last executing test programs: 3m2.693911783s ago: executing program 2 (id=698): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000180)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a428040000dce4195e9f9da8fa665b5ee7ef000000140035007675646d793000", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 3m2.621546698s ago: executing program 2 (id=701): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x2099, 0x3, 0x20000006, 0x7ffffff9}, 0x10) write(r3, &(0x7f00000000c0)="1800000016005f0227fffffffffffff80700000001000000", 0x18) ioctl$sock_inet_SIOCSARP(r2, 0x8955, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000002c0)={{0x2, 0x40, @dev={0xac, 0x14, 0x14, 0x27}}, {0x913256420c2f7b72, @broadcast}, 0x48, {0x2, 0xfffc, @local}, 'macvlan0\x00'}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000800250000000005000000", 0x29}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x1) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x2099, 0x3, 0x20000006, 0x7ffffff9}, 0x10) (async) write(r3, &(0x7f00000000c0)="1800000016005f0227fffffffffffff80700000001000000", 0x18) (async) ioctl$sock_inet_SIOCSARP(r2, 0x8955, 0x0) (async) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000002c0)={{0x2, 0x40, @dev={0xac, 0x14, 0x14, 0x27}}, {0x913256420c2f7b72, @broadcast}, 0x48, {0x2, 0xfffc, @local}, 'macvlan0\x00'}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000800250000000005000000", 0x29}], 0x1) (async) 3m2.383946313s ago: executing program 2 (id=706): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x40010022, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x26, 0x3, 0xfffffffc) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r2], 0x40}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008000100", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 3m2.184918001s ago: executing program 2 (id=709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101580, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x3, 0x4) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x4}, 0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="0f20d835080000000f2ed80f5b81007800008f4800ed2a06ff66bafc0cecc4c125fa5529c744240000000000b801000000aa0149b2b2442406000000000f011c24410f01c864430f01c2660f38ec100f670f0f69a0b4b435f3460fc7b70d000000", 0x61}], 0x1, 0x7a, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="0f20d835080000000f2ed80f5b81007800008f4800ed2a06ff66bafc0cecc4c125fa5529c744240000000000b801000000aa0149b2b2442406000000000f011c24410f01c864430f01c2660f38ec100f670f0f69a0b4b435f3460fc7b70d000000", 0x61}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m2.094792798s ago: executing program 2 (id=711): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x2, 0x0, {0xa, 0x4e21, 0x8000, @empty}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x201, 0x4000003e, r1, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x90) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) r6 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x7, &(0x7f0000000180), 0x43) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat(r9, &(0x7f0000000280)='.\x00', 0x2000, 0x0) open_by_handle_at(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000010001"], 0x0) r11 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r11, 0x101, 0x4, &(0x7f0000000040)=0x100000, 0x4) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a70000000060a0b04000000000000000002000000440004802c0001800b0001006e756d67656e00001c000280080002400000000208000340000000000800014000000015140001800b00010072656a6563740000040002800900010073797a30000000000900020073797a32"], 0x98}}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) setrlimit(0xe, &(0x7f0000000280)={0x8, 0xffffffff00000001}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r13, @ANYRES32=r13, @ANYBLOB='.\x00\x00\x00\x00\x00pI'], 0x20) 3m2.034217323s ago: executing program 2 (id=712): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x38, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0x1, 0x8}, {0xf, 0xfff3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x2}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x104) setxattr$system_posix_acl(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x3}, [{0x2, 0x6, 0xffffffffffffffff}], {0x4, 0xf}, [], {0x10, 0x6}, {0x20, 0x3}}, 0x2c, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x800}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0xffffffe7, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000013c3eeac016c18cb6461c96089b00000000004000400"], 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed020000000000008000000000000000000c000200010000000600000008"], 0x2c}}, 0x4000) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="001404"], 0x48}, 0x1, 0x0, 0x0, 0x80500f1}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x408c5}, 0x40084) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r3 = syz_open_pts(r2, 0x80) r4 = dup3(r3, r2, 0x80000) read(r4, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r4, &(0x7f0000001d40)=""/4095, 0xfff) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000040)={0x10201, 0x0, 0x58000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x10001, r7}) unshare(0x48020200) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0xe) 2m47.042600639s ago: executing program 32 (id=712): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x38, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0x1, 0x8}, {0xf, 0xfff3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x2}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x104) setxattr$system_posix_acl(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x3}, [{0x2, 0x6, 0xffffffffffffffff}], {0x4, 0xf}, [], {0x10, 0x6}, {0x20, 0x3}}, 0x2c, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x800}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0xffffffe7, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000013c3eeac016c18cb6461c96089b00000000004000400"], 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed020000000000008000000000000000000c000200010000000600000008"], 0x2c}}, 0x4000) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="001404"], 0x48}, 0x1, 0x0, 0x0, 0x80500f1}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x408c5}, 0x40084) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r3 = syz_open_pts(r2, 0x80) r4 = dup3(r3, r2, 0x80000) read(r4, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r4, &(0x7f0000001d40)=""/4095, 0xfff) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000040)={0x10201, 0x0, 0x58000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x10001, r7}) unshare(0x48020200) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0xe) 1m46.522279935s ago: executing program 0 (id=1416): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x2b, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x17, 0x1, 0xf1bd29, 0x25dfdbfc, {0x6}}, 0x14}}, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r4, r2, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r2, r4, 0x2f, 0x0, 0x4, @void, @value=r3}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', r5, 0x4, 0x5, 0x7, 0x4b9c, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x7, 0xcec, 0x88d0}}) sendto$packet(r1, &(0x7f0000000200)="69cea3df9bab72810225f4b47a85c92814f1f031b0d258d766fe9bda3418787a72da75", 0x23, 0x4084080, &(0x7f0000000300)={0x11, 0xf8, r6, 0x1, 0x80, 0x6, @local}, 0x14) bind$can_j1939(r1, &(0x7f0000001180)={0x1d, r5, 0x2, {0x0, 0xff, 0x1}}, 0x18) syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0xc01) 1m46.521246088s ago: executing program 0 (id=1418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8640, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x10) sendto$packet(r4, &(0x7f0000000240)="bad33075218151db00316f3a277f", 0xe, 0x2000041, &(0x7f0000000080)={0x11, 0xf5, r3, 0x1, 0xda, 0x6, @remote}, 0x14) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r8, 0xe503, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mount$bpf(0x0, 0x0, 0x0, 0x808, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 1m46.517974354s ago: executing program 0 (id=1422): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000480)=0x1) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x1) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000940)={0x3, 0x0, [{0x0, 0xff0, &(0x7f0000001d80)=""/4080}, {0x0, 0x24, &(0x7f0000000000)=""/36}, {0xc000, 0x31, &(0x7f0000000780)=""/49}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000380)={0x0, 0x10001, 0x7, 0x1}) syz_open_procfs(r0, &(0x7f0000000040)='fd/4\x00') r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000000)={0xa, @raw_data="3aee44a9c226a51c91d96d057945493d62731d82b7b243ac2b8c09e616fac25ae19d22dde9f23f852c3c3ccc3a9bd805898c9b2332eefd90a8a3ec23a13d253cf99691b813d8bfe75bfd83c66b56546b67a6d49ef1aa41cd5fb1faa24fd3f04c0551ed1ce90da7f3c55d1722a954283520a13b98bbbda5d490614b0b944b44d09086680a995a0ef055c7b45c50f7096e53c69a5af5d8af27a799d80635b87bb98d78c265cc91f11d80f3215cb8e27902ded8695717e1bc25acbcb5f28d2e5cddcd7b000000009cae"}) r6 = socket(0x1, 