ 108.940384][ T8262] do_syscall_64+0xcd/0x4e0 [ 108.940406][ T8262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.940423][ T8262] RIP: 0033:0x7ff99458eec9 [ 108.940437][ T8262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.940454][ T8262] RSP: 002b:00007ff995368038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 108.940471][ T8262] RAX: ffffffffffffffda RBX: 00007ff9947e5fa0 RCX: 00007ff99458eec9 [ 108.940482][ T8262] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 108.940492][ T8262] RBP: 00007ff995368090 R08: 0000200000000a00 R09: 0000000000000000 [ 108.940503][ T8262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.940513][ T8262] R13: 00007ff9947e6038 R14: 00007ff9947e5fa0 R15: 00007ffff91988b8 [ 108.940537][ T8262] [ 109.036202][ C3] vkms_vblank_simulate: vblank timer overrun [ 109.105426][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 109.190621][ T8275] netlink: 'syz.1.682': attribute type 1 has an invalid length. [ 109.194338][ T8275] NCSI netlink: No device for ifindex 0 [ 109.211518][ T8275] geneve1: entered allmulticast mode [ 109.275582][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 109.285097][ T8294] FAULT_INJECTION: forcing a failure. [ 109.285097][ T8294] name failslab, interval 1, probability 0, space 0, times 0 [ 109.287503][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.291324][ T8294] CPU: 3 UID: 0 PID: 8294 Comm: syz.3.688 Not tainted syzkaller #0 PREEMPT(full) [ 109.291339][ T8294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.291346][ T8294] Call Trace: [ 109.291349][ T8294] [ 109.291353][ T8294] dump_stack_lvl+0x16c/0x1f0 [ 109.291372][ T8294] should_fail_ex+0x512/0x640 [ 109.291384][ T8294] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 109.291401][ T8294] should_failslab+0xc2/0x120 [ 109.291411][ T8294] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 109.291426][ T8294] ? prepare_creds+0x2c/0x7d0 [ 109.291440][ T8294] prepare_creds+0x2c/0x7d0 [ 109.291453][ T8294] ovl_fill_super+0x2c22/0x6820 [ 109.291464][ T8294] ? __pfx___might_resched+0x10/0x10 [ 109.291479][ T8294] ? rcu_is_watching+0x12/0xc0 [ 109.291493][ T8294] ? trace_contention_end+0xdd/0x130 [ 109.291504][ T8294] ? find_held_lock+0x2b/0x80 [ 109.291518][ T8294] ? shrinker_register+0x154/0x260 [ 109.291536][ T8294] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 109.291581][ T8294] ? __pfx_ovl_fill_super+0x10/0x10 [ 109.291593][ T8294] ? lockdep_init_map_type+0x5c/0x280 [ 109.291604][ T8294] ? lockdep_init_map_type+0x5c/0x280 [ 109.291615][ T8294] ? __init_swait_queue_head+0xca/0x150 [ 109.291629][ T8294] ? shrinker_register+0x1a8/0x260 [ 109.291645][ T8294] ? sget_fc+0x808/0xc20 [ 109.291660][ T8294] ? __pfx_ovl_fill_super+0x10/0x10 [ 109.291670][ T8294] ? get_tree_nodev+0xdd/0x190 [ 109.291684][ T8294] get_tree_nodev+0xdd/0x190 [ 109.291699][ T8294] vfs_get_tree+0x8b/0x340 [ 109.291712][ T8294] path_mount+0x1516/0x2060 [ 109.291726][ T8294] ? __pfx_path_mount+0x10/0x10 [ 109.291737][ T8294] ? kmem_cache_free+0x2d1/0x4d0 [ 109.291751][ T8294] ? putname+0x154/0x1a0 [ 109.291764][ T8294] ? putname+0x154/0x1a0 [ 109.291775][ T8294] ? __x64_sys_mount+0x28d/0x310 [ 109.291785][ T8294] __x64_sys_mount+0x28d/0x310 [ 109.291795][ T8294] ? __pfx___x64_sys_mount+0x10/0x10 [ 109.291810][ T8294] do_syscall_64+0xcd/0x4e0 [ 109.291824][ T8294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.291834][ T8294] RIP: 0033:0x7ff99458eec9 [ 109.291843][ T8294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.291853][ T8294] RSP: 002b:00007ff995368038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 109.291863][ T8294] RAX: ffffffffffffffda RBX: 00007ff9947e5fa0 RCX: 00007ff99458eec9 [ 109.291869][ T8294] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 109.291876][ T8294] RBP: 00007ff995368090 R08: 0000200000000a00 R09: 0000000000000000 [ 109.291881][ T8294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.291887][ T8294] R13: 00007ff9947e6038 R14: 00007ff9947e5fa0 R15: 00007ffff91988b8 [ 109.291900][ T8294] [ 109.401471][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.404686][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 109.408826][ T10] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 109.411922][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.420900][ T10] usb 7-1: config 0 descriptor?? [ 109.531274][ T8307] netlink: 88 bytes leftover after parsing attributes in process `syz.3.692'. [ 109.639670][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 109.642075][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 109.661652][ T10] usb 7-1: USB disconnect, device number 3 [ 109.907087][ T8314] uprobe: syz.0.694:8314 failed to unregister, leaking uprobe [ 110.110727][ T8328] netlink: 64 bytes leftover after parsing attributes in process `syz.0.698'. [ 110.115334][ T56] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 110.145395][ T5958] Bluetooth: hci0: command 0x0c1a tx timeout [ 110.223305][ T8336] FAULT_INJECTION: forcing a failure. [ 110.223305][ T8336] name failslab, interval 1, probability 0, space 0, times 0 [ 110.230121][ T8336] CPU: 3 UID: 0 PID: 8336 Comm: syz.1.700 Not tainted syzkaller #0 PREEMPT(full) [ 110.230146][ T8336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.230156][ T8336] Call Trace: [ 110.230163][ T8336] [ 110.230170][ T8336] dump_stack_lvl+0x16c/0x1f0 [ 110.230198][ T8336] should_fail_ex+0x512/0x640 [ 110.230217][ T8336] ? __kmalloc_noprof+0xbf/0x510 [ 110.230242][ T8336] ? lsm_blob_alloc+0x68/0x90 [ 110.230264][ T8336] should_failslab+0xc2/0x120 [ 110.230280][ T8336] __kmalloc_noprof+0xd2/0x510 [ 110.230309][ T8336] lsm_blob_alloc+0x68/0x90 [ 110.230335][ T8336] security_prepare_creds+0x30/0x270 [ 110.230362][ T8336] prepare_creds+0x56f/0x7d0 [ 110.230382][ T8336] ovl_fill_super+0x2c22/0x6820 [ 110.230401][ T8336] ? __pfx___might_resched+0x10/0x10 [ 110.230423][ T8336] ? rcu_is_watching+0x12/0xc0 [ 110.230445][ T8336] ? trace_contention_end+0xdd/0x130 [ 110.230463][ T8336] ? find_held_lock+0x2b/0x80 [ 110.230488][ T8336] ? shrinker_register+0x154/0x260 [ 110.230518][ T8336] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 110.230544][ T8336] ? __pfx_ovl_fill_super+0x10/0x10 [ 110.230565][ T8336] ? lockdep_init_map_type+0x5c/0x280 [ 110.230585][ T8336] ? lockdep_init_map_type+0x5c/0x280 [ 110.230601][ T8336] ? __init_swait_queue_head+0xca/0x150 [ 110.230624][ T8336] ? shrinker_register+0x1a8/0x260 [ 110.230650][ T8336] ? sget_fc+0x808/0xc20 [ 110.230675][ T8336] ? __pfx_ovl_fill_super+0x10/0x10 [ 110.230691][ T8336] ? get_tree_nodev+0xdd/0x190 [ 110.230713][ T8336] get_tree_nodev+0xdd/0x190 [ 110.230757][ T8336] vfs_get_tree+0x8b/0x340 [ 110.230778][ T8336] path_mount+0x1516/0x2060 [ 110.230799][ T8336] ? __pfx_path_mount+0x10/0x10 [ 110.230813][ T8336] ? kmem_cache_free+0x2d1/0x4d0 [ 110.230831][ T8336] ? putname+0x154/0x1a0 [ 110.230848][ T8336] ? putname+0x154/0x1a0 [ 110.230864][ T8336] ? __x64_sys_mount+0x28d/0x310 [ 110.230881][ T8336] __x64_sys_mount+0x28d/0x310 [ 110.230901][ T8336] ? __pfx___x64_sys_mount+0x10/0x10 [ 110.230927][ T8336] do_syscall_64+0xcd/0x4e0 [ 110.230969][ T8336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.230988][ T8336] RIP: 0033:0x7fcbf858eec9 [ 110.231004][ T8336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.231021][ T8336] RSP: 002b:00007fcbf94c6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 110.231039][ T8336] RAX: ffffffffffffffda RBX: 00007fcbf87e5fa0 RCX: 00007fcbf858eec9 [ 110.231051][ T8336] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 110.231062][ T8336] RBP: 00007fcbf94c6090 R08: 0000200000000a00 R09: 0000000000000000 [ 110.231073][ T8336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.231085][ T8336] R13: 00007fcbf87e6038 R14: 00007fcbf87e5fa0 R15: 00007ffe5e7b3b28 [ 110.231109][ T8336] [ 110.347476][ C3] vkms_vblank_simulate: vblank timer overrun [ 110.349862][ T56] usb 7-1: Using ep0 maxpacket: 32 [ 110.354754][ T56] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 110.359640][ T56] usb 7-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 110.362927][ T56] usb 7-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 110.368201][ T56] usb 7-1: config 1 interface 0 has no altsetting 0 [ 110.373121][ T56] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.377608][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.380092][ T56] usb 7-1: Product: Х [ 110.381391][ T56] usb 7-1: Manufacturer: ц [ 110.382837][ T56] usb 7-1: SerialNumber: ⇂⋜✆䢱궚箦랄낁닲坜殯ꁖ⃷撤嬙戋쾩ᗍ甁綰䪷䂃륢존⵮㳵醇타ꭷ茳뢜䦜닊媻﬑쥠퐸늼쌼艬링兀ຘ餰✶଼鿶껢㭵ꂷ꧕鼊椤⦛梌䱻ޜ鐆湍䪑杧횦•岴㔰䶽蓣ꐋ잿ᓎ덇ꎉ蠑ầ䲘䣾䉚繜 [ 110.401377][ T8312] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 110.407116][ T8312] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 110.469324][ T8345] kvm: user requested TSC rate below hardware speed [ 110.623691][ T56] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 110.634923][ T56] usb 7-1: USB disconnect, device number 4 [ 110.717488][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 110.717506][ T40] audit: type=1400 audit(110.617:1658): avc: denied { listen } for pid=8363 comm="syz.3.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 110.862162][ T8378] FAULT_INJECTION: forcing a failure. [ 110.862162][ T8378] name failslab, interval 1, probability 0, space 0, times 0 [ 110.867168][ T5962] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.867224][ T5957] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.867243][ T5958] Bluetooth: hci3: command 0x0c1a tx timeout [ 110.874772][ T8378] CPU: 1 UID: 0 PID: 8378 Comm: syz.3.709 Not tainted syzkaller #0 PREEMPT(full) [ 110.874797][ T8378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.874810][ T8378] Call Trace: [ 110.874817][ T8378] [ 110.874824][ T8378] dump_stack_lvl+0x16c/0x1f0 [ 110.874856][ T8378] should_fail_ex+0x512/0x640 [ 110.874879][ T8378] ? __kmalloc_noprof+0xbf/0x510 [ 110.874908][ T8378] ? lsm_blob_alloc+0x68/0x90 [ 110.874935][ T8378] should_failslab+0xc2/0x120 [ 110.874955][ T8378] __kmalloc_noprof+0xd2/0x510 [ 110.874986][ T8378] lsm_blob_alloc+0x68/0x90 [ 110.875014][ T8378] security_prepare_creds+0x30/0x270 [ 110.875043][ T8378] prepare_creds+0x56f/0x7d0 [ 110.875067][ T8378] ovl_fill_super+0x2c22/0x6820 [ 110.875086][ T8378] ? __pfx___might_resched+0x10/0x10 [ 110.875113][ T8378] ? rcu_is_watching+0x12/0xc0 [ 110.875159][ T8378] ? trace_contention_end+0xdd/0x130 [ 110.875178][ T8378] ? find_held_lock+0x2b/0x80 [ 110.875210][ T8378] ? shrinker_register+0x154/0x260 [ 110.875244][ T8378] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 110.875274][ T8378] ? __pfx_ovl_fill_super+0x10/0x10 [ 110.875298][ T8378] ? lockdep_init_map_type+0x5c/0x280 [ 110.875319][ T8378] ? lockdep_init_map_type+0x5c/0x280 [ 110.875339][ T8378] ? __init_swait_queue_head+0xca/0x150 [ 110.875367][ T8378] ? shrinker_register+0x1a8/0x260 [ 110.875397][ T8378] ? sget_fc+0x808/0xc20 [ 110.875427][ T8378] ? __pfx_ovl_fill_super+0x10/0x10 [ 110.875445][ T8378] ? get_tree_nodev+0xdd/0x190 [ 110.875471][ T8378] get_tree_nodev+0xdd/0x190 [ 110.875503][ T8378] vfs_get_tree+0x8b/0x340 [ 110.875554][ T8378] path_mount+0x1516/0x2060 [ 110.875580][ T8378] ? __pfx_path_mount+0x10/0x10 [ 110.875603][ T8378] ? kmem_cache_free+0x2d1/0x4d0 [ 110.875626][ T8378] ? putname+0x154/0x1a0 [ 110.875651][ T8378] ? putname+0x154/0x1a0 [ 110.875673][ T8378] ? __x64_sys_mount+0x28d/0x310 [ 110.875690][ T8378] __x64_sys_mount+0x28d/0x310 [ 110.875713][ T8378] ? __pfx___x64_sys_mount+0x10/0x10 [ 110.875732][ T8378] ? getname_flags.part.0+0x1c5/0x550 [ 110.875758][ T8378] do_syscall_64+0xcd/0x4e0 [ 110.875785][ T8378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.875804][ T8378] RIP: 0033:0x7ff99458eec9 [ 110.875820][ T8378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.875839][ T8378] RSP: 002b:00007ff995368038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 110.875856][ T8378] RAX: ffffffffffffffda RBX: 00007ff9947e5fa0 RCX: 00007ff99458eec9 [ 110.875869][ T8378] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 110.875880][ T8378] RBP: 00007ff995368090 R08: 0000200000000a00 R09: 0000000000000000 [ 110.875894][ T8378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.875904][ T8378] R13: 00007ff9947e6038 R14: 00007ff9947e5fa0 R15: 00007ffff91988b8 [ 110.875930][ T8378] [ 111.016842][ T40] audit: type=1400 audit(110.917:1659): avc: denied { ioctl } for pid=8379 comm="syz.0.710" path="socket:[24950]" dev="sockfs" ino=24950 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.200562][ T8391] ntfs3(sr0): try to read out of volume at offset 0x0 [ 111.213576][ T8391] ntfs3(sr0): try to read out of volume at offset 0x0 [ 111.285271][ T56] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 111.399989][ T8405] FAULT_INJECTION: forcing a failure. [ 111.399989][ T8405] name failslab, interval 1, probability 0, space 0, times 0 [ 111.405135][ T8405] CPU: 0 UID: 0 PID: 8405 Comm: syz.2.719 Not tainted syzkaller #0 PREEMPT(full) [ 111.405177][ T8405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.405188][ T8405] Call Trace: [ 111.405195][ T8405] [ 111.405202][ T8405] dump_stack_lvl+0x16c/0x1f0 [ 111.405232][ T8405] should_fail_ex+0x512/0x640 [ 111.405252][ T8405] ? __kmalloc_noprof+0xbf/0x510 [ 111.405278][ T8405] ? lsm_blob_alloc+0x68/0x90 [ 111.405303][ T8405] should_failslab+0xc2/0x120 [ 111.405321][ T8405] __kmalloc_noprof+0xd2/0x510 [ 111.405352][ T8405] lsm_blob_alloc+0x68/0x90 [ 111.405377][ T8405] security_prepare_creds+0x30/0x270 [ 111.405400][ T8405] prepare_creds+0x56f/0x7d0 [ 111.405423][ T8405] ovl_fill_super+0x2c22/0x6820 [ 111.405441][ T8405] ? __pfx___might_resched+0x10/0x10 [ 111.405466][ T8405] ? rcu_is_watching+0x12/0xc0 [ 111.405494][ T8405] ? trace_contention_end+0xdd/0x130 [ 111.405512][ T8405] ? find_held_lock+0x2b/0x80 [ 111.405531][ T8405] ? shrinker_register+0x154/0x260 [ 111.405561][ T8405] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 111.405587][ T8405] ? __pfx_ovl_fill_super+0x10/0x10 [ 111.405607][ T8405] ? lockdep_init_map_type+0x5c/0x280 [ 111.405627][ T8405] ? lockdep_init_map_type+0x5c/0x280 [ 111.405646][ T8405] ? __init_swait_queue_head+0xca/0x150 [ 111.405667][ T8405] ? shrinker_register+0x1a8/0x260 [ 111.405693][ T8405] ? sget_fc+0x808/0xc20 [ 111.405720][ T8405] ? __pfx_ovl_fill_super+0x10/0x10 [ 111.405738][ T8405] ? get_tree_nodev+0xdd/0x190 [ 111.405761][ T8405] get_tree_nodev+0xdd/0x190 [ 111.405787][ T8405] vfs_get_tree+0x8b/0x340 [ 111.405806][ T8405] path_mount+0x1516/0x2060 [ 111.405828][ T8405] ? __pfx_path_mount+0x10/0x10 [ 111.405848][ T8405] ? kmem_cache_free+0x2d1/0x4d0 [ 111.405870][ T8405] ? putname+0x154/0x1a0 [ 111.405893][ T8405] ? putname+0x154/0x1a0 [ 111.405914][ T8405] ? __x64_sys_mount+0x28d/0x310 [ 111.405930][ T8405] __x64_sys_mount+0x28d/0x310 [ 111.405951][ T8405] ? __pfx___x64_sys_mount+0x10/0x10 [ 111.405971][ T8405] ? getname_flags.part.0+0x1c5/0x550 [ 111.405999][ T8405] do_syscall_64+0xcd/0x4e0 [ 111.406024][ T8405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.406042][ T8405] RIP: 0033:0x7f52ed38eec9 [ 111.406057][ T8405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.406071][ T8405] RSP: 002b:00007f52ee26c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 111.406088][ T8405] RAX: ffffffffffffffda RBX: 00007f52ed5e5fa0 RCX: 00007f52ed38eec9 [ 111.406100][ T8405] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 111.406111][ T8405] RBP: 00007f52ee26c090 R08: 0000200000000a00 R09: 0000000000000000 [ 111.406122][ T8405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.406133][ T8405] R13: 00007f52ed5e6038 R14: 00007f52ed5e5fa0 R15: 00007ffe757b95d8 [ 111.406158][ T8405] [ 111.517354][ T56] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 111.539035][ T56] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 111.542861][ T56] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 111.546835][ T56] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 111.550506][ T56] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 111.553806][ T56] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 111.558241][ T56] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 111.565496][ T56] usb 8-1: string descriptor 0 read error: -22 [ 111.567491][ T56] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 111.570256][ T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.574579][ T56] usb 8-1: config 0 descriptor?? [ 111.578255][ T56] hub 8-1:0.0: bad descriptor, ignoring hub [ 111.580165][ T56] hub 8-1:0.0: probe with driver hub failed with error -5 [ 111.589429][ T56] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input11 [ 111.598269][ T40] audit: type=1400 audit(111.497:1660): avc: denied { read } for pid=5337 comm="acpid" name="mouse2" dev="devtmpfs" ino=2951 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.607978][ T40] audit: type=1400 audit(111.497:1661): avc: denied { open } for pid=5337 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2951 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.688029][ T8418] binder: 8416:8418 ioctl 1274 0 returned -22 [ 111.691837][ T8417] binder: 8416:8417 ioctl c0306201 200000000040 returned -14 [ 111.845052][ T8384] xfrm0 speed is unknown, defaulting to 1000 [ 111.887026][ T8433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.727'. [ 111.909614][ T56] usb 8-1: USB disconnect, device number 4 [ 112.174574][ T8460] FAULT_INJECTION: forcing a failure. [ 112.174574][ T8460] name failslab, interval 1, probability 0, space 0, times 0 [ 112.180489][ T8460] CPU: 3 UID: 0 PID: 8460 Comm: syz.1.732 Not tainted syzkaller #0 PREEMPT(full) [ 112.180507][ T8460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.180515][ T8460] Call Trace: [ 112.180519][ T8460] [ 112.180524][ T8460] dump_stack_lvl+0x16c/0x1f0 [ 112.180545][ T8460] should_fail_ex+0x512/0x640 [ 112.180562][ T8460] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 112.180589][ T8460] ? __pfx_ovl_inode_set+0x10/0x10 [ 112.180604][ T8460] should_failslab+0xc2/0x120 [ 112.180621][ T8460] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 112.180640][ T8460] ? __pfx_ovl_check_namelen+0x10/0x10 [ 112.180654][ T8460] ? ovl_alloc_inode+0x25/0x190 [ 112.180665][ T8460] ? __pfx_ovl_inode_test+0x10/0x10 [ 112.180676][ T8460] ? __pfx_ovl_inode_set+0x10/0x10 [ 112.180686][ T8460] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 112.180695][ T8460] ovl_alloc_inode+0x25/0x190 [ 112.180705][ T8460] alloc_inode+0x64/0x240 [ 112.180720][ T8460] iget5_locked+0x67/0xb0 [ 112.180735][ T8460] ovl_get_trap_inode+0xb2/0x200 [ 112.180749][ T8460] ovl_fill_super+0x7ea/0x6820 [ 112.180760][ T8460] ? __pfx___might_resched+0x10/0x10 [ 112.180778][ T8460] ? rcu_is_watching+0x12/0xc0 [ 112.180794][ T8460] ? trace_contention_end+0xdd/0x130 [ 112.180809][ T8460] ? shrinker_register+0x154/0x260 [ 112.180833][ T8460] ? __pfx_ovl_fill_super+0x10/0x10 [ 112.180846][ T8460] ? lockdep_init_map_type+0x5c/0x280 [ 112.180859][ T8460] ? lockdep_init_map_type+0x5c/0x280 [ 112.180872][ T8460] ? __init_swait_queue_head+0xca/0x150 [ 112.180888][ T8460] ? shrinker_register+0x1a8/0x260 [ 112.180906][ T8460] ? sget_fc+0x808/0xc20 [ 112.180930][ T8460] ? __pfx_ovl_fill_super+0x10/0x10 [ 112.180965][ T8460] ? get_tree_nodev+0xdd/0x190 [ 112.180983][ T8460] get_tree_nodev+0xdd/0x190 [ 112.181003][ T8460] vfs_get_tree+0x8b/0x340 [ 112.181019][ T8460] path_mount+0x1516/0x2060 [ 112.181035][ T8460] ? __pfx_path_mount+0x10/0x10 [ 112.181048][ T8460] ? kmem_cache_free+0x2d1/0x4d0 [ 112.181064][ T8460] ? putname+0x154/0x1a0 [ 112.181078][ T8460] ? putname+0x154/0x1a0 [ 112.181092][ T8460] ? __x64_sys_mount+0x28d/0x310 [ 112.181103][ T8460] __x64_sys_mount+0x28d/0x310 [ 112.181115][ T8460] ? __pfx___x64_sys_mount+0x10/0x10 [ 112.181127][ T8460] ? getname_flags.part.0+0x1c5/0x550 [ 112.181145][ T8460] do_syscall_64+0xcd/0x4e0 [ 112.181162][ T8460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.181176][ T8460] RIP: 0033:0x7fcbf858eec9 [ 112.181187][ T8460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.181198][ T8460] RSP: 002b:00007fcbf94c6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 112.181210][ T8460] RAX: ffffffffffffffda RBX: 00007fcbf87e5fa0 RCX: 00007fcbf858eec9 [ 112.181217][ T8460] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 112.181225][ T8460] RBP: 00007fcbf94c6090 R08: 0000200000000a00 R09: 0000000000000000 [ 112.181232][ T8460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 112.181239][ T8460] R13: 00007fcbf87e6038 R14: 00007fcbf87e5fa0 R15: 00007ffe5e7b3b28 [ 112.181254][ T8460] [ 112.292174][ C3] vkms_vblank_simulate: vblank timer overrun [ 112.343038][ T8462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8462 comm=syz.1.733 [ 112.355400][ T57] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 112.395589][ T40] audit: type=1400 audit(112.287:1662): avc: denied { accept } for pid=8463 comm="syz.1.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.505869][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 112.510923][ T57] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.516745][ T57] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.520600][ T57] usb 5-1: config 0 interface 0 has no altsetting 0 [ 112.523442][ T57] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 112.529964][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.536098][ T57] usb 5-1: config 0 descriptor?? [ 112.567900][ T40] audit: type=1400 audit(112.467:1663): avc: denied { ioctl } for pid=8468 comm="syz.1.737" path="socket:[26691]" dev="sockfs" ino=26691 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 112.617722][ T5958] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 112.684476][ T40] audit: type=1326 audit(112.577:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8475 comm="syz.1.738" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbf858eec9 code=0x0 [ 112.795814][ T40] audit: type=1400 audit(112.697:1665): avc: denied { write } for pid=8475 comm="syz.1.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.945382][ T5958] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.987907][ T1142] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.991213][ T1142] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.998655][ T46] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.002204][ T46] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.009452][ T57] usbhid 5-1:0.0: can't add hid device: -71 [ 113.011457][ T57] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 113.017372][ T57] usb 5-1: USB disconnect, device number 8 [ 113.079031][ T8491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.742'. [ 113.132836][ T8496] dummy0: entered promiscuous mode [ 113.601801][ T8503] XFS (nullb0): Invalid superblock magic number [ 113.710655][ T8517] netlink: 'syz.0.747': attribute type 10 has an invalid length. [ 113.716868][ T8517] team0: Device ipvlan1 failed to register rx_handler [ 114.049786][ T40] audit: type=1400 audit(113.947:1666): avc: denied { write } for pid=8526 comm="syz.3.751" name="usbmon8" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 114.065542][ T40] audit: type=1400 audit(113.967:1667): avc: denied { setopt } for pid=8528 comm="syz.0.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 114.138569][ T8535] kernel read not supported for file /policy (pid: 8535 comm: syz.3.751) [ 114.196332][ T8539] netlink: 'syz.0.754': attribute type 4 has an invalid length. [ 114.424538][ T8555] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 114.791924][ T8596] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 115.025362][ T5958] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.074463][ T8622] Illegal XDP return value 3703389557 on prog (id 110) dev N/A, expect packet loss! [ 115.173837][ T8627] netlink: 'syz.1.778': attribute type 7 has an invalid length. [ 115.338446][ T8632] FAULT_INJECTION: forcing a failure. [ 115.338446][ T8632] name failslab, interval 1, probability 0, space 0, times 0 [ 115.344424][ T8632] CPU: 1 UID: 0 PID: 8632 Comm: syz.0.780 Not tainted syzkaller #0 PREEMPT(full) [ 115.344450][ T8632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 115.344461][ T8632] Call Trace: [ 115.344480][ T8632] [ 115.344488][ T8632] dump_stack_lvl+0x16c/0x1f0 [ 115.344537][ T8632] should_fail_ex+0x512/0x640 [ 115.344565][ T8632] ? __kvmalloc_node_noprof+0x124/0x620 [ 115.344591][ T8632] should_failslab+0xc2/0x120 [ 115.344609][ T8632] __kvmalloc_node_noprof+0x137/0x620 [ 115.344634][ T8632] ? shrinker_alloc+0x5e2/0xbf0 [ 115.344664][ T8632] ? shrinker_alloc+0x5e2/0xbf0 [ 115.344688][ T8632] shrinker_alloc+0x5e2/0xbf0 [ 115.344724][ T8632] ? __pfx_shrinker_alloc+0x10/0x10 [ 115.344754][ T8632] ? lockdep_init_map_type+0x5c/0x280 [ 115.344774][ T8632] ? __raw_spin_lock_init+0x3a/0x110 [ 115.344794][ T8632] ? __init_rwsem+0x12d/0x1b0 [ 115.344815][ T8632] alloc_super+0x7c8/0xbd0 [ 115.344846][ T8632] sget_fc+0x116/0xc20 [ 115.344867][ T8632] ? __pfx_set_anon_super_fc+0x10/0x10 [ 115.344891][ T8632] ? __pfx_ovl_fill_super+0x10/0x10 [ 115.344908][ T8632] get_tree_nodev+0x28/0x190 [ 115.344934][ T8632] vfs_get_tree+0x8b/0x340 [ 115.344955][ T8632] path_mount+0x1516/0x2060 [ 115.344978][ T8632] ? __pfx_path_mount+0x10/0x10 [ 115.344998][ T8632] ? kmem_cache_free+0x2d1/0x4d0 [ 115.345020][ T8632] ? putname+0x154/0x1a0 [ 115.345042][ T8632] ? putname+0x154/0x1a0 [ 115.345062][ T8632] ? __x64_sys_mount+0x28d/0x310 [ 115.345078][ T8632] __x64_sys_mount+0x28d/0x310 [ 115.345096][ T8632] ? __pfx___x64_sys_mount+0x10/0x10 [ 115.345119][ T8632] ? getname_flags.part.0+0x1c5/0x550 [ 115.345163][ T8632] do_syscall_64+0xcd/0x4e0 [ 115.345189][ T8632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.345206][ T8632] RIP: 0033:0x7f8d1618eec9 [ 115.345221][ T8632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.345240][ T8632] RSP: 002b:00007f8d16fe5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 115.345257][ T8632] RAX: ffffffffffffffda RBX: 00007f8d163e5fa0 RCX: 