0x803, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448c9, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYRES8=r4, @ANYRES32=r8], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f000011d800)={0x3, [], 0x9, "f0828add79bc54"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000011e800)={0x3, [], 0x7, "f25c2e6e37df50"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f000011f800)={0x0, 0x0, "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", "aba897916f126b3123f879b36df9c99927f8000fc9380ef8882fa6168d09f8838c09183526ed68b9b2ae703d369d43996a7cbdc7a73265ee76f4ae8f887d2be29d60f0d91d46568d305ef28db58bfbdc5fe09fcfc963d57f6ae52eb2555fe6fc5a2dabfce7eed3cd7c20063bd29f7ab3a4dbeee3ab843b5f454071e3d165df31ce147ae813b627a8ec034e6af26878a20749eb2c3ebdc8ec766ffa33f28f2dd09aeb3e39575eb697c1ba60174b868040f05e1884a4d387cddd27ffc21e3123ff4b8d69314eebdf7d4e6509ab60963d33405310ce67947f35c48086efb5035d041103f71925b0c237469a21d6d9c015fcdce3d3171246e737603474f36189e5322f017d8ce588487dc0126292f6c3e32467279bf3c0dd494b8191d9f0150ef035e26e836cd5b291f99dbd6d14acbce809b66a641b7c34153f1ec1ebdd4a3b0f8f8dbba2b2ad8f7d44b0d436684ad0e25244214a1a2185f0029da9e53e2cbc911637d2a7a285df56d87bb78df753513b527465e1e040f1fa64896469f72920b9355e732e461adf14981eb515f2b451c2eae0e22a66826f023fa92461ff47ce3f18f933d176c2bc85231e693c3b040f2039d1dff3366e15b46467b9a5f1d344b6e1fbd3bec12dba2f3f6161513e85bb6bf14a21eb501747e760db0dfbb15b9c61d592bd79b527261a88136de05b2911c0db1e4638e155b0c8e14d18f15efc3baa06ce63dc3caf9e60cda3000f332784b12135bd1b6d341ed729e9a779d839d9f4873ad6954a69c9692ed2a57e37497d589bef9cb082bbc17d166e91d9bd6ad148c8d4c4ebca1801d95cf5a8afec854d4c470b03f0ec43a0ca2049e47e9070a99e8efadbb3b92c8cb613fb165c5238f555b90e37e171db93d8de0822ce1a014bd4c85b8d9a07cea8aaac13faa2a0946cba24b21b3bd67880ce8a8ccc449d6fe0345f4bd0bb47acd9fd329e9cb1168b42aa9ef998029ada983cef084c1c919bea0b7a677ddbdb2541e330846ef578904ef85bbde9b769456919747fd34422a364ec3a06c409ff063eefd4632a78ee1ad43f691e7ee9b872f01391f70ea0d3eb56e15bc65c80903f0b47899cae2f3de47c7b9a65e7e7800f376c3df4a3c22e644a84fdae9fee6a59139c268ff352d96e770c35db4aa5fcdfe8ff2daf5995343aa6826a9fe7b5d5337ef9c4b19067b37d7fce24aca7dbfd1100383990699c10756b7f7c49898fd6758c1e8a33ab76755354cd06b596cf739776d837a5d4067161292b372792a4b6236c8d769c75367ad6e9558a32c0a9173ce4e7c96effd8ecdba4fc48df54cee866f6c47e5fc3358e6e5232788196eadccc9cdc9adb83dbded21d59e170a13b887a3070b7a795446fe2d63c80e0485d1ccd1fa56d95ee651e994a8456cfeb2fd1495a01372a94c5f874664fcc1c302b8b6e097e99f8c429c0bc59ec389ceff4ac74f71331fa334aa4e20c90b33aba92eea6f36faf43419f03819b5e766e23a8153a3e76ce9e46e148e9d03bce1e99ef06b1407478338ba4ae76d04c9ff254ffcd23fa71129b90b5be46fb81a0b1d7c80b85fb6047dca2ee64ee28869c8788e48b9c71cedb39a09cc395278cb53965f6c4f44cb50831ac83b04e48db08dd4be0393c01a5abdd240b4feebac51ad4d8145f78a182fc077632a04b1fb2294f1e8ac2181540dc711deb5d3a27ec084bd041118930170d62dd53a5380ce02d543450176982b0d7b037d613d428d668195212161c520f78d975b045bbb79e980e7a502cc478ccb867378efa8b546f36720ac2a85117e58e046f3234d9a8c59b9dd778d7656c3b1c35aadbb50367f8e6d19f8acf44b0e71c7e16c5e58fee86f7301695b82f8924f41e38ba30517af71b60258dee7e54b3f5a1e26884acd60a41932798f644a114d8a2ac79be82b5396b1ddc0c71bd368b69213b63a015285648fd32670817cd85fcf50ce0d3e16ac2eb846f09f3c308aec27efcce010d19243b5428cf4fd8907245fb8486f2275b7db6528248c0213c2f5404725946f6712564018aae47de7265338c6f29b01f19435fd02b1c9bc2514fd0450e2d60c9baa43691dba6b79ea8bb4ab9d953a7f9061396c324a7e78e41b955abb7a9373dff60fefabd093682a9c9acee0ff0872f1042d158b7918c10ac413ab84023699e879c4e8b40f3289f1595445239fea1860b21473187b44473410617a01088aed25c4969870c280400b5688eb1c286a7bccb6f663f8e3262d8d5f6b9e38457547ad5d0c7078ff6d6487f8cde8a66dbddeafca32772beb30700c33b0c9ccb6c36176feed65a12898168d068869d6bdf46aca5db91038f200efc877dc83e940f626f3fe0310f2c84433239d64d096044b8d249e743d4442e81904c08a6d0a033fcc274fa700b524f6bba924ecae4b9319f417812d73cca9533433eb942d67bd417d9a5b6cbe8b4b6b90c902d8871e2d1c288556fde9b889f9b0353b0edf73d89a2f0d50ef0e1a45de4e933ed977ab70798f2021934d60f1d82d705a5d12221b03ba6e13991f0e279a9a25188b357a39e5d918a90e71fcd527c59b623f822a5df37ad6738767b829f1ec72418b74f76245cd6a9c562bc9a2344560f2e41046207415e5b647de18fbaf7dba48e5ef1717ee2a8ea0c42d1c93848ed2d0e914dbd9ab485b09840ffea9618743ce070b778816f9e1055bf76e4e1cd324fece69c62516e34339c0ca898485097207c9c01f8c461dc665b41569c1b0398e62f773071e4f18edd8a7b6a6d3b7323a524aa534a5eb5b1fcdf184d18c40ca146fc7005475a46c797c10f09a4d2ad01c83aae4fb74fb5819c913a3bf1a879c2bb53ab853fe4dedbac91c4066bd8772b7699ac727d2fb1fd6d8c617329647f201988f109d3fdfe0917671bbe8456fbf43d3932414cd2cf55e9410abc0d7e3cfaf122cec28504671735c121c3c584f0241501ddd1754dd93dc1fdfb9a22692d5f8179c46ff8ad625b36a7c020c5d0a6ed20bc1c51f4e93652a12dbc34721ccba31cdf469f14db1d6a44399782c5f2d75e827260cb4c5e21bfa7f8c9c8b32f09597a5380813f2653cce779ddcc9ee9e2829ade9ea9230a0e3aa39adc9adafb20268eda5f20584c3f36ac2d62d04d72648324c4bade0b4ecfed3204fd391e753b375eb2c176bf817625a0d33a2bd6992cdd0acc99dbe58d07eba329c49f2ab2ce347f9178435f19bef562cda167bf35dbb399095c0cc9f7b727c3ef650835ec68c4341d6a4ca57af226f8dd97b4c3951f126fe36cab3a733e761beea3e654b89a39ad8010ad1563ab750cb52abf73c68bcc277a93b193478dbd87135ca963608744d503f81a5b183dae4cb2df9ff80753614d18f47c7790a064756a7ecf3d47a8ac92f1df3e01308f188c321e9fad1cbe1c2bd036ea3e726ca8fa2c5864d5414c8e827b9406aa830c88f81e734b67d1f72e7232a2f6a59cfcfc924a3577f0e240f2b1dbe200b06469699f207b6b54d1d6c5b4edcbd09e3bf42943efff2c08965f9291b5127778c0d480867203e8d037e97717ce6939f82f1f867a5f491f0da4cc7ccaf069fb2c54c23a88afd15de77b49efb01b937107c0f52551a4233d83c3cdc2e21139cef0bb8694b23f5ad344a90f0de8df70b4ab5a2cee06102bb078d037650edfe9b405813bd6382af847b801ba62735ccfc7fdcbe5470647f01c68ec884720d3ffd3957223394e4b1ac781da8cfedd8275764a0d15ab3aae25090477276ce93e22c879759ab7cc91290326393ce6e5c4322b10d186795a96ee2b1ee917af3efa92bcefa68aa2691cef1ee8c566618f5f4d0a5383c0cd86f3b896b5953179a837a29ba408f732a4526afb4896cf60aecd2dd7eae7b70a975b54ee871f75f3a4fb8de0abbba63962db72c41fe0f4e204f1805ed69a807c784f3bb717d99164cb9750a85f4bfb0600582ce708ef27665a68998c063a8f65d56549ac5908a1d8ca103becbd47f7a253b37471b0e746f2879cef441dc0a9b899af79794980e06dc0a9563036217fccc1403b0149a4ae4132a7bacf420c6ddf00fcca22f9873639f4ec9f2ee0bcc14814a7aeb051449f22507cdfc9ca4d9ae729b4544fb3ea9fc11c47cf1af03c340e89d262e99f2389965056e95d3cb8ecb6a66f777dbbc072ea66f572478ebc46922e845661f1a9b63f29d2ab26037c6311b6c5c5527f70093c658879a82391320d806693b19d09f77e929cb3192c446c6d9d2222a843f04262518d0c2e077900433cb5fb020b463ca0c4dbe6cb531863a065bb3f47066b6e765d99f72be1e222789aec9ba3880f0803976e8ef5445b488d5035d01cca48e1d8423d694af16fa42e8551d09e7d2fcd56c696e0da27b2713a9152e07d071079d7a79a146705f2412f2b9d9849b033f7f83c29e24e5f55a8fa2c0b6049a5162178329ba3e7240447f68ed159b19d4377e655875da7efd5e112ec38e532731f068233894bd08451e14c26848898f8c3f887a18dfc7a751c2a3a1eb482dbb9d6899875390aefde778f24e19fb7307f7523e64636bd701374034dda1ea1be4e7af0d61328a5419827b6b25cd08c472d0c6fe6bedafec3b6393d6dbca66f9728c475e1bdb4642c8ec7fb38ffc72549e17fd6282784b81dff8df25bda2be019ec22f57a9b5797d571ddbaccbc55d9280c6ccdfdd6aba44bafa2b0a96c53825138b988b03b390932fd3c8eece0bb3118b39aa88fa66f145332a8793c8ada3f58bdf323725153778c95cdebd4150317ff5dfcf27ec828f8ea02856eba7f6654af234298c2908cd2429a5b5ca85358f26838cc7c7ce0cb28a922b3691c5bd87db3ba3f1c41f690731beee67734c661aa9519b9118e1f22cd69912d097bfc9ffed218d931b831f8bd329cf5e8ec7b5ab6cc806717bb4030084cfb4b578f20abc1b0b8b5af17d3e5649d2cd4bc18f589cef303ee9c4053f3f26f8e320edf67b1204032cccd8b2e8df5efffea47c63f1e8f0fbbb25bc537a611a1e57b7da2a87744e10954693d1e9acc47d9462020e0308cd2c3a3621f4c477e9b51d5ee709282a7589915a832864f53c7dde1b0300f0004205b30381a4cee5336766aaa2c0e02637408f6fcfa1db29e1bcd33ecb6f286dd4b9ef994e84e371fcaa5f96e518f554b1d6acc735017c053dacc24fe09a61b09dcbf2b4630311e82169ee3e9adde2375bcb119a4bfb94a161a19c7e2ef6d2c76fbe38895e2d8d76a9bce5f210987a6dfb2a59290b928338ad35bd35d351894e8af0510d16de114471d8844f014f7dba35be3a1e04957e3182c504241e5607a5d5ff42f9b049f308c54730de7a951dbbb41120a70cfc99fc476c1707f3564ef4a19042a546f192a086a0c2a24667ac2fa49e5444bd0ff4195f019749f5f415fa8c3562d3aaf73db0adfbbdd94fa3e81ef"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000120800)) 1m46.367112786s ago: executing program 0 (id=1429): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 1m46.224075233s ago: executing program 0 (id=1431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x8c, r2, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x703, 0x36}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6dfc32e52a67d46af55d97646c"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9289e1bd7b6d521ac069c6aff4"}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6c8c0bfbc0"}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "42bb8a5719ba1630cbe3ac32fc2c7f"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4050}, 0x24040000) mkdir(&(0x7f00000020c0)='./file0\x00', 0x46) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='huge=']) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8800, 0x68) 1m46.174237738s ago: executing program 0 (id=1432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x6, 0x0, &(0x7f0000000080)=[r0, r2, r3, r0, r0, r0, r0, r0, r0]}, 