00007f8d1618eec9 [ 115.345268][ T8632] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 115.345279][ T8632] RBP: 00007f8d16fe5090 R08: 0000200000000a00 R09: 0000000000000000 [ 115.345289][ T8632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 115.345298][ T8632] R13: 00007f8d163e6038 R14: 00007f8d163e5fa0 R15: 00007ffe34fb8828 [ 115.345323][ T8632] [ 115.722862][ T8652] netlink: 32 bytes leftover after parsing attributes in process `syz.3.785'. [ 115.728408][ T8652] netlink: 32 bytes leftover after parsing attributes in process `syz.3.785'. [ 115.777215][ T8654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.786'. [ 115.891859][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 115.891879][ T40] audit: type=1326 audit(115.787:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8673 comm="syz.1.793" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbf858eec9 code=0x0 [ 115.910804][ T40] audit: type=1400 audit(115.807:1673): avc: denied { read append } for pid=8671 comm="syz.3.792" name="blkio.bfq.io_service_bytes_recursive" dev="9p" ino=71827923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.923576][ T40] audit: type=1400 audit(115.807:1674): avc: denied { open } for pid=8671 comm="syz.3.792" path="/210/file0/blkio.bfq.io_service_bytes_recursive" dev="9p" ino=71827923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.939722][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 115.940192][ T40] audit: type=1400 audit(115.837:1675): avc: denied { write } for pid=8671 comm="syz.3.792" name="blkio.bfq.io_service_bytes_recursive" dev="9p" ino=71827923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.477119][ T8712] netlink: 248 bytes leftover after parsing attributes in process `syz.0.800'. [ 116.498695][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.799'. [ 116.503794][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.799'. [ 116.528998][ T40] audit: type=1400 audit(116.427:1676): avc: denied { listen } for pid=8714 comm="syz.0.801" lport=42316 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.542291][ T40] audit: type=1400 audit(116.427:1677): avc: denied { accept } for pid=8714 comm="syz.0.801" lport=42316 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.636712][ T1142] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.640385][ T1142] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.719688][ T40] audit: type=1400 audit(116.617:1678): avc: denied { execute } for pid=8718 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 116.730120][ T40] audit: type=1400 audit(116.617:1679): avc: denied { execute_no_trans } for pid=8718 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 116.788291][ T1142] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.795358][ T1142] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.881862][ T1142] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.887333][ T1142] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.948136][ T1142] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.952666][ T1142] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.984998][ T5957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.991372][ T5957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.997490][ T5957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.999985][ T8733] netlink: 'syz.0.808': attribute type 1 has an invalid length. [ 117.000491][ T5957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.007680][ T5957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.009424][ T8734] syzkaller1: entered promiscuous mode [ 117.013022][ T8734] syzkaller1: entered allmulticast mode [ 117.040986][ T8736] netlink: 24 bytes leftover after parsing attributes in process `syz.1.809'. [ 117.053882][ T8730] xfrm0 speed is unknown, defaulting to 1000 [ 117.075095][ T40] audit: type=1400 audit(116.967:1680): avc: denied { remount } for pid=8737 comm="syz.1.810" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 117.082377][ T8738] hugetlbfs: Bad value 'e' for mount option 'size' [ 117.082377][ T8738] [ 117.168527][ T1142] bridge_slave_1: left allmulticast mode [ 117.171103][ T1142] bridge_slave_1: left promiscuous mode [ 117.174699][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.182615][ T1142] bridge_slave_0: left allmulticast mode [ 117.185141][ T1142] bridge_slave_0: left promiscuous mode [ 117.188816][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.425397][ T56] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 117.577110][ T56] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 33024, setting to 1024 [ 117.582269][ T56] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 117.588086][ T56] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.595911][ T56] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 117.599561][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.603040][ T56] usb 5-1: Product: syz [ 117.604599][ T56] usb 5-1: Manufacturer: syz [ 117.606951][ T56] usb 5-1: SerialNumber: syz [ 117.611856][ T8743] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 117.661840][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.669624][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.674705][ T1142] bond0 (unregistering): Released all slaves [ 117.771063][ T1142] bond1 (unregistering): Released all slaves [ 117.821660][ T56] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 117.885749][ T8730] chnl_net:caif_netlink_parms(): no params data found [ 118.020299][ T8743] netlink: 'syz.0.812': attribute type 1 has an invalid length. [ 118.061560][ T8743] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.141781][ T8743] veth5: entered promiscuous mode [ 118.149992][ T8730] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.152267][ T8730] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.154940][ T8730] bridge_slave_0: entered allmulticast mode [ 118.159611][ T8730] bridge_slave_0: entered promiscuous mode [ 118.164567][ T8730] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.170133][ T8730] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.172501][ T8730] bridge_slave_1: entered allmulticast mode [ 118.175520][ T8730] bridge_slave_1: entered promiscuous mode [ 118.219773][ T8730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.225309][ T8730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.240487][ T1463] usb 5-1: USB disconnect, device number 9 [ 118.254716][ T1463] usblp0: removed [ 118.290690][ T1142] hsr_slave_0: left promiscuous mode [ 118.293876][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.297713][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.300853][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.303389][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.330963][ T8772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.816'. [ 118.335007][ T1142] veth1_macvtap: left allmulticast mode [ 118.338225][ T1142] veth1_macvtap: left promiscuous mode [ 118.341814][ T1142] veth1_vlan: left promiscuous mode [ 118.344710][ T1142] veth0_vlan: left promiscuous mode [ 119.028860][ T5958] Bluetooth: hci0: command tx timeout [ 119.124693][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 119.218856][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 119.751697][ T8730] team0: Port device team_slave_0 added [ 119.758277][ T8730] team0: Port device team_slave_1 added [ 119.872668][ T8730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.875826][ T8730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.886929][ T8730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.899914][ T8730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.902842][ T8730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.915346][ T8730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.058193][ T8730] hsr_slave_0: entered promiscuous mode [ 120.061588][ T8730] hsr_slave_1: entered promiscuous mode [ 120.064598][ T8730] debugfs: 'hsr0' already exists in 'hsr' [ 120.070354][ T8730] Cannot create hsr debugfs directory [ 120.082631][ T8797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8797 comm=syz.1.824 [ 120.279752][ T8730] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.288803][ T8730] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 120.298668][ T8730] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 120.306377][ T8730] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 120.421966][ T8730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.460771][ T8730] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.472019][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.475862][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.486474][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.488860][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.492380][ T8817] fuse: Bad value for 'fd' [ 120.598696][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.603792][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.612522][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 120.754751][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.759367][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.763583][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 120.786027][ T8730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.883864][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.891047][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.899099][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 120.959958][ T5957] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.965384][ T5957] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.969655][ T5957] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.975918][ T5957] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.979540][ T5957] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.998420][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.003004][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.007373][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 121.043400][ T8843] xfrm0 speed is unknown, defaulting to 1000 [ 121.056013][ T8730] veth0_vlan: entered promiscuous mode [ 121.089336][ T8730] veth1_vlan: entered promiscuous mode [ 121.107747][ T5957] Bluetooth: hci0: command tx timeout [ 121.536899][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.544239][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.552117][ T12] bond0 (unregistering): Released all slaves [ 121.649448][ T12] bond1 (unregistering): Released all slaves [ 121.667621][ T8730] veth0_macvtap: entered promiscuous mode [ 121.698556][ T8730] veth1_macvtap: entered promiscuous mode [ 121.740105][ T12] tipc: Left network mode [ 121.762890][ T8730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.769526][ T12] IPVS: stopping master sync thread 6804 ... [ 121.774431][ T12] IPVS: stopping master sync thread 6803 ... [ 121.775323][ T8730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.781352][ T12] IPVS: stopping master sync thread 6802 ... [ 121.785143][ T12] IPVS: stopping master sync thread 6801 ... [ 121.790866][ T79] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.792130][ T12] IPVS: stopping master sync thread 6800 ... [ 121.796776][ T8843] chnl_net:caif_netlink_parms(): no params data found [ 121.797599][ T12] IPVS: stopping master sync thread 6799 ... [ 121.803074][ T12] IPVS: stopping master sync thread 6798 ... [ 121.804227][ T79] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.807117][ T12] IPVS: stopping master sync thread 6797 ... [ 121.811066][ T79] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.813391][ T12] IPVS: stopping master sync thread 6796 ... [ 121.819403][ T12] IPVS: stopping master sync thread 6795 ... [ 121.821490][ T12] IPVS: stopping master sync thread 6794 ... [ 121.833552][ T12] IPVS: stopping master sync thread 6793 ... [ 121.836040][ T12] IPVS: stopping master sync thread 6792 ... [ 121.845247][ T12] IPVS: stopping master sync thread 6791 ... [ 121.848304][ T12] IPVS: stopping master sync thread 6790 ... [ 121.853019][ T12] IPVS: stopping master sync thread 6789 ... [ 121.858361][ T12] IPVS: stopping master sync thread 6788 ... [ 121.859775][ T79] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.861079][ T12] IPVS: stopping master sync thread 6787 ... [ 121.866979][ T12] IPVS: stopping master sync thread 6786 ... [ 121.870624][ T12] IPVS: stopping master sync thread 6785 ... [ 121.875022][ T12] IPVS: stopping master sync thread 6784 ... [ 121.883176][ T12] IPVS: stopping master sync thread 6783 ... [ 121.887625][ T12] IPVS: stopping master sync thread 6782 ... [ 121.891739][ T12] IPVS: stopping master sync thread 6781 ... [ 121.895380][ T12] IPVS: stopping master sync thread 6780 ... [ 121.898167][ T12] IPVS: stopping master sync thread 6779 ... [ 121.900926][ T12] IPVS: stopping master sync thread 6778 ... [ 121.906243][ T12] IPVS: stopping master sync thread 6777 ... [ 121.909095][ T12] IPVS: stopping master sync thread 6776 ... [ 121.911861][ T12] IPVS: stopping master sync thread 6775 ... [ 121.914739][ T12] IPVS: stopping master sync thread 6773 ... [ 121.921998][ T12] IPVS: stopping master sync thread 6772 ... [ 121.925562][ T12] IPVS: stopping master sync thread 6771 ... [ 121.928440][ T12] IPVS: stopping master sync thread 6770 ... [ 121.931230][ T12] IPVS: stopping master sync thread 6769 ... [ 121.935414][ T12] IPVS: stopping master sync thread 6768 ... [ 121.940121][ T12] IPVS: stopping master sync thread 6767 ... [ 121.943604][ T12] IPVS: stopping master sync thread 6766 ... [ 121.946940][ T12] IPVS: stopping master sync thread 6765 ... [ 121.952848][ T12] IPVS: stopping master sync thread 6764 ... [ 121.964874][ T12] IPVS: stopping master sync thread 6763 ... [ 121.971026][ T12] IPVS: stopping master sync thread 6762 ... [ 121.973804][ T12] IPVS: stopping master sync thread 6761 ... [ 121.978994][ T12] IPVS: stopping master sync thread 6759 ... [ 121.982630][ T12] IPVS: stopping master sync thread 6758 ... [ 121.989595][ T12] IPVS: stopping master sync thread 6757 ... [ 121.990691][ T8843] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.992927][ T12] IPVS: stopping master sync thread 6756 ... [ 121.996302][ T8843] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.998611][ T12] IPVS: stopping master sync thread 6755 ... [ 122.001567][ T8843] bridge_slave_0: entered allmulticast mode [ 122.004126][ T12] IPVS: stopping master sync thread 6754 ... [ 122.009161][ T8843] bridge_slave_0: entered promiscuous mode [ 122.011400][ T12] IPVS: stopping master sync thread 6753 ... [ 122.016666][ T8843] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.017606][ T12] IPVS: stopping master sync thread 6752 ... [ 122.020371][ T8843] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.023335][ T12] IPVS: stopping master sync thread 6751 ... [ 122.026838][ T8843] bridge_slave_1: entered allmulticast mode [ 122.028213][ T8843] bridge_slave_1: entered promiscuous mode [ 122.032057][ T12] IPVS: stopping master sync thread 6750 ... [ 122.038068][ T12] IPVS: stopping master sync thread 6749 ... [ 122.040635][ T12] IPVS: stopping master sync thread 6748 ... [ 122.043692][ T12] IPVS: stopping master sync thread 6747 ... [ 122.048353][ T12] IPVS: stopping master sync thread 6746 ... [ 122.051736][ T12] IPVS: stopping master sync thread 6745 ... [ 122.054648][ T12] IPVS: stopping master sync thread 6744 ... [ 122.058082][ T12] IPVS: stopping master sync thread 6743 ... [ 122.060688][ T12] IPVS: stopping master sync thread 6742 ... [ 122.063557][ T12] IPVS: stopping master sync thread 6741 ... [ 122.067030][ T12] IPVS: stopping master sync thread 6740 ... [ 122.069987][ T12] IPVS: stopping master sync thread 6739 ... [ 122.105874][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.109073][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.138775][ T8843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.165300][ T8843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.243369][ T8843] team0: Port device team_slave_0 added [ 122.250251][ T8843] team0: Port device team_slave_1 added [ 122.256007][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.259774][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.354641][ T8843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.354710][ T40] audit: type=1400 audit(122.247:1681): avc: denied { mounton } for pid=8730 comm="syz-executor" path="/syzkaller.skPsPl/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 122.357634][ T8843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.380013][ T8843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.383567][ T40] audit: type=1400 audit(122.277:1682): avc: denied { mounton } for pid=8730 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 122.386075][ T8843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.398346][ T8843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.409532][ T8843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.433338][ T12] hsr_slave_0: left promiscuous mode [ 122.443998][ T12] hsr_slave_1: left promiscuous mode [ 122.475795][ T12] veth0_macvtap: left promiscuous mode [ 122.478318][ T12] veth1_vlan: left promiscuous mode [ 122.480572][ T12] veth0_vlan: left promiscuous mode [ 122.494239][ T40] audit: type=1404 audit(122.387:1683): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 122.501589][ T40] audit: type=1400 audit(122.397:1684): avc: denied { read open } for pid=8887 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 122.516522][ T40] audit: type=1400 audit(122.397:1685): avc: denied { search } for pid=8887 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 122.527612][ T40] audit: type=1400 audit(122.397:1686): avc: denied { search } for pid=8887 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 122.537272][ T40] audit: type=1400 audit(122.397:1687): avc: denied { search } for pid=8887 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 122.547043][ T40] audit: type=1400 audit(122.397:1688): avc: denied { search } for pid=8887 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 122.557404][ T40] audit: type=1400 audit(122.397:1689): avc: denied { search } for pid=8887 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 122.566928][ T40] audit: type=1400 audit(122.397:1690): avc: denied { search } for pid=8887 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 122.603756][ T8892] fuse: Unknown parameter '0x0000000000000003' [ 122.879090][ T8897] Bluetooth: MGMT ver 1.23 [ 123.035832][ T5962] Bluetooth: hci1: command tx timeout [ 123.071666][ T8901] netlink: 56 bytes leftover after parsing attributes in process `syz.4.836'. [ 123.195491][ T5962] Bluetooth: hci0: command tx timeout [ 123.349819][ T12] team0 (unregistering): Port device team_slave_1 removed [ 123.434142][ T12] team0 (unregistering): Port device team_slave_0 removed [ 123.507473][ T5962] Bluetooth: hci4: command 0x1003 tx timeout [ 123.507778][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 124.168556][ T8843] hsr_slave_0: entered promiscuous mode [ 124.175650][ T8843] hsr_slave_1: entered promiscuous mode [ 124.282912][ T8907] xfrm0 speed is unknown, defaulting to 1000 [ 124.437207][ T8921] fuse: Unknown parameter '0x0000000000000003' [ 124.481384][ T8927] NILFS (nbd4): device size too small [ 124.569909][ T8843] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 124.575690][ T8843] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 124.580385][ T8843] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 124.589523][ T8843] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 124.616546][ T8934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.844'. [ 124.668337][ T8943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.844'. [ 124.671498][ T8943] netlink: 40 bytes leftover after parsing attributes in process `syz.4.844'. [ 124.681392][ T8843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.691122][ T8843] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.696533][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.699251][ T1229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.706186][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.708503][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.851582][ T8843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.945824][ T5958] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 125.047539][ T8843] veth0_vlan: entered promiscuous mode [ 125.053582][ T8843] veth1_vlan: entered promiscuous mode [ 125.073305][ T8843] veth0_macvtap: entered promiscuous mode [ 125.078851][ T8843] veth1_macvtap: entered promiscuous mode [ 125.088894][ T8843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.097042][ T8843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.105714][ T5958] Bluetooth: hci1: command tx timeout [ 125.108918][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.112098][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.118079][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.121889][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.150892][ T8974] netlink: 76 bytes leftover after parsing attributes in process `syz.1.847'. [ 125.180033][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.183505][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.206677][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.210113][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.265861][ T5958] Bluetooth: hci0: command 0x0419 tx timeout [ 125.432233][ T5958] Bluetooth: hci1: hcon ffff88810e3ac000 sent 1 < count 128 [ 125.436137][ T5958] Bluetooth: hci1: hcon ffff88810e3ac000 sent 0 < count 64515 [ 125.458692][ T5958] Bluetooth: hci1: hcon ffff888056d3c000 sent 1 < count 8 [ 125.461362][ T5958] Bluetooth: hci1: hcon ffff888056d3c000 sent 0 < count 11 [ 125.464482][ T5958] Bluetooth: hci1: hcon ffff88810e3ac000 sent 0 < count 4 [ 125.468343][ T5958] Bluetooth: hci1: hcon ffff88810e3ac000 sent 0 < count 2 [ 125.473096][ T8997] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 125.473096][ T8997] program syz.4.852 not setting count and/or reply_len properly [ 125.527648][ T9001] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 125.530161][ T9001] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 125.535629][ T9001] vhci_hcd vhci_hcd.0: Device attached [ 125.795654][ T837] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 125.886965][ T9002] vhci_hcd: connection reset by peer [ 125.890397][ T1144] vhci_hcd: stop threads [ 125.892297][ T1144] vhci_hcd: release socket [ 125.894258][ T1144] vhci_hcd: disconnect device [ 126.036487][ T9016] pim6reg: entered allmulticast mode [ 126.039413][ T9017] pim6reg: left allmulticast mode [ 126.059194][ T9016] pim6reg: entered allmulticast mode [ 126.141504][ T9019] fuse: Unknown parameter '0x0000000000000003' [ 126.342240][ T5958] Bluetooth: hci1: hcon ffff88810e3ac000 sent 0 < count 128 [ 126.344735][ T5958] Bluetooth: hci1: hcon ffff88810e3ac000 sent 0 < count 64515 [ 126.378368][ T5958] Bluetooth: hci1: hcon ffff888056d3c000 sent 0 < count 8 [ 126.381363][ T5958] Bluetooth: hci1: hcon ffff888056d3c000 sent 0 < count 11 [ 126.384349][ T5958] Bluetooth: hci1: hcon ffff88810e3ac000 sent 0 < count 4 [ 126.548005][ T9046] fuse: Unknown parameter '0x0000000000000003' [ 126.588920][ T9048] random: crng reseeded on system resumption [ 126.598342][ T9051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.607757][ T9051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.609865][ T9048] libceph: resolve ' [ 126.609865][ T9048] -&fYǝa2i [ 126.609865][ T9048] .?&*&' (ret=-3): failed [ 126.616687][ T9051] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 126.616728][ T9051] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 126.617034][ T9051] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 126.630227][ T9051] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 126.641503][ T9054] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 126.645036][ T9054] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 126.650821][ T9054] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 126.654028][ T9054] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 126.720960][ T9056] netlink: 'syz.1.870': attribute type 3 has an invalid length. [ 126.752671][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.871'. [ 126.835709][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 126.987429][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 126.991490][ T10] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 126.996847][ T10] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.004899][ T10] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 127.008754][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.013205][ T10] usb 10-1: Product: syz [ 127.016111][ T10] usb 10-1: Manufacturer: syz [ 127.019465][ T10] usb 10-1: SerialNumber: syz [ 127.063464][ T9073] fuse: Unknown parameter '0x0000000000000003' [ 127.185563][ T5958] Bluetooth: hci1: command tx timeout [ 127.212436][ T9079] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 127.222821][ T5957] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.236627][ T5957] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.238072][ T10] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 127.239727][ T5957] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.247829][ T5957] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.251018][ T5957] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.286099][ T10] usb 10-1: USB disconnect, device number 2 [ 127.298300][ T10] usblp0: removed [ 127.300471][ T9080] xfrm0 speed is unknown, defaulting to 1000 [ 127.345311][ T5958] Bluetooth: hci0: command 0x0419 tx timeout [ 127.405876][ T40] kauditd_printk_skb: 152 callbacks suppressed [ 127.405888][ T40] audit: type=1400 audit(127.307:1843): avc: denied { setopt } for pid=9097 comm="syz.4.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.414948][ T40] audit: type=1400 audit(127.307:1844): avc: denied { create } for pid=9097 comm="syz.4.