0x9) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000003340)={0x14, 0x26, 0x1, 0x70bd29, 0x25dfdbfb, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4895}, 0xc040) 1m31.177747798s ago: executing program 33 (id=1432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x6, 0x0, &(0x7f0000000080)=[r0, r2, r3, r0, r0, r0, r0, r0, r0]}, 0x9) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000003340)={0x14, 0x26, 0x1, 0x70bd29, 0x25dfdbfb, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4895}, 0xc040) 1m25.643052463s ago: executing program 1 (id=1624): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040f0400010104"], 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}}, 0x8000) (async) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}}, 0x8000) 1m25.642762134s ago: executing program 1 (id=1626): userfaultfd(0x80801) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r2 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r6) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000003580)) fspick(0xffffffffffffff9c, 0x0, 0x0) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x20040084) mkdirat(0xffffffffffffffff, 0x0, 0x82) 1m23.353743734s ago: executing program 1 (id=1655): socket$tipc(0x1e, 0x2, 0x0) (async) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000400)=@id={0x1e, 0x3, 0x274f4b1003469525, {0x4e23, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000540)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @loopback}}}}}}, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x8, 0x7ffc0002}]}) r3 = syz_open_dev$sg(&(0x7f0000005980), 0x0, 0x80201) bind$tipc(r0, &(0x7f0000000500)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x4}}, 0x10) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0x4, @scatter={0x5, 0x0, &(0x7f0000000480)=[{&(0x7f0000001640)=""/73, 0x49}, {&(0x7f0000000180)=""/149, 0x95}, {&(0x7f0000000640)=""/4086, 0xff6}, {&(0x7f0000000240)=""/213, 0xd5}, {&(0x7f0000000340)=""/163, 0xa3}]}, &(0x7f0000000440)="153606ee522b", 0x0, 0x3, 0x0, 0x3, 0x0}) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0x4, @scatter={0x5, 0x0, &(0x7f0000000480)=[{&(0x7f0000001640)=""/73, 0x49}, {&(0x7f0000000180)=""/149, 0x95}, {&(0x7f0000000640)=""/4086, 0xff6}, {&(0x7f0000000240)=""/213, 0xd5}, {&(0x7f0000000340)=""/163, 0xa3}]}, &(0x7f0000000440)="153606ee522b", 0x0, 0x3, 0x0, 0x3, 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x8000000000000001, 0x0}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f00000000c0)={0x2, r4}) (async) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f00000000c0)={0x2, r4}) 1m23.248699826s ago: executing program 1 (id=1657): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 1m20.173732691s ago: executing program 1 (id=1692): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000380)="240000001a005f1414f9f407000904000a00000000000008000f0001000000181fa198b0", 0x24) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x2, 0x0, 0x5, 0x7) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r4, r4, &(0x7f0000000000)=0x1, 0x4) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000040)) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\b\x00'/15, @ANYRES32=r2, @ANYBLOB="4000a6000a000200aaaaaaaaaabb00000600050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) mprotect(&(0x7f00006f1000/0x1000)=nil, 0x1000, 0x2) (async) r5 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) 1m20.06372697s ago: executing program 1 (id=1693): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf0505"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 1m5.077782565s ago: executing program 34 (id=1693): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf0505"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 48.711297918s ago: executing program 3 (id=2128): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000000)={0x0, 0xb8, 0x2, &(0x7f00000004c0)={0xfa, "f4e1a230be8f46463fb1a5f1b46f44eaa25e485b747a07678118bc00"}}) r3 = socket$kcm(0x2d, 0x2, 0x0) r4 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r4, &(0x7f00000001c0)={'#! ', './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x207) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000280)={0x8, 0x120, 0xfa00, {0x3, {0xfffffff4, 0x3, "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", 0x2, 0x10, 0x42, 0x0, 0x0, 0x4, 0x88}}}, 0x128) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001280), 0x323182, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x3, &(0x7f0000000300)=ANY=[@ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0xb, @mcast1, 0x8}, r8}}, 0x48) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000009c0)={r3}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000640)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYRESHEX=r3], 0x48}, 0x1, 0x0, 0x0, 0x811}, 0x8880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='8'], 0x38}}, 0x20000000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 48.630695815s ago: executing program 3 (id=2130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x5, 0xb}, {0xe, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xb, 0x7222, 0x92d9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) r7 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r8 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 64) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000640)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 48.378125383s ago: executing program 3 (id=2134): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x59}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="66b856000f00d07801b9800000c00f3235000100000f30f714cf0fc7a907000000662e3e0f01b00c1a0000c4e3c1405b8c00c4e2edb8da3e0fc73e0f38c822", 0x3f}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000200)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 48.261779933s ago: executing program 3 (id=2137): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="0000000000aa303e97380e90231bdbdaf6a4bd77eabcd3866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9d00000c0a498396b28c7d1784d04aa38922721cb781608144284d90a72d7d2e3152d35bd216ed78ffb6e711b889cda0346ce9bca2e6e9e46b15980456c43a659f7c7e3e6e9e16e0de93100734d432ca57c27d3bde66b2791ccc02c85c43e8652f13258bd412174ea931ded39a9830e593761d91c56f637f0e1568ea66a15d9f0eba504ab3eb205fda13d1068e7692f8d00a6527788c134204d9c0d3eda07c2d92d2fb48887b6f71c6de43a923bbcaa9e3ac5bd82ac0ec7aebfab34cd071", 0xfb}, {&(0x7f0000000900)="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", 0x386}], 0x2}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000000)={0x28, r1, 0x62c21a4ade68aba1, 0x0, 0x25dfdbf9, {{0x32}, {@val={0x8, 0x1, 0x60}, @void, @val={0xc, 0x99, {0x7, 0xa}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) r3 = syz_io_uring_setup(0x70c6, &(0x7f0000000080)={0x0, 0x0, 0x8000, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x81, 0x20203843, 0x3, [0x2], [0x800, 0x9], [0x0, 0x0, 0x4]}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x4d10, 0x2, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000001050000000000fd003400"], 0x0, 0x2a, 0x0, 0x1}, 0x20) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x33, 0x2, @tid=0xffffffffffffffff}) socket$inet(0x2, 0xa, 0x0) socket(0x2d, 0x2, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x3, 0x29, 0x4, 0x2, 0xcc7, 0x8, 0x8d, 0x8, 0xe, 0x2, 0x1, 0x1, 0x1, 0x8026, 0x80, 0x2, 0x1a449, 0x9, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8, 0x4]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket(0x1d, 0x7, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000d80)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x1, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0xf, 0x8, [@multicast2, @multicast2, @loopback]}, @timestamp={0x44, 0x4, 0xef, 0x0, 0x4}]}}, {{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xffff}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYRES64], 0x428}, 0x1, 0x0, 0x0, 0x80}, 0x0) 48.123281882s ago: executing program 3 (id=2140): ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'xfrm0\x00'}}) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000040), 0x54000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_USERDATA={0x6, 0xd, 0x1, 0x0, "be2f"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x8) sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'xfrm0\x00'}}) (async) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000040), 0x54000, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_USERDATA={0x6, 0xd, 0x1, 0x0, "be2f"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) (async) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) (async) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) (async) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x8) (async) sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) (async) 48.062912696s ago: executing program 3 (id=2142): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) mlock(&(0x7f0000822000/0x14000)=nil, 0x14000) (async) r3 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000734136088dee1edb23610000000109022d0101100000000904000003fe03010005050203b547680000fcffff0900"/59], 0x0) (async) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x76, 0x2, 0x3, "4c4d75fffbbe7ba9f03bec81c6ea4d9838f497b6e85888fc5eae1105347c1358", 0x38414261}) (async) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0xc0884123, &(0x7f0000000080)) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r5, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r5, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 32) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './file0'}, 0xb) (async) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r6, &(0x7f0000000340)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) (async, rerun: 32) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r8, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) (async) r10 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r10, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0x5c) setsockopt$SO_J1939_FILTER(r10, 0x6b, 0x1, &(0x7f0000000380)=[{0x3, 0x1, {0x2, 0xf0, 0x4}, {0x0, 0xf0, 0x4}, 0x0, 0x1}, {0x2, 0x3, {0x0, 0x1, 0x4}, {0x0, 0x0, 0x7}, 0x2, 0xfc}, {0x3, 0x2, {0x0, 0xf0, 0x4}, {0x1, 0xff, 0x1}, 0xfd, 0x1}, {0x3, 0x2, {0x2, 0x1, 0x4}, {}, 0xfe, 0xff}, {0x3, 0x1, {0x2, 0x1, 0x3}, {0x2, 0x0, 0x3}, 0xfd, 0x2}], 0xa0) (async) ioctl$sock_SIOCDELRT(r9, 0x890c, &(0x7f0000000180)={0x0, @ax25={0x3, @null, 0x1}, @rc={0x1f, @none, 0x3}, @l2tp={0x2, 0x0, @local, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)='dvmrp0\x00', 0x1159c00000000000, 0x1000, 0x1}) 33.004996175s ago: executing program 35 (id=2142): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) mlock(&(0x7f0000822000/0x14000)=nil, 0x14000) (async) r3 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000734136088dee1edb23610000000109022d0101100000000904000003fe03010005050203b547680000fcffff0900"/59], 0x0) (async) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x76, 0x2, 0x3, "4c4d75fffbbe7ba9f03bec81c6ea4d9838f497b6e85888fc5eae1105347c1358", 0x38414261}) (async) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0xc0884123, &(0x7f0000000080)) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r5, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r5, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 32) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './file0'}, 0xb) (async) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r6, &(0x7f0000000340)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) (async, rerun: 32) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r8, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) (async) r10 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r10, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0x5c) setsockopt$SO_J1939_FILTER(r10, 0x6b, 0x1, &(0x7f0000000380)=[{0x3, 0x1, {0x2, 0xf0, 0x4}, {0x0, 0xf0, 0x4}, 0x0, 0x1}, {0x2, 0x3, {0x0, 0x1, 0x4}, {0x0, 0x0, 0x7}, 0x2, 0xfc}, {0x3, 0x2, {0x0, 0xf0, 0x4}, {0x1, 0xff, 0x1}, 0xfd, 0x1}, {0x3, 0x2, {0x2, 0x1, 0x4}, {}, 0xfe, 0xff}, {0x3, 0x1, {0x2, 0x1, 0x3}, {0x2, 0x0, 0x3}, 0xfd, 0x2}], 0xa0) (async) ioctl$sock_SIOCDELRT(r9, 0x890c, &(0x7f0000000180)={0x0, @ax25={0x3, @null, 0x1}, @rc={0x1f, @none, 0x3}, @l2tp={0x2, 0x0, @local, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)='dvmrp0\x00', 0x1159c00000000000, 0x1000, 0x1}) 2.683450771s ago: executing program 7 (id=2718): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) pwrite64(r2, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000040a010200000000007a446e73000008"], 0x14}, 0x1, 0x0, 0x0, 0x24040800}, 0x8080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x104}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0x5d22f5f6fd534cd7}, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) fcntl$setsig(r4, 0xa, 0x21) write$6lowpan_enable(r4, &(0x7f0000000100)='0', 0x1) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbf9, 0x40000000}, 0xc) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x8, 0x7fffffff, 0x0, 0x81, 0x9, 0x0, 0x2004c8, 0x2, 0x0, 0x0, 0x7, 0x2, 0x5, 0x4, 0xfe54, 0xffffffffffffffff], 0x106000}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) 2.682619023s ago: executing program 5 (id=2719): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0xe) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000000300)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x7, 0x3, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f00000004c0)={r7, 0x1, &(0x7f0000000400)=[0x7], &(0x7f0000000440)=[0xe, 0x402, 0x1], &(0x7f0000000480)=[0x7]}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000800)=@can_delroute={0x7c, 0x19, 0x100, 0x70bd29, 0x25dfdbff, {0x1d, 0x1, 0x6}, [@CGW_MOD_SET={0x15, 0x4, {{{0x3}, 0x3, 0x2, 0x0, 0x0, "e52a108a31f4223f"}, 0x7}}, @CGW_LIM_HOPS={0x5, 0xd, 0xb3}, @CGW_MOD_AND={0x15, 0x1, {{{0x1, 0x1, 0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "3482731670c48776"}, 0x4}}, @CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "82de9327f31bb5b8"}, 0xa}}, @CGW_FILTER={0xc, 0xb, {{0x1, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}}, @CGW_FILTER={0xc, 0xb, {{0x1, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008010}, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1[\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\x00\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0\xber\xa6\xec\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\x13]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\xcd\xf0\xad\x97uh\xb2\xb8\x17S~R\x19\xa9\xc3x\xb8l\xed\xbdz#6\x9f\x94\xba[xC\xed\x12}f\x0f\xc5', 0x3) fallocate(r10, 0x0, 0x0, 0x400001) close(0x3) getsockname$packet(r1, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.592850749s ago: executing program 7 (id=2720): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x8, 0x400000}, {0x350}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x4, 0x0, 0xb}) r2 = fsmount(r0, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x850) (async) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x0) (async) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$qrtrtun(r6, &(0x7f0000000340)="66bb0b760dc0f4ff", 0x8) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)={0x2c, r10, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) (async) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x140, r10, 0x100, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x120, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "36caca92b799634643dd2de6dc87b9e60cd60778fe33521d9401e3e96e96c23b3491"}}, @TIPC_NLA_NODE_ID={0xb2, 0x3, "44f54c5f2f904d6555a58eaef8e1e1d2ed78ce13151883b2da7c18da9e905959cfbcb8bf050c4b26c60bd1b62379a647d6cbfaa46452db58f47b792a99d1e62156d6f3c8fbe32631c2225de406f49d40d60aa3f0629bedbd72a43a954cc0ea25c01928fbad441a410f7fc13abfa1a39cc9f11e80887e286efb3f635a97ce93c059287631772808393f2462682749ba54d9a975a57dee9b430e0a8a71a9496359054e1a39ad235c8cd27560ddeb03"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x40030}, 0x0) (async) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x400102, 0x0) (async) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x310, 0x11, 0x148, 0x310, 0x0, 0x410, 0x2a8, 0x2a8, 0x410, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x0, 0x8, 0x1}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'nr0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x0, 0x44}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x508) (async) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r11, 0x3ba0, &(0x7f0000000200)={0x48, 0x4, 0x0, 0x0, 0xa8, &(0x7f0000000140)="bf1025176447e07455a3f530a65699aded8853e4815ddac3be0d0b11e30c6f8ea7520fe1555a3f9a660abc4a258c43c6811d78452c1d9acf1dc8d348d10dacc3fc03e05b40d49563fba30bf01ae908fba8f2422b6729ab9a5eea2f1ac0a65fe0a41477c69bdeb63c26db994002e9b483c57a89682d48628c82ae2f50d0e8cb40a38dcd5eb5dd4a4924810269942c5e5caed8f5a49e812aac4a3ccd158bf56f55fec536513eed75c5", 0x401}) 2.532969504s ago: executing program 7 (id=2721): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000)) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x8, 0x41}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) unshare(0xc0060b80) r1 = semget(0x1, 0x4, 0x39c) semop(r1, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r1, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}, {0x2, 0x100, 0x800}], 0x2) r2 = semget$private(0x0, 0x7, 0x0) semctl$SETVAL(r2, 0x3, 0x10, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x89, &(0x7f0000000080), &(0x7f0000000140)=0x4) semctl$SETALL(r2, 0x0, 0x11, &(0x7f00000000c0)) unshare(0x40400) 2.416136036s ago: executing program 5 (id=2722): r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000300)={'bond0\x00', @ifru_names='veth0_vlan\x00'}) 2.349736578s ago: executing program 5 (id=2723): r0 = socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x407, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) io_uring_enter(r1, 0x77e0, 0x4109, 0x10, &(0x7f0000000080)={[0x3]}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="800000001000370429bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="890c566f040000000000600012800b0001006970366772650000500002800400120014000600fc01000000000000000000000000000014000700fc00000000000000000000000000000006e81a0d04f90ca6000f0008000000050008000300000005000800060000"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000000c0)={0x5, 