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 127.423239][ T40] audit: type=1400 audit(127.307:1845): avc: denied { getopt } for pid=9097 comm="syz.4.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 127.508617][ T9080] chnl_net:caif_netlink_parms(): no params data found [ 127.631158][ T9080] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.633844][ T9080] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.637722][ T9080] bridge_slave_0: entered allmulticast mode [ 127.640968][ T9080] bridge_slave_0: entered promiscuous mode [ 127.644494][ T9112] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 127.653374][ T9080] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.656103][ T9080] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.658521][ T9080] bridge_slave_1: entered allmulticast mode [ 127.661336][ T9080] bridge_slave_1: entered promiscuous mode [ 127.664515][ T9112] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 127.710998][ T40] audit: type=1400 audit(127.607:1846): avc: denied { create } for pid=9115 comm="syz.4.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 127.720498][ T40] audit: type=1400 audit(127.617:1847): avc: denied { read } for pid=9115 comm="syz.4.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 127.739033][ T9080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.749642][ T9080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.809713][ T9080] team0: Port device team_slave_0 added [ 127.813283][ T9080] team0: Port device team_slave_1 added [ 127.840105][ T9124] netlink: 'syz.4.890': attribute type 1 has an invalid length. [ 127.877299][ T40] audit: type=1400 audit(383.780:1848): avc: denied { prog_run } for pid=9127 comm="syz.5.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 127.880211][ T9080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.885779][ T9080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.900084][ T9080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.920556][ T9124] bond1: entered promiscuous mode [ 127.922396][ T9124] bond1: entered allmulticast mode [ 127.938374][ T9129] bond1: (slave geneve2): making interface the new active one [ 127.941646][ T9129] geneve2: entered promiscuous mode [ 127.944057][ T9129] geneve2: entered allmulticast mode [ 127.947152][ T9129] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 127.951292][ T9080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.957297][ T9080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.969524][ T9080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.034153][ T9080] hsr_slave_0: entered promiscuous mode [ 128.037968][ T9080] hsr_slave_1: entered promiscuous mode [ 128.040472][ T9080] debugfs: 'hsr0' already exists in 'hsr' [ 128.042641][ T9080] Cannot create hsr debugfs directory [ 128.083570][ T40] audit: type=1400 audit(383.980:1849): avc: denied { create } for pid=9133 comm="syz.5.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 128.091853][ T40] audit: type=1400 audit(383.990:1850): avc: denied { write } for pid=9133 comm="syz.5.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 128.354432][ T9146] netlink: 24 bytes leftover after parsing attributes in process `syz.5.897'. [ 128.471140][ T9151] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 128.475538][ T9151] block device autoloading is deprecated and will be removed. [ 128.549391][ T9080] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 128.560184][ T9080] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 128.570336][ T9080] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 128.578071][ T9080] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 128.587983][ T40] audit: type=1400 audit(384.490:1851): avc: denied { setopt } for pid=9152 comm="syz.1.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.593511][ T9153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.900'. [ 128.632237][ T40] audit: type=1400 audit(384.530:1852): avc: denied { bind } for pid=9152 comm="syz.1.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.676273][ T9080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.688232][ T9080] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.697552][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.700974][ T1229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.713494][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.716820][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.906630][ T9080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.021331][ T9187] futex_wake_op: syz.4.906 tries to shift op by -1; fix this program [ 129.066067][ T9080] veth0_vlan: entered promiscuous mode [ 129.072302][ T9080] veth1_vlan: entered promiscuous mode [ 129.094423][ T9080] veth0_macvtap: entered promiscuous mode [ 129.101368][ T9080] veth1_macvtap: entered promiscuous mode [ 129.111597][ T9080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.122055][ T9080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.130959][ T93] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.133839][ T93] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.137219][ T46] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.149369][ T46] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.211660][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.219922][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.239623][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.242503][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.266375][ T5958] Bluetooth: hci4: command tx timeout [ 129.266451][ T5957] Bluetooth: hci1: command tx timeout [ 129.334520][ T9210] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 129.337170][ T9210] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 129.341797][ T9210] vhci_hcd vhci_hcd.0: Device attached [ 129.587033][ T9224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.916'. [ 129.605323][ T9200] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 129.607987][ T6016] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 129.652812][ T9226] pim6reg: entered allmulticast mode [ 129.755754][ T9200] usb 11-1: device descriptor read/64, error -71 [ 129.808400][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.873753][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.960164][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.015411][ T9200] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 130.049551][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.140430][ T5958] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.146348][ T5958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.150473][ T5958] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.154453][ T5958] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.155551][ T9200] usb 11-1: device descriptor read/64, error -71 [ 130.157900][ T46] bridge_slave_1: left allmulticast mode [ 130.158265][ T5958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.164818][ T46] bridge_slave_1: left promiscuous mode [ 130.168036][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.173038][ T46] bridge_slave_0: left allmulticast mode [ 130.175143][ T46] bridge_slave_0: left promiscuous mode [ 130.178878][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.290992][ T9200] usb usb11-port1: attempt power cycle [ 130.354640][ T46] bond1 (unregistering): (slave geneve2): Releasing active interface [ 130.362254][ T46] geneve2 (unregistering): left promiscuous mode [ 130.365126][ T46] geneve2 (unregistering): left allmulticast mode [ 130.459389][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.464157][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.471075][ T46] bond0 (unregistering): Released all slaves [ 130.480596][ T46] bond1 (unregistering): Released all slaves [ 130.536734][ T9243] Bluetooth: MGMT ver 1.23 [ 130.552035][ T9229] xfrm0 speed is unknown, defaulting to 1000 [ 130.592610][ T9243] hub 2-0:1.0: USB hub found [ 130.601929][ T9243] hub 2-0:1.0: 2 ports detected [ 130.635312][ T9200] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 130.677609][ T9200] usb 11-1: device descriptor read/8, error -71 [ 130.814404][ T9229] chnl_net:caif_netlink_parms(): no params data found [ 130.833060][ T9258] netlink: 'syz.5.925': attribute type 1 has an invalid length. [ 130.880908][ T9266] netlink: 20 bytes leftover after parsing attributes in process `syz.1.927'. [ 130.916007][ T9200] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 130.925777][ T9269] netlink: 104 bytes leftover after parsing attributes in process `syz.1.928'. [ 130.935634][ T837] vhci_hcd: vhci_device speed not set [ 130.937235][ T9200] usb 11-1: device descriptor read/8, error -71 [ 130.937705][ T9258] pim6reg13: entered allmulticast mode [ 131.009371][ T9276] fuse: Unknown parameter 'fd0x0000000000000003' [ 131.043201][ T9229] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.046763][ T9229] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.048229][ T9200] usb usb11-port1: unable to enumerate USB device [ 131.049757][ T9229] bridge_slave_0: entered allmulticast mode [ 131.056203][ T9229] bridge_slave_0: entered promiscuous mode [ 131.061584][ T9229] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.064983][ T9229] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.071593][ T9229] bridge_slave_1: entered allmulticast mode [ 131.079079][ T9229] bridge_slave_1: entered promiscuous mode [ 131.090798][ T46] hsr_slave_0: left promiscuous mode [ 131.093617][ T46] hsr_slave_1: left promiscuous mode [ 131.097630][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.101442][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.108025][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.110904][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.148333][ T46] veth1_macvtap: left promiscuous mode [ 131.150397][ T46] veth0_macvtap: left promiscuous mode [ 131.152631][ T46] veth1_vlan: left promiscuous mode [ 131.154596][ T46] veth0_vlan: left promiscuous mode [ 131.345451][ T5957] Bluetooth: hci4: command tx timeout [ 131.886613][ T46] team0 (unregistering): Port device team_slave_1 removed [ 131.980305][ T46] team0 (unregistering): Port device team_slave_0 removed [ 132.226593][ T5957] Bluetooth: hci0: command tx timeout [ 132.340194][ T9211] vhci_hcd: connection reset by peer [ 132.342365][ T1142] vhci_hcd: stop threads [ 132.344132][ T1142] vhci_hcd: release socket [ 132.346188][ T1142] vhci_hcd: disconnect device [ 132.604901][ T9229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.609800][ T9229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.629201][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 132.629212][ T40] audit: type=1400 audit(388.530:1871): avc: denied { mounton } for pid=9297 comm="syz.1.937" path="/syzcgroup/unified/syz1" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 132.658033][ T9293] geneve2: entered promiscuous mode [ 132.660041][ T9298] XFS (nullb0): Invalid superblock magic number [ 132.660401][ T9293] geneve2: entered allmulticast mode [ 132.720916][ T9310] fuse: Unknown parameter 'fd0x0000000000000003' [ 132.760786][ T9229] team0: Port device team_slave_0 added [ 132.785786][ T9229] team0: Port device team_slave_1 added [ 132.862114][ T9229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.864613][ T9229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.874511][ T9229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.912555][ T9229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.918487][ T9229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.927828][ T9229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.026309][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.6.945'. [ 133.027698][ T9229] hsr_slave_0: entered promiscuous mode [ 133.033113][ T9229] hsr_slave_1: entered promiscuous mode [ 133.035312][ T9229] debugfs: 'hsr0' already exists in 'hsr' [ 133.037072][ T9229] Cannot create hsr debugfs directory [ 133.042734][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.6.945'. [ 133.175609][ T9339] ISOFS: Unable to identify CD-ROM format. [ 133.273345][ T9229] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 133.288186][ T9229] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 133.292817][ T9229] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 133.304223][ T9229] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 133.367900][ T46] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.384965][ T5958] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 133.393569][ T5958] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 133.398685][ T5958] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 133.402079][ T5958] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 133.405134][ T5958] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 133.425591][ T5958] Bluetooth: hci4: command tx timeout [ 133.445430][ T40] audit: type=1400 audit(389.340:1872): avc: denied { ioctl } for pid=9364 comm="syz.6.954" path="socket:[31575]" dev="sockfs" ino=31575 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.470087][ T40] audit: type=1400 audit(389.370:1873): avc: denied { search } for pid=9367 comm="syz.1.955" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 133.481323][ T40] audit: type=1400 audit(389.370:1874): avc: denied { write } for pid=9367 comm="syz.1.955" name="tcp" dev="proc" ino=4026533291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 133.516889][ T46] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.526890][ T9353] xfrm0 speed is unknown, defaulting to 1000 [ 133.573710][ T40] audit: type=1400 audit(389.470:1875): avc: denied { write } for pid=9371 comm="syz.1.