0x8, 0x3, 0x0, 0x0, [{{r2}}, {{r0}}, {{r2}, 0x3d6f}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x2, 0x1}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x20) write$UHID_INPUT(r2, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) 1.619291489s ago: executing program 7 (id=2728): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='xfs\x00', 0x3020010, &(0x7f0000000140)='e>\xa2\x00\xa9\xf7}\f') setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000003c0)={0x9, {{0x2, 0x4e22, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000140)={0x24, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) 1.446778144s ago: executing program 5 (id=2732): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 927.840426ms ago: executing program 4 (id=2743): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) syz_emit_ethernet(0x12d, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60e20f0000f71101fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e204e22"], 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000300)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020800000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000038000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000400048008000700"], 0xc0}}, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd27, 0x0, {}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000340)={@dev={0xac, 0x14, 0x14, 0x36}, @multicast1, 0x1, 0xa, [@multicast2, @private=0xa010102, @multicast1, @private=0xa010102, @private=0xa010101, @loopback, @rand_addr=0x64010102, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, 0x38) sendmmsg$sock(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)='S', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000001c00)="bc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000004180)='\x00', 0x1}], 0x1}}], 0x3, 0x0) shutdown(r1, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@RTM_GETMDB={0x18, 0x56, 0x2, 0x70bd2c, 0x25dfdbfc, {0x7, r5}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 824.718832ms ago: executing program 4 (id=2745): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x207) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000280)={0x8, 0x120, 0xfa00, {0x3, {0xfffffff4, 0x3, "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", 0x2, 0x10, 0x42, 0x0, 0x0, 0x4, 0x88}}}, 0x128) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001280), 0x323182, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x3, &(0x7f0000000300)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0xb, @mcast1, 0x8}, r5}}, 0x48) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000009c0)={r0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='8'], 0x38}}, 0x20000000) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 823.754899ms ago: executing program 4 (id=2746): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x4, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180872"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = fanotify_init(0x8, 0x1000) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x48100) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000000080)={0x9, {0x36, 0x2, 0x400, 0xbb8f}, {0x9, 0x4, 0x8bb4d08f, 0xfdfd}, {0x7ff, 0x8}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="0c8575b292265dff996c53c1e852ef7217dd4f23bc5006bb758535573e8b5de72d486cf1761cc888d7bfb38fea6be02fd82bb30fc5a3ba5bdfaa2386c806051591928fa5010cc3b12d07619723e3cf5734ae8def62674e6648cf958df94781da02", 0x61}, {&(0x7f0000000280)="bd8c9a1d5f8c7e9b25f23ee7293cd30c0ee576aa03865d8474bf4f6964b0b77e015a78608c136dab1bbab45a95ff88ca2686af6955c37b09f72e447a8b2d15e8c354c4190005ac8438cfc7cdae1e6ca40f2d03fd6ead1243c1d9cd3b9b38cbfe1b9e66c806dc636da5eb8bc658ae7e3e6360f0eff5e3007b1662d8785fcc81ff72396f4ec1dcd2ffe104326a625d8947b052828eee3db79135c4e7d24033021ff553e04ecec8bff5ca84c0fc10e5d0db35fc9fe8ae9548d53c3071f2b733fdcfbc38df03054528de53f86054fcc6b91e1c6ab94cf45a28610f384291a15a1446a2f2ea4225133b357298e79923e46dfa06a66018c8c034", 0xf7}, {&(0x7f0000000380)="bc82f924bb71d413453e1049425ef1fe8aa4a1b5d0c6d975a65579b8097a0c52f5a831db1c8e88b94c3428da859a5d9369acf3b45584b513a4765c1464563a4dcbe20661af0ada93bb684a3fd27d72261bc6ab0a851dbbfb0bc41c58d34081abea5b8ca52252f060e85dbb1668227cb356e51dc18f20346cc4f580137abdee53ea50f090850749dad3", 0x89}], 0x3, 0xa) mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff) mount$nfs(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x0, &(0x7f0000001cc0)={[{'lock'}]}) open_tree(r3, &(0x7f0000000000)='./file0\x00', 0x1802) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00?'], 0x4c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x4, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180872"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) fanotify_init(0x8, 0x1000) (async) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x48100) (async) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000000080)={0x9, {0x36, 0x2, 0x400, 0xbb8f}, {0x9, 0x4, 0x8bb4d08f, 0xfdfd}, {0x7ff, 0x8}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) (async) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="0c8575b292265dff996c53c1e852ef7217dd4f23bc5006bb758535573e8b5de72d486cf1761cc888d7bfb38fea6be02fd82bb30fc5a3ba5bdfaa2386c806051591928fa5010cc3b12d07619723e3cf5734ae8def62674e6648cf958df94781da02", 0x61}, {&(0x7f0000000280)="bd8c9a1d5f8c7e9b25f23ee7293cd30c0ee576aa03865d8474bf4f6964b0b77e015a78608c136dab1bbab45a95ff88ca2686af6955c37b09f72e447a8b2d15e8c354c4190005ac8438cfc7cdae1e6ca40f2d03fd6ead1243c1d9cd3b9b38cbfe1b9e66c806dc636da5eb8bc658ae7e3e6360f0eff5e3007b1662d8785fcc81ff72396f4ec1dcd2ffe104326a625d8947b052828eee3db79135c4e7d24033021ff553e04ecec8bff5ca84c0fc10e5d0db35fc9fe8ae9548d53c3071f2b733fdcfbc38df03054528de53f86054fcc6b91e1c6ab94cf45a28610f384291a15a1446a2f2ea4225133b357298e79923e46dfa06a66018c8c034", 0xf7}, {&(0x7f0000000380)="bc82f924bb71d413453e1049425ef1fe8aa4a1b5d0c6d975a65579b8097a0c52f5a831db1c8e88b94c3428da859a5d9369acf3b45584b513a4765c1464563a4dcbe20661af0ada93bb684a3fd27d72261bc6ab0a851dbbfb0bc41c58d34081abea5b8ca52252f060e85dbb1668227cb356e51dc18f20346cc4f580137abdee53ea50f090850749dad3", 0x89}], 0x3, 0xa) (async) mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff) (async) mount$nfs(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x0, &(0x7f0000001cc0)={[{'lock'}]}) (async) open_tree(r3, &(0x7f0000000000)='./file0\x00', 0x1802) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00?'], 0x4c}}, 0x0) (async) 755.545313ms ago: executing program 7 (id=2747): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, &(0x7f0000000040)) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x24a202) ioctl$NBD_DO_IT(r3, 0xab03) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000000), 0x4) r4 = dup3(r0, r2, 0x0) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40400d5) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x24, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xffffffe0}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4001) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setresuid(0x0, 0xee00, 0x0) r8 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 755.396191ms ago: executing program 4 (id=2748): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0xc8) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xfffffffffffffe7a, 0x0, 0x1, 0x80000000}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$uac1(0x4, 0xa5, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40045506, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c289", 0x16}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790", 0x3a}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) capset(&(0x7f00000006c0)={0x20080522}, &(0x7f0000000080)={0x200000, 0x41200003, 0x2, 0x6, 0x2040007, 0x9}) mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 752.252456ms ago: executing program 6 (id=2749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x80, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x20008050) sendto$packet(r3, &(0x7f0000000300)="3cac4bd5bb92441d383b28540e72910a4e1897287a0293d22c73f059329f21404d52e97683616803b49b45c6c589669582b5c54e267fa372649fe3d232329fce3a37e2ba224b451bc0b627875fab7b969e22e812890e7f3fbdf9572e67076b410ebf46343db088e62972acf78a73306fb62df01766a8e21ecb4537a9c3df6df77d432e5a72780c00e0e68b94e29818efd8a85933d7e24c34fbe15a2cdaeadd3dc10759e4900eea53a9aeee531be25d41f490d7ed41dfaa79b55d63caefb0df57634828efe1de551bd52b2475", 0xcc, 0x80, &(0x7f0000000400)={0x11, 0x7, r7, 0x1, 0x1, 0x6, @local}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x140, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendto$inet(r2, &(0x7f0000000080)="96170ecb709ec66ff52a6b666663ccb8e47d8cdf508c806e55470b15a63c0dca45a1e1860b26ac7a8cf371e5d5032000e7d4c101b325822aa145ee7900b893b0bdfceb4b419cc6841c9eabfc1ef9b198424ecebdc45e2e3dad3d23a525f7a1da7983541c963ba952705612b1fb4920691f297489e29aa4a01764471a7cf5e8", 0x7f, 0x20000000, &(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r8, 0x29, 0x2d, &(0x7f0000000bc0)={0x9, {{0xa, 0x4e22, 0x6, @mcast1}}}, 0x88) timer_create(0x6, &(0x7f0000000680)={0x0, 0x15, 0x4, @thr={&(0x7f0000000440)="cb32bc36f053f0262999574e676d77fc811427a2f297932e7826718deff571a649213ae965310e60133973aac8c8b6fdb968d9cbd039a1ded0950a4fc94f68533acc1c7b726b809d9347db5a7d3d18916b1764260185a0505d9045debc191d65490a97f3196d25c550c1765806663c75b0572a01e7d8c06384415013e845a43e4000ffd513df918ac0757c33b2e0e119550f9bd47acc8e8f110e3745b4147d673d0ad8911e2c00"/178, &(0x7f0000000500)="d601e291e9556e1cb599d880ffe9f35511124c887c817754f014859959c2d6bb049069cd83158428b59dfd10b123dd112f7b9b45b0c46409ce8230ae05fb2b1f16fabc367396a4396144960f3d4dc967eb4707e9393dac9227245e62240b4f07000000000000009c20ce709917026a32ef791b7724bf02aa4f69f60cd02e7d9fc61be7d34951d9f69e5d37074a2c7c6b1538e3c7be0d8099b9cc9484ab7269ec2b6815f96481c8303c2396be339e1a9eaffbcebb071722880ec161998f3cc90f04be9db88704b0f962cd03446eac9d6668a7e5c83533c64d5ef047abb1cab126d257b0c4cae20cb56a6ddf9088"}}, &(0x7f0000000900)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000700)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x74}}, 0x0) getsockopt$sock_int(r2, 0x1, 0x2f, 0x0, &(0x7f0000000040)=0x700) r10 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x10010, r10, 0x0) 624.429926ms ago: executing program 6 (id=2750): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8981f23689eb65be16f4264404ead3486d8a823382092e64c0800d8de6d01309d6a7e6c1c52167", 0x27) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r1, 0x2c8ad000) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000", 0x20) 622.979024ms ago: executing program 7 (id=2751): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa402, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x79af, 0x0, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r5, 0x0, 0x0, 0x4}, 0x20) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x5, 0x0, 0x386561e9, 0x4000000}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e00001800ee0800000000000000000500171026417d054c321f3b"], 0x48}}, 0x0) 622.532431ms ago: executing program 6 (id=2752): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0xffffffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="4c0300002e00010025bd70000000000004001980380311803403cf802f"], 0x34c}], 0x1, 0x0, 0x0, 0x84}, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000080)={'geneve0\x00', {0x2, 0x4e22, @remote}}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) flistxattr(r1, &(0x7f0000000040)=""/22, 0x16) r3 = syz_pidfd_open(r2, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xff05, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400000000fcdbdf2500000000", @ANYRES32=r1, @ANYRES64=r1, @ANYBLOB="0a675c47280ca6411f34406249a790d408e4f23c898de5738fa083a70d7619b1a9cc8a6fea9f7211e6143b468770a7"], 0x3c}, 0x1, 0x0, 0x0, 0xfb8d14993e114efa}, 0x8080) 523.896048ms ago: executing program 6 (id=2753): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newchain={0x24, 0x64, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffe0, 0xfff3}, {0x6, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004000) socket$netlink(0x10, 0x3, 0x7) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 523.604974ms ago: executing program 6 (id=2754): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x207) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000280)={0x8, 0x120, 0xfa00, {0x3, {0xfffffff4, 0x3, "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", 0x2, 0x10, 0x42, 0x0, 0x0, 0x4, 0x88}}}, 0x128) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001280), 0x323182, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x3, &(0x7f0000000300)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0xb, @mcast1, 0x8}, r5}}, 0x48) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000009c0)={r0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='8'], 0x38}}, 0x20000000) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 464.487147ms ago: executing program 6 (id=2755): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r4, 0xffffffffffffffff}) poll(&(0x7f0000000680)=[{r5, 0x8}], 0x1, 0x8001) close_range(r0, 0xffffffffffffffff, 0x0) 313.726491ms ago: executing program 5 (id=2756): close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x5) r2 = socket(0x10, 0x803, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000280), 0x10040, 0x0) ioctl$CDROMREADALL(r3, 0x5318, &(0x7f0000000b40)) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000100200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x90, 0x3, 0xc, 0x401}, &(0x7f00000001c0)=0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r9, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r11, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xb, @media='eth\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x14}, 0x80) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={r8, 0x16a}, 0x8) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000002c0)) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01"], 0x3c}}, 0x0) 202.174461ms ago: executing program 5 (id=2757): sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@canfd={{}, 0xee, 0x0, 0x0, 0x0, "bc27adc50d03fb36a26d1d33610708eb844846979c3e552e4f42636ec483561f986e3e2a5455252a03b32ffd44fd8a40b0353a4025411e0620ec9757810556d2"}, 0x48}, 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000300), 0x3, 0x240080) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000ac0)=""/4096) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unshare(0x48020200) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0xfffffffffffffe49) socket$packet(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x181, 0xfffffffffffffd53, &(0x7f00000006c0)="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", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa0dfb9f5d586839f53791a30180c2000002080046f400280067000009219078ac141442ac1414aa8903bd004e214e220431907880180f8f01fffb45"], 0x0) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x8, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, r12, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3, r9}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x80c4) ioctl$TIOCGPTPEER(r7, 0x40480923, 0x200000000005) ioctl$TIOCGPTPEER(r6, 0x40140921, 0x200000000005) 2.584814ms ago: executing program 4 (id=2758): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) (async) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'ip6erspan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x5, 0x4}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xffffffffffffffe9) syz_io_uring_setup(0x507d, &(0x7f0000000480)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}) r4 = socket$netlink(0x10, 0x3, 0x14) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_SHUTDOWN={0x22, 0x11, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) r5 = accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r8], 0x4c}}, 0x0) (async) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback, 0x3}, 0x1c) (async) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 0s ago: executing program 4 (id=2759): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20800}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xec7}]}, 0x28}}, 0x0) r2 = fanotify_init(0x40, 0x800) bind$ax25(r0, &(0x7f0000000140)={{0x3, @default, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @bcast, @bcast, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2f}, "eb4ac606f23797e9601ac3869d4d085e2c06b0c5dbdc75ff2e50951838f5718c7558a940ed751f5908af69b12fb5cd"}, 0x33) poll(&(0x7f0000003500)=[{r2, 0x21}], 0x1, 0x8) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x3}}}}, 0xf) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000000080)={0x7fffffffffffffff, 0x6, 0x9, 0x9, 0x4, 0x20}) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) syz_init_net_socket$ax25(0x3, 0x2, 0xcd) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20800}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xec7}]}, 0x28}}, 0x0) (async) fanotify_init(0x40, 0x800) (async) bind$ax25(r0, &(0x7f0000000140)={{0x3, @default, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @bcast, @bcast, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2f}, "eb4ac606f23797e9601ac3869d4d085e2c06b0c5dbdc75ff2e50951838f5718c7558a940ed751f5908af69b12fb5cd"}, 0x33) (async) poll(&(0x7f0000003500)=[{r2, 0x21}], 0x1, 0x8) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x3}}}}, 0xf) (async) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000000080)={0x7fffffffffffffff, 0x6, 0x9, 0x9, 0x4, 0x20}) (async) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) (async) kernel console output (not intermixed with test programs): f, cluster identity 4711 [ 207.624366][T15993] tipc: New replicast peer: 255.255.255.255 [ 207.626687][T15993] tipc: Enabled bearer , priority 10 [ 207.630350][T15997] bridge0: port 1(team0) entered blocking state [ 207.633838][T15997] bridge0: port 1(team0) entered disabled state [ 207.636685][T15997] team0: entered allmulticast mode [ 207.639617][T15997] team_slave_0: entered