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 133.594202][ T9229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.643168][ T46] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.680623][ T9229] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.740372][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.744355][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.773600][ T46] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.830971][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.833938][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.894210][ T9353] chnl_net:caif_netlink_parms(): no params data found [ 133.976076][ T40] audit: type=1400 audit(389.880:1876): avc: denied { create } for pid=9394 comm="syz.1.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 133.985712][ T40] audit: type=1400 audit(389.880:1877): avc: denied { ioctl } for pid=9394 comm="syz.1.959" path="socket:[32889]" dev="sockfs" ino=32889 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 134.098532][ T9353] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.101026][ T9353] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.103572][ T9353] bridge_slave_0: entered allmulticast mode [ 134.107087][ T9353] bridge_slave_0: entered promiscuous mode [ 134.116163][ T46] bridge_slave_1: left allmulticast mode [ 134.118610][ T46] bridge_slave_1: left promiscuous mode [ 134.121471][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.129078][ T46] bridge_slave_0: left allmulticast mode [ 134.131650][ T46] bridge_slave_0: left promiscuous mode [ 134.134104][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.316864][ T5958] Bluetooth: hci0: command tx timeout [ 134.590041][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.597398][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.602562][ T46] bond0 (unregistering): Released all slaves [ 134.610901][ T9353] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.613461][ T9353] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.616033][ T9353] bridge_slave_1: entered allmulticast mode [ 134.618638][ T9353] bridge_slave_1: entered promiscuous mode [ 134.710854][ T9353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.715468][ T6016] vhci_hcd: vhci_device speed not set [ 134.718875][ T9229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.727615][ T9353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.823901][ T9353] team0: Port device team_slave_0 added [ 134.838817][ T9353] team0: Port device team_slave_1 added [ 134.936824][ T9353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.939109][ T9353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.947682][ T9353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.971659][ T9353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.974059][ T9353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.983231][ T9353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.038174][ T46] hsr_slave_0: left promiscuous mode [ 135.041995][ T46] hsr_slave_1: left promiscuous mode [ 135.044545][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.050878][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.055610][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.058670][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.090281][ T46] veth1_macvtap: left promiscuous mode [ 135.092010][ T46] veth0_macvtap: left promiscuous mode [ 135.093814][ T46] veth1_vlan: left promiscuous mode [ 135.096759][ T46] veth0_vlan: left promiscuous mode [ 135.158896][ T46] pim6reg13 (unregistering): left allmulticast mode [ 135.169162][ T46] pim6reg (unregistering): left allmulticast mode [ 135.427251][ T5958] Bluetooth: hci1: command tx timeout [ 135.505412][ T5958] Bluetooth: hci4: command tx timeout [ 135.908593][ T46] team0 (unregistering): Port device team_slave_1 removed [ 136.010934][ T46] team0 (unregistering): Port device team_slave_0 removed [ 136.385641][ T5958] Bluetooth: hci0: command tx timeout [ 136.758446][ T9353] hsr_slave_0: entered promiscuous mode [ 136.761243][ T9353] hsr_slave_1: entered promiscuous mode [ 136.902824][ T9229] veth0_vlan: entered promiscuous mode [ 136.965031][ T9229] veth1_vlan: entered promiscuous mode [ 136.996134][ T9229] veth0_macvtap: entered promiscuous mode [ 137.021871][ T9229] veth1_macvtap: entered promiscuous mode [ 137.024262][ T9454] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 137.026389][ T9454] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 137.033076][ T9454] vhci_hcd vhci_hcd.0: Device attached [ 137.108377][ T9353] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 137.114952][ T9353] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 137.123551][ T9353] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 137.134735][ T9353] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 137.150226][ T9229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.166447][ T9229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.182133][ T1229] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.187571][ T1229] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.201784][ T1229] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.207102][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.275760][ T6002] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 137.307489][ T9353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.328280][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.331367][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.351935][ T9353] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.367418][ T837] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 137.374659][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.381990][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.382994][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.388142][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.400832][ T1229] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.403893][ T1229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.498968][ T40] audit: type=1400 audit(393.400:1878): avc: denied { create } for pid=9494 comm="syz.7.919" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 137.507992][ T5958] Bluetooth: hci1: command tx timeout [ 137.511094][ T40] audit: type=1400 audit(393.400:1879): avc: denied { ioctl } for pid=9494 comm="syz.7.919" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=34117 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 137.525265][ T837] usb 6-1: Using ep0 maxpacket: 16 [ 137.528207][ T837] usb 6-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 137.532249][ T837] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 33 [ 137.536797][ T837] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 137.539823][ T837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.557242][ T837] usb 6-1: config 0 descriptor?? [ 137.620701][ T9353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.772705][ T9455] usb 39-1: recv xbuf, 0 [ 137.774613][ T93] vhci_hcd: stop threads [ 137.776709][ T837] usb 6-1: string descriptor 0 read error: -71 [ 137.777660][ T837] usb 6-1: USB disconnect, device number 7 [ 137.779325][ T93] vhci_hcd: release socket [ 137.795859][ T93] vhci_hcd: disconnect device [ 137.855421][ T6002] vhci_hcd: vhci_device speed not set [ 137.897951][ T9353] veth0_vlan: entered promiscuous mode [ 137.906468][ T9353] veth1_vlan: entered promiscuous mode [ 137.929985][ T9353] veth0_macvtap: entered promiscuous mode [ 137.938081][ T9353] veth1_macvtap: entered promiscuous mode [ 137.958406][ T9353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.969606][ T9353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.979460][ T93] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.983379][ T93] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.989538][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.998611][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.063462][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.070495][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.095085][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.099028][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.155521][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.158084][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.257514][ T40] audit: type=1400 audit(394.160:1880): avc: denied { map } for pid=9538 comm="syz.7.981" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 138.264879][ T40] audit: type=1400 audit(394.160:1881): avc: denied { read write } for pid=9538 comm="syz.7.981" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 138.465916][ T5958] Bluetooth: hci0: command tx timeout [ 138.515839][ T9574] netlink: 32 bytes leftover after parsing attributes in process `syz.1.989'. [ 138.519252][ T9575] netlink: 32 bytes leftover after parsing attributes in process `syz.1.989'. [ 138.639578][ T40] audit: type=1400 audit(394.540:1882): avc: denied { ioctl } for pid=9586 comm="syz.1.992" path="/dev/vhost-net" dev="devtmpfs" ino=1299 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 138.661009][ T40] audit: type=1400 audit(394.560:1883): avc: denied { create } for pid=9590 comm="syz.7.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 138.666889][ T40] audit: type=1400 audit(394.560:1884): avc: denied { bind } for pid=9590 comm="syz.7.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 138.673125][ T40] audit: type=1400 audit(394.560:1885): avc: denied { listen } for pid=9590 comm="syz.7.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 138.679559][ T40] audit: type=1400 audit(394.560:1886): avc: denied { setopt } for pid=9590 comm="syz.7.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 138.731655][ T9596] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 138.734551][ T9596] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 138.740101][ T9596] vhci_hcd vhci_hcd.0: Device attached [ 138.851916][ T40] audit: type=1400 audit(394.750:1887): avc: denied { read } for pid=9611 comm="syz.7.997" name="nullb0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 138.860268][ T40] audit: type=1400 audit(394.750:1888): avc: denied { open } for pid=9611 comm="syz.7.997" path="/dev/nullb0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 138.889876][ T40] audit: type=1400 audit(394.790:1889): avc: denied { read write } for pid=9616 comm="syz.1.998" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 138.975431][ T6016] usb 49-1: new low-speed USB device number 3 using vhci_hcd [ 139.015402][ T837] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 139.033724][ T9633] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 139.036482][ T9633] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 139.046298][ T9633] vhci_hcd vhci_hcd.0: Device attached [ 139.183429][ T9651] GUP no longer grows the stack in syz.7.1006 (9651): 200000007000-20000000a000 (200000004000) [ 139.190214][ T9651] CPU: 3 UID: 0 PID: 9651 Comm: syz.7.1006 Not tainted syzkaller #0 PREEMPT(full) [ 139.190241][ T9651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.190254][ T9651] Call Trace: [ 139.190261][ T9651] [ 139.190268][ T9651] dump_stack_lvl+0x16c/0x1f0 [ 139.190298][ T9651] gup_vma_lookup+0x1d2/0x220 [ 139.190320][ T9651] __get_user_pages+0x243/0x34a0 [ 139.190349][ T9651] ? xsk_setsockopt+0x6db/0x9a0 [ 139.190365][ T9651] ? do_sock_setsockopt+0xf3/0x1d0 [ 139.190386][ T9651] ? __sys_setsockopt+0x1a0/0x230 [ 139.190405][ T9651] ? __x64_sys_setsockopt+0xbd/0x160 [ 139.190422][ T9651] ? __pfx___get_user_pages+0x10/0x10 [ 139.190447][ T9651] __gup_longterm_locked+0x2dd/0x17e0 [ 139.190467][ T9651] ? __lock_acquire+0xab0/0x1ce0 [ 139.190490][ T9651] ? __pfx___gup_longterm_locked+0x10/0x10 [ 139.190521][ T9651] pin_user_pages+0x13c/0x160 [ 139.190543][ T9651] ? __pfx_pin_user_pages+0x10/0x10 [ 139.190567][ T9651] ? xdp_umem_create+0x652/0x1270 [ 139.190591][ T9651] xdp_umem_create+0x73c/0x1270 [ 139.190617][ T9651] xsk_setsockopt+0x6db/0x9a0 [ 139.190641][ T9651] ? __pfx_xsk_setsockopt+0x10/0x10 [ 139.190658][ T9651] ? find_held_lock+0x2b/0x80 [ 139.190689][ T9651] ? selinux_socket_setsockopt+0x6a/0x80 [ 139.190710][ T9651] ? __pfx_xsk_setsockopt+0x10/0x10 [ 139.190728][ T9651] do_sock_setsockopt+0xf3/0x1d0 [ 139.190757][ T9651] __sys_setsockopt+0x1a0/0x230 [ 139.190783][ T9651] __x64_sys_setsockopt+0xbd/0x160 [ 139.190802][ T9651] ? do_syscall_64+0x91/0x4e0 [ 139.190824][ T9651] ? lockdep_hardirqs_on+0x7c/0x110 [ 139.190844][ T9651] do_syscall_64+0xcd/0x4e0 [ 139.190865][ T9651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.190888][ T9651] RIP: 0033:0x7fd31678eec9 [ 139.190903][ T9651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.190922][ T9651] RSP: 002b:00007fd3149f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 139.190941][ T9651] RAX: ffffffffffffffda RBX: 00007fd3169e5fa0 RCX: 00007fd31678eec9 [ 139.190952][ T9651] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 139.190962][ T9651] RBP: 00007fd316811f91 R08: 0000000000000020 R09: 0000000000000000 [ 139.190974][ T9651] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 139.190983][ T9651] R13: 00007fd3169e6038 R14: 00007fd3169e5fa0 R15: 00007fff18f158c8 [ 139.191006][ T9651] [ 139.193472][ T9651] jfs: Unknown parameter '/fteO' [ 139.195623][ T837] usb 11-1: Using ep0 maxpacket: 16 [ 139.278540][ T9657] ALSA: mixer_oss: invalid OSS volume '' [ 139.286114][ T837] usb 11-1: config 0 has no interfaces? [ 139.295731][ T6002] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 139.297299][ T837] usb 11-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 139.300196][ T24] usb 53-1: new low-speed USB device number 2 using vhci_hcd [ 139.303658][ T837] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.316161][ T837] usb 11-1: config 0 descriptor?? [ 139.394046][ T9666] Invalid logical block size (-2) [ 139.495440][ T6002] usb 13-1: Using ep0 maxpacket: 8 [ 139.500277][ T6002] usb 13-1: config 0 has no interfaces? [ 139.506020][ T6002] usb 13-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 139.509963][ T6002] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.513436][ T6002] usb 13-1: Product: syz [ 139.515378][ T6002] usb 13-1: Manufacturer: syz [ 139.517302][ T6002] usb 13-1: SerialNumber: syz [ 139.521650][ T6002] usb 13-1: config 0 descriptor?? [ 139.538660][ T9597] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 139.540979][ T1142] vhci_hcd: stop threads [ 139.541074][ T837] usb 11-1: USB disconnect, device number 6 [ 139.542310][ T1142] vhci_hcd: release socket [ 139.542339][ T1142] vhci_hcd: disconnect device [ 139.589252][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1010'. [ 139.592978][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1010'. [ 139.596795][ T5958] Bluetooth: hci1: command tx timeout [ 139.727449][ T57] usb 13-1: USB disconnect, device number 2 [ 139.730140][ T9635] vhci_hcd: connection reset by peer [ 139.735632][ T13] vhci_hcd: stop threads [ 139.737376][ T13] vhci_hcd: release socket [ 139.739052][ T13] vhci_hcd: disconnect device [ 140.415785][ T9706] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1019'. [ 140.534522][ T9720] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 140.537392][ T9720] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 140.543494][ T9720] vhci_hcd vhci_hcd.0: Device attached [ 140.554093][ T9716] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1023'. [ 140.609433][ T9731] netlink: 'syz.7.1027': attribute type 10 has an invalid length. [ 140.626180][ T9731] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 140.774609][ T9747] netlink: 'syz.1.1030': attribute type 4 has an invalid length. [ 140.857282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 140.885345][ T57] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 140.955313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 141.013116][ T9757] bridge_slave_0: left allmulticast mode [ 141.015793][ T9757] bridge_slave_0: left promiscuous mode [ 141.019533][ T9757] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.029277][ T9757] bridge_slave_1: left allmulticast mode [ 141.031166][ T9757] bridge_slave_1: left promiscuous mode [ 141.033092][ T9757] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.051365][ T9757] bond0: (slave bond_slave_0): Releasing backup interface [ 141.055512][ T57] usb 13-1: Using ep0 maxpacket: 16 [ 141.060731][ T57] usb 13-1: config 0 has no interfaces? [ 141.063517][ T57] usb 13-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 141.068387][ T57] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.068854][ T9757] bond0: (slave bond_slave_1): Releasing backup interface [ 141.074312][ T57] usb 13-1: config 0 descriptor?? [ 141.101626][ T9757] team0: Port device team_slave_0 removed [ 141.114863][ T9757] team0: Port device team_slave_1 removed [ 141.121161][ T9757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.123988][ T9757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.129431][ T9757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.132439][ T9757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.216662][ T9761] netlink: 'syz.7.1035': attribute type 10 has an invalid length. [ 141.219384][ T9761] openvswitch: netlink: Flow key attr not present in new flow. [ 141.224384][ T9761] netlink: 'syz.7.1035': attribute type 10 has an invalid length. [ 141.229696][ T9761] openvswitch: netlink: Flow key attr not present in new flow. [ 141.233512][ T9761] netlink: 'syz.7.1035': attribute type 10 has an invalid length. [ 141.237674][ T9761] openvswitch: netlink: Flow key attr not present in new flow. [ 141.241158][ T9761] netlink: 'syz.7.1035': attribute type 10 has an invalid length. [ 141.244365][ T9761] openvswitch: netlink: Flow key attr not present in new flow. [ 141.247865][ T9761] netlink: 'syz.7.1035': attribute type 10 has an invalid length. [ 141.251276][ T9761] openvswitch: netlink: Flow key attr not present in new flow. [ 141.254768][ T9761] netlink: 'syz.7.1035': attribute type 10 has an invalid length. [ 141.259647][ T9761] openvswitch: netlink: Flow key attr not present in new flow. [ 141.266090][ T9761] netlink: 'syz.7.1035': attribute type 10 has an invalid length. [ 141.268795][ T9761] openvswitch: netlink: Flow key attr not present in new flow. [ 141.272329][ T9761] netlink: 'syz.7.1035': attribute type 10 has an invalid length. [ 141.275671][ T9761] openvswitch: netlink: Flow key attr not present in new flow. [ 141.279129][ T9761] openvswitch: netlink: Flow key attr not present in new flow. [ 141.281825][ T9722] usb 53-1: recv xbuf, 0 [ 141.282788][ T9761] openvswitch: netlink: Flow key attr not present in new flow. [ 141.288111][ T1229] vhci_hcd: stop threads [ 141.290015][ T1229] vhci_hcd: release socket [ 141.291922][ T1229] vhci_hcd: disconnect device [ 141.355438][ T24] vhci_hcd: vhci_device speed not set [ 141.665344][ T5958] Bluetooth: hci1: command tx timeout [ 141.927639][ T9807] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1047'. [ 141.931000][ T9807] NCSI netlink: No device for ifindex 0 [ 142.095581][ T9807] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1047'. [ 142.234149][ T93] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.356708][ T93] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.401327][ T9825] team0: Port device dummy0 added [ 142.426735][ T93] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.498997][ T93] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.504341][ T5957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 142.511219][ T5957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 142.514922][ T5957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 142.519061][ T5957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.522562][ T5957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 142.553045][ T9829] xfrm0 speed is unknown, defaulting to 1000 [ 142.626249][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 142.879498][ T9846] binder: binder_mmap: 9844 200000ffc000-200001000000 bad vm_flags failed -1 [ 142.883131][ T9845] binder: binder_mmap: 9844 200000ffc000-200001000000 bad vm_flags failed -1 [ 143.122713][ T93] bond0 (unregistering): Released all slaves [ 143.133326][ T9843] gre0: Master is either lo or non-ether device [ 143.146573][ T9829] chnl_net:caif_netlink_parms(): no params data found [ 143.315492][ T9829] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.318751][ T9829] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.324555][ T9829] bridge_slave_0: entered allmulticast mode [ 143.331831][ T9829] bridge_slave_0: entered promiscuous mode [ 143.338355][ T9829] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.338504][ T9829] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.344515][ T9829] bridge_slave_1: entered allmulticast mode [ 143.345921][ T9829] bridge_slave_1: entered promiscuous mode [ 143.444573][ T9829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.450752][ T9829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.451133][ T57] usb 13-1: USB disconnect, device number 3 [ 143.473561][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 143.473572][ T40] audit: type=1400 audit(399.370:1939): avc: denied { mounton } for pid=9873 comm="syz.6.1070" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 143.526568][ T9829] team0: Port device team_slave_0 added [ 143.531896][ T9829] team0: Port device team_slave_1 added [ 143.542539][ T40] audit: type=1326 audit(399.440:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9875 comm="syz.1.1071" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf858eec9 code=0x7ffc0000 [ 143.548991][ T9874] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256 [ 143.559103][ T40] audit: type=1326 audit(399.440:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9875 comm="syz.1.1071" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf858eec9 code=0x7ffc0000 [ 143.559959][ T9874] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512 [ 143.568666][ T40] audit: type=1326 audit(399.440:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9875 comm="syz.1.1071" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcbf858eec9 code=0x7ffc0000 [ 143.572205][ T9874] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found [ 143.581033][ T40] audit: type=1326 audit(399.440:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9875 comm="syz.1.1071" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf858eec9 code=0x7ffc0000 [ 143.583108][ T9874] UDF-fs: Scanning with blocksize 2048 failed [ 143.594789][ T40] audit: type=1326 audit(399.440:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9875 comm="syz.1.1071" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fcbf858eec9 code=0x7ffc0000 [ 143.603404][ T40] audit: type=1326 audit(399.450:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9875 comm="syz.1.1071" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf858eec9 code=0x7ffc0000 [ 143.613090][ T40] audit: type=1326 audit(399.450:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.1.1071" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcbf85c1785 code=0x7ffc0000 [ 143.624633][ T40] audit: type=1326 audit(399.460:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9875 comm="syz.1.1071" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcbf858eec9 code=0x7ffc0000 [ 143.631911][ T40] audit: type=1326 audit(399.460:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9875 comm="syz.1.1071" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf858eec9 code=0x7ffc0000 [ 143.643414][ T9829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.645696][ T9829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.655326][ T9829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.662048][ T9829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.664320][ T9829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.666999][ T9874] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256 [ 143.674515][ T9829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.679554][ T9874] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512 [ 143.685984][ T9874] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found [ 143.688299][ T9874] UDF-fs: Scanning with blocksize 4096 failed [ 143.690268][ T9874] UDF-fs: warning (device sr0): udf_fill_super: No partition found (1) [ 143.696721][ T93] hsr_slave_0: left promiscuous mode [ 143.701319][ T93] hsr_slave_1: left promiscuous mode [ 143.731855][ T93] veth1_macvtap: left promiscuous mode [ 143.733715][ T93] veth0_macvtap: left promiscuous mode [ 143.735806][ T93] veth1_vlan: left promiscuous mode [ 143.737539][ T93] veth0_vlan: left promiscuous mode [ 144.055702][ T6016] vhci_hcd: vhci_device speed not set [ 144.559813][ T5957] Bluetooth: hci0: command tx timeout [ 144.587051][ T9896] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1076'. [ 144.942512][ T9903] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 144.945412][ T9903] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 144.953707][ T9903] vhci_hcd vhci_hcd.0: Device attached [ 145.195333][ T56] usb 53-1: new low-speed USB device number 3 using vhci_hcd [ 145.326114][ T6253] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 145.495369][ T6253] usb 13-1: Using ep0 maxpacket: 16 [ 145.499667][ T6253] usb 13-1: config 0 has no interfaces? [ 145.502231][ T6253] usb 13-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 145.506337][ T6253] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.515707][ T6253] usb 13-1: config 0 descriptor?? [ 145.593961][ T9829] hsr_slave_0: entered promiscuous mode [ 145.597746][ T9829] hsr_slave_1: entered promiscuous mode [ 145.601108][ T9829] debugfs: 'hsr0' already exists in 'hsr' [ 145.604026][ T9829] Cannot create hsr debugfs directory [ 145.722810][ T9904] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 145.723491][ T1463] usb 13-1: USB disconnect, device number 4 [ 145.725343][ T1142] vhci_hcd: stop threads [ 145.728323][ T1142] vhci_hcd: release socket [ 145.730660][ T1142] vhci_hcd: disconnect device [ 145.867662][ T9829] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 145.876905][ T9829] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 145.883750][ T9829] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 145.894249][ T9829] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 145.947638][ T9829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.964113][ T9829] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.972000][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.975800][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.989972][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.992858][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.142509][ T9829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.220035][ T9955] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1084'. [ 146.333257][ T9829] veth0_vlan: entered promiscuous mode [ 146.343904][ T9829] veth1_vlan: entered promiscuous mode [ 146.368851][ T9829] veth0_macvtap: entered promiscuous mode [ 146.373928][ T9829] veth1_macvtap: entered promiscuous mode [ 146.388030][ T9829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.397351][ T9829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.402702][ T9973] sctp: [Deprecated]: syz.8.1087 (pid 9973) Use of int in max_burst socket option deprecated. [ 146.402702][ T9973] Use struct sctp_assoc_value instead [ 146.407839][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.410096][ T9972] sctp: [Deprecated]: syz.8.1087 (pid 9972) Use of int in max_burst socket option deprecated. [ 146.410096][ T9972] Use struct sctp_assoc_value instead [ 146.413041][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.426461][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.435759][ T93] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.464794][ T9977] net_ratelimit: 55 callbacks suppressed [ 146.464805][ T9977] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 146.489520][ T9977] Bluetooth: MGMT ver 1.23 [ 146.491220][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.491240][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.510597][ T9977] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 146.518389][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.520925][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.547721][ T1463] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] SMP KASAN NOPTI [ 146.553145][ T1463] KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f] [ 146.558748][ T1463] CPU: 3 UID: 0 PID: 1463 Comm: kworker/3:2 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 146.562780][ T1463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.568264][ T1463] Workqueue: events l2cap_info_timeout [ 146.570800][ T1463] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 146.573368][ T1463] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 146.581498][ T1463] RSP: 0018:ffffc9000693fa00 EFLAGS: 00010286 [ 146.584158][ T1463] RAX: dffffc0000000000 RBX: 0000000000000258 RCX: 0000000000000000 [ 146.587547][ T1463] RDX: 0000000000000000 RSI: ffffffff89212421 RDI: dffffc000000004b [ 146.590983][ T1463] RBP: 0000000000000258 R08: 0000000000000001 R09: 0000000000000000 [ 146.594574][ T1463] R10: 00000000ffffff83 R11: 0000000000000000 R12: ffffffff89212421 [ 146.598185][ T1463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.601635][ T1463] FS: 0000000000000000(0000) GS:ffff8880d7171000(0000) knlGS:0000000000000000 [ 146.605430][ T1463] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 146.608262][ T1463] CR2: 00007f5c98f156c0 CR3: 0000000059c49000 CR4: 0000000000352ef0 [ 146.612156][ T1463] Call Trace: [ 146.613819][ T1463] [ 146.615142][ T1463] __kasan_check_byte+0x13/0x50 [ 146.617277][ T1463] lock_acquire+0xfc/0x350 [ 146.619221][ T1463] lock_sock_nested+0x41/0xf0 [ 146.621327][ T1463] ? l2cap_sock_ready_cb+0x41/0x170 [ 146.624069][ T1463] l2cap_sock_ready_cb+0x41/0x170 [ 146.626610][ T1463] l2cap_conn_start+0x144/0xb30 [ 146.628831][ T1463] ? __pfx_l2cap_conn_start+0x10/0x10 [ 146.631141][ T1463] ? __pfx___mutex_lock+0x10/0x10 [ 146.633339][ T1463] ? debug_object_deactivate+0x1ec/0x3a0 [ 146.635777][ T1463] l2cap_info_timeout+0x81/0xa0 [ 146.637925][ T1463] process_one_work+0x9cf/0x1b70 [ 146.640344][ T1463] ? __pfx_process_one_work+0x10/0x10 [ 146.643229][ T1463] ? assign_work+0x1a0/0x250 [ 146.645467][ T1463] worker_thread+0x6c8/0xf10 [ 146.647524][ T1463] ? __kthread_parkme+0x19e/0x250 [ 146.649697][ T1463] ? __pfx_worker_thread+0x10/0x10 [ 146.651953][ T1463] kthread+0x3c5/0x780 [ 146.653803][ T1463] ? __pfx_kthread+0x10/0x10 [ 146.655910][ T1463] ? rcu_is_watching+0x12/0xc0 [ 146.658443][ T1463] ? __pfx_kthread+0x10/0x10 [ 146.661297][ T1463] ret_from_fork+0x56a/0x730 [ 146.663705][ T1463] ? __pfx_kthread+0x10/0x10 [ 146.665729][ T1463] ret_from_fork_asm+0x1a/0x30 [ 146.667844][ T1463] [ 146.669204][ T1463] Modules linked in: [ 146.671514][ T1463] ---[ end trace 0000000000000000 ]--- [ 146.674321][ T5957] Bluetooth: hci0: command tx timeout [ 146.681451][ T1463] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 146.684994][ T1463] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 146.694874][ T1463] RSP: 0018:ffffc9000693fa00 EFLAGS: 00010286 [ 146.697835][ T1463] RAX: dffffc0000000000 RBX: 0000000000000258 RCX: 0000000000000000 [ 146.701493][ T1463] RDX: 0000000000000000 RSI: ffffffff89212421 RDI: dffffc000000004b [ 146.705996][ T1463] RBP: 0000000000000258 R08: 0000000000000001 R09: 0000000000000000 [ 146.709971][ T1463] R10: 00000000ffffff83 R11: 0000000000000000 R12: ffffffff89212421 [ 146.713586][ T1463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.717704][ T1463] FS: 0000000000000000(0000) GS:ffff8880d7171000(0000) knlGS:0000000000000000 [ 146.721884][ T1463] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 146.724868][ T1463] CR2: 00007f5c98f156c0 CR3: 000000002da6b000 CR4: 0000000000352ef0 [ 146.729079][ T1463] Kernel panic - not syncing: Fatal exception [ 146.733150][ T1463] Kernel Offset: disabled [ 146.735077][ T1463] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:46:31 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff8880374f3500 RCX=0000000000000019 RDX=ffff8880369ca480 RSI=ffffffff82374c6d RDI=ffff8880374f3500 RBP=ffffc9000310fe50 RSP=ffffc9000310f8b8 R8 =0000000000000007 R9 =0000000000000000 R10=ffff8880374f3500 R11=0000000000000000 R12=ffffc9000310f9fc R13=ffff8880374f3500 R14=ffffc9000310fb10 R15=ffff8880374f3500 RIP=ffffffff81bb1918 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fab74383300 ffffffff 00c00000 GS =0000 ffff8880d6e71000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7b28865b80 CR3=0000000031e21000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0442000000060000 0008000400080010 00080000000c0200 0000000000080008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0014010000000000 000800080007000c 00080000000c0000 00a4000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0442000000200000 0006000000100008 0000000000000004 000c001a00100000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0007000c00080000 0000000000100000 0034000000000300 0000000000080000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a00040000000b 000c000a00000000 03e6000000080004 0000000a00080000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0020000000010000 0000000000000000 002c00000000016e 3600000000140000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 001c0000000e0014 000c000000080004 001c000e00000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a000800000020 0000000100000000 000000000000002c 00000000016e3600 ZMM25=6eeec90e6eeec90e 6eeec90e6eeec90e 6eeec90e6eeec90e 6eeec90e6eeec90e 6eeec90e6eeec90e 6eeec90e6eeec90e 6eeec90e6eeec90e 6eeec90e6eeec90e ZMM26=ea32773dea32773d ea32773dea32773d ea32773dea32773d ea32773dea32773d ea32773dea32773d ea32773dea32773d ea32773dea32773d ea32773dea32773d ZMM27=3074da1f3074da1f 3074da1f3074da1f 3074da1f3074da1f 3074da1f3074da1f 3074da1f3074da1f 3074da1f3074da1f 3074da1f3074da1f 3074da1f3074da1f ZMM28=000000500000004f 0000004e0000004d 0000004c0000004b 0000004a00000049 0000004800000047 0000004600000045 0000004400000043 0000004200000041 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=ad050000ad050000 ad050000ad050000 ad050000ad050000 ad050000ad050000 ad050000ad050000 ad050000ad050000 ad050000ad050000 ad050000ad050000 info registers vcpu 1 CPU#1 RAX=ffffc90006500000 RBX=ffff888028e60000 RCX=ffffffff819b6a63 RDX=1ffff110051cc25a RSI=ffffffff866f53ff RDI=0000000000000016 RBP=0000000000000003 RSP=ffffc900006a0ea8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=ffffc900006a0ff8 R12=ffffffff905f76a0 R13=dffffc0000000000 R14=ffff888028e612d0 R15=0000000000000000 RIP=ffffffff866f5427 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555866b4500 ffffffff 00c00000 GS =0000 ffff8880d6f71000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555866cf5c8 CR3=0000000059c49000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000280001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb598c7ff90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde241b5b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde241b5b6 00007ffde241b5bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb597e12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb597e12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb597e12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb597e12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb597e1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb597e1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666c65732f636f72 702f0073252f666c 65732d6461657268 742f636f72702f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434940560a464a57 550a0056000a4349 405608414440574d 510a464a57550a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a941e40 RCX=ffffffff81af0c71 RDX=ffff8880255ea480 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000454f868 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=ffffed100d5283c9 R14=0000000000000001 R15=0000000000000003 RIP=ffffffff81bb12d2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d7071000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005556f2f5bce8 CR3=000000000df82000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcc0c002 Opmask01=0000000000000010 Opmask02=000000000000001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffff0f0e0d0c0b ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100008781 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa7625b8d48 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005556f2f47560 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000662d 00005556f2f4ed70 00005556f2f4ed90 6368642f6374005b ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 828183873a3d0015 16170b3637303f3e 3d3c3b3a2d2a2928 2726242221200a09 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005556f2f530b8 0000000000000000 000000000000000f 00005556f200873d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005556f2f4d918 0000000000000000 000000000000000f 0000000000875d81 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852008f5 RDI=ffffffff9ab53ae0 RBP=ffffffff9ab53aa0 RSP=ffffc9000693f400 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000066 R14=ffffffff9ab53aa0 R15=ffffffff85200890 RIP=ffffffff8520091f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d7171000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5c98f156c0 CR3=0000000059c49000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffcb494db0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffcb494f36 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffcb494f36 00007fffcb494f3c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c98212fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c98212fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c98212fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c98212fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c9821305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c9821313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000