allmulticast mode [ 207.642103][T15997] team_slave_1: entered allmulticast mode [ 207.645054][T15997] team0: entered promiscuous mode [ 207.646761][T15997] team_slave_0: entered promiscuous mode [ 207.649656][T15997] team_slave_1: entered promiscuous mode [ 207.654857][ T40] audit: type=1400 audit(1771376809.446:951): avc: denied { wake_alarm } for pid=15995 comm="syz.4.1799" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 207.661714][T15993] tipc: Disabling bearer [ 208.035467][T16016] program syz.3.1804 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.251460][T16020] usb 1-1: USB disconnect, device number 2 [ 208.511900][T16042] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 208.515665][T16042] overlayfs: missing 'lowerdir' [ 208.530076][T16042] devtmpfs: Cannot change global quota limit on remount [ 208.566356][T16078] netlink: 'syz.4.1813': attribute type 1 has an invalid length. [ 208.623237][T16078] bond7: (slave bridge4): Enslaving as a backup interface with an up link [ 208.636100][ T9424] net_ratelimit: 256 callbacks suppressed [ 208.636117][ T9424] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 208.640810][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.648426][T16078] 8021q: adding VLAN 0 to HW filter on device bond7 [ 208.710832][T16156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.714279][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.746383][T16162] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 208.748572][T16162] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 208.752649][T16162] vhci_hcd vhci_hcd.0: Device attached [ 208.758701][T16168] vhci_hcd: cannot find a urb of seqnum 5 max seqnum 0 [ 208.760712][ T9427] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 208.765614][ T9427] vhci_hcd vhci_hcd.3: stop threads [ 208.775194][ T9427] vhci_hcd vhci_hcd.3: release socket [ 208.777010][ T9427] vhci_hcd vhci_hcd.3: disconnect device [ 208.793650][T16167] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.909902][T16167] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.945180][T16184] dns_resolver: Unsupported server list version (0) [ 208.973997][T16167] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.024742][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 209.024754][ T40] audit: type=1400 audit(1771376810.816:955): avc: denied { map } for pid=16191 comm="syz.4.1823" path="socket:[49344]" dev="sockfs" ino=49344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 209.099194][ T40] audit: type=1400 audit(1771376810.896:956): avc: denied { lock } for pid=16200 comm="syz.4.1825" path="socket:[46985]" dev="sockfs" ino=46985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 209.131823][T16203] netlink: 'syz.4.1826': attribute type 1 has an invalid length. [ 209.164015][ T1151] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.175471][T16208] tipc: Enabling of bearer rejected, failed to enable media [ 209.179942][ T1151] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.187869][ T1151] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.195395][ T1151] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.252284][T16219] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 209.257083][T16219] exFAT-fs (nullb0): invalid boot record signature [ 209.259915][T16219] exFAT-fs (nullb0): failed to read boot sector [ 209.262530][T16219] exFAT-fs (nullb0): failed to recognize exfat type [ 209.276960][T16221] __nla_validate_parse: 8 callbacks suppressed [ 209.276977][T16221] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1829'. [ 209.281102][T16222] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1829'. [ 209.398788][T16237] fuse: Unknown parameter 'nd' [ 209.408582][T16237] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 209.412668][T16235] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 209.416201][T16237] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1833'. [ 209.425091][T16237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1833'. [ 209.443643][T16235] netlink: 'syz.3.1830': attribute type 10 has an invalid length. [ 209.464136][T16235] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 209.518657][T16235] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 209.691505][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.741710][T16277] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1840'. [ 209.856675][T16291] Cannot find add_set index 1 as target [ 209.907605][T16290] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 209.956949][ T40] audit: type=1400 audit(1771376811.746:957): avc: denied { setopt } for pid=16293 comm="syz.5.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 209.964681][ T40] audit: type=1400 audit(1771376811.756:958): avc: denied { mounton } for pid=16293 comm="syz.5.1844" path="mnt:[4026533352]" dev="nsfs" ino=4026533352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 210.053336][T16313] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 210.059821][T16312] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 210.140126][T16312] tmpfs: Bad value for 'mpol' [ 210.142355][T16312] tmpfs: Bad value for 'mpol' [ 210.317349][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.320034][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.292216][T16372] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 211.329218][ T40] audit: type=1400 audit(1771376813.126:959): avc: denied { connect } for pid=16381 comm="syz.5.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 211.472065][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1869'. [ 211.519979][T16395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1870'. [ 211.523161][T16395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1870'. [ 212.020769][T16407] sctp: [Deprecated]: syz.5.1873 (pid 16407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.020769][T16407] Use struct sctp_sack_info instead [ 212.031979][T16407] binder: 16404:16407 ioctl c0306201 2000000003c0 returned -14 [ 212.240642][T16421] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 212.243822][T16423] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 212.607939][T16436] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 212.622976][T16436] geneve2: entered promiscuous mode [ 212.625363][T16436] geneve2: entered allmulticast mode [ 213.061650][T16469] tipc: Enabling of bearer rejected, failed to enable media [ 213.071103][ T40] audit: type=1400 audit(1771376814.866:960): avc: denied { getopt } for pid=16462 comm="syz.4.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 213.849113][ T829] net_ratelimit: 7 callbacks suppressed [ 213.849126][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.890168][T16478] bond8: option downdelay: invalid value (18446744073709551615) [ 213.892713][T16478] bond8: option downdelay: allowed values 0 - 2147483647 [ 213.895955][T16478] bond8 (unregistering): Released all slaves [ 213.993709][T16477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.193577][ T40] audit: type=1400 audit(1771376815.986:961): avc: denied { ioctl } for pid=16567 comm="syz-executor" path="socket:[50315]" dev="sockfs" ino=50315 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 214.194429][ T5939] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.209997][ T5939] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.214169][ T5939] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.219108][ T5939] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.222601][ T5939] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.273122][T16582] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 214.294692][T16590] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 214.388211][T16642] netlink: 'syz.5.1899': attribute type 1 has an invalid length. [ 214.418897][T16642] bond2: (slave bridge3): Enslaving as a backup interface with an up link [ 214.421687][T16567] chnl_net:caif_netlink_parms(): no params data found [ 214.510697][ T40] audit: type=1800 audit(1771376816.306:962): pid=16726 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1901" name="bus" dev="overlay" ino=433 res=0 errno=0 [ 214.519378][T16567] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.522827][T16567] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.525302][T16567] bridge_slave_0: entered allmulticast mode [ 214.539341][T16567] bridge_slave_0: entered promiscuous mode [ 214.558470][T16567] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.562085][T16567] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.565233][T16567] bridge_slave_1: entered allmulticast mode [ 214.568884][T16567] bridge_slave_1: entered promiscuous mode [ 214.603339][T16567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.616746][T16567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.655573][T16567] team0: Port device team_slave_0 added [ 214.661346][T16567] team0: Port device team_slave_1 added [ 214.674420][T16789] fuse: Unknown parameter 'pcr' [ 214.703542][T16567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.705831][T16567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.725384][T16567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.742653][T16567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.745483][T16567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.755298][T16567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.812595][T16567] hsr_slave_0: entered promiscuous mode [ 214.816119][T16567] hsr_slave_1: entered promiscuous mode [ 214.818678][T16567] debugfs: 'hsr0' already exists in 'hsr' [ 214.820680][T16567] Cannot create hsr debugfs directory [ 214.889618][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.011986][T16567] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 215.019682][T16567] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 215.026514][T16567] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 215.034944][T16567] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 215.107876][T16927] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1909'. [ 215.111738][T16927] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1909'. [ 215.127948][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.131182][T16567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.131356][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.141545][T16567] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.153423][ T9419] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.156472][ T9419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.174607][ T9419] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.177090][ T9419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.330261][T16567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.490178][T16567] veth0_vlan: entered promiscuous mode [ 215.496246][T16567] veth1_vlan: entered promiscuous mode [ 215.517988][T16567] veth0_macvtap: entered promiscuous mode [ 215.522189][T16567] veth1_macvtap: entered promiscuous mode [ 215.538247][T16567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.548589][T16567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.558086][ T1151] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.561016][ T1151] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.568790][ T1151] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.571775][ T1151] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.640069][ T9421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.642636][ T9421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.682876][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.686204][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.917626][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.265474][T16990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.269380][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.278479][T16990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.317544][ T5938] Bluetooth: hci6: command tx timeout [ 216.668975][ T40] audit: type=1326 audit(1771376818.466:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17013 comm="syz.5.1925" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34e2b9c139 code=0x0 [ 216.678156][ T40] audit: type=1400 audit(1771376818.466:964): avc: denied { node_bind } for pid=17013 comm="syz.5.1925" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 217.253045][ T40] audit: type=1400 audit(1771376819.046:965): avc: denied { map } for pid=17042 comm="syz.4.1929" path="socket:[49732]" dev="sockfs" ino=49732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 217.336018][ T1334] hid-generic 00A0:0086:0003.0006: unknown main item tag 0x0 [ 217.340175][ T1334] hid-generic 00A0:0086:0003.0006: unknown main item tag 0x0 [ 217.342919][ T1334] hid-generic 00A0:0086:0003.0006: unknown main item tag 0x0 [ 217.345569][ T1334] hid-generic 00A0:0086:0003.0006: unknown main item tag 0x0 [ 217.348325][ T1334] hid-generic 00A0:0086:0003.0006: unknown main item tag 0x0 [ 217.351093][ T1334] hid-generic 00A0:0086:0003.0006: unknown main item tag 0x0 [ 217.353542][ T1334] hid-generic 00A0:0086:0003.0006: unknown main item tag 0x0 [ 217.356021][ T1334] hid-generic 00A0:0086:0003.0006: unknown main item tag 0x0 [ 217.358704][ T1334] hid-generic 00A0:0086:0003.0006: unknown main item tag 0x0 [ 217.361308][ T1334] hid-generic 00A0:0086:0003.0006: unknown main item tag 0x0 [ 217.368868][ T1334] hid-generic 00A0:0086:0003.0006: hidraw0: HID v0.05 Device [syz1] on syz0 [ 217.402876][T17060] pim6reg99999999: entered allmulticast mode [ 217.533182][T17067] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge0 [ 217.777054][ T1457] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 217.791475][T17081] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1938'. [ 217.938736][ T1457] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 217.942159][ T1457] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 217.946404][ T1457] usb 11-1: config 0 interface 0 has no altsetting 0 [ 217.958400][ T1457] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 217.961374][ T1457] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 217.963952][ T1457] usb 11-1: Product: syz [ 217.965297][ T1457] usb 11-1: Manufacturer: syz [ 217.966801][ T1457] usb 11-1: SerialNumber: syz [ 217.970716][ T1457] usb 11-1: config 0 descriptor?? [ 217.977939][ T1457] hub 11-1:0.0: bad descriptor, ignoring hub [ 217.979954][ T1457] hub 11-1:0.0: probe with driver hub failed with error -5 [ 217.983607][ T1457] usb 11-1: selecting invalid altsetting 0 [ 218.067629][T17175] netlink: 'syz.3.1945': attribute type 1 has an invalid length. [ 218.096315][T17175] bond10: (slave bridge3): Enslaving as a backup interface with an up link [ 218.101118][T17175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1945'. [ 218.217446][T17225] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 218.227499][T17225] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1948'. [ 218.397034][ T5938] Bluetooth: hci6: command tx timeout [ 218.567076][ T29] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 218.602791][ T5958] usb 11-1: USB disconnect, device number 2 [ 218.696966][ T29] usb 10-1: device descriptor read/64, error -71 [ 218.747061][ T5958] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 218.909190][ T5958] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 218.911834][ T5958] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 218.915138][ T5958] usb 11-1: config 0 interface 0 has no altsetting 0 [ 218.919261][ T5958] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 218.922112][ T5958] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 218.924759][ T5958] usb 11-1: Product: syz [ 218.926156][ T5958] usb 11-1: Manufacturer: syz [ 218.927970][ T5958] usb 11-1: SerialNumber: syz [ 218.931501][ T5958] usb 11-1: config 0 descriptor?? [ 218.935061][ T5958] hub 11-1:0.0: bad descriptor, ignoring hub [ 218.937307][ T5958] hub 11-1:0.0: probe with driver hub failed with error -5 [ 218.941473][ T5958] usb 11-1: selecting invalid altsetting 0 [ 218.947322][ T29] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 218.960529][T17261] net_ratelimit: 7 callbacks suppressed [ 218.960541][T17261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.966507][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.988424][T17261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.991887][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.000962][T17261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.004162][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.007892][T17261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.011354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.014879][T17261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.018039][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.097300][ T29] usb 10-1: device descriptor read/64, error -71 [ 219.207438][ T29] usb usb10-port1: attempt power cycle [ 219.387315][ T5958] usb 11-1: USB disconnect, device number 3 [ 219.547269][ T29] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 219.568012][ T29] usb 10-1: device descriptor read/8, error -71 [ 219.654572][T17304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1957'. [ 219.807888][ T29] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 219.827453][ T29] usb 10-1: device descriptor read/8, error -71 [ 219.947121][ T29] usb usb10-port1: unable to enumerate USB device [ 219.990521][T17317] netlink: 'syz.4.1961': attribute type 62 has an invalid length. [ 220.296311][ T40] audit: type=1400 audit(1771376822.086:966): avc: denied { connect } for pid=17347 comm="syz.6.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 220.304405][ T40] audit: type=1400 audit(1771376822.086:967): avc: denied { setopt } for pid=17347 comm="syz.6.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 220.390156][T17360] MINIX-fs: unable to read superblock [ 220.459863][T17364] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1972'. [ 220.473512][T17364] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.477898][ T5938] Bluetooth: hci6: command tx timeout [ 220.980803][T17411] netlink: 'syz.4.1976': attribute type 1 has an invalid length. [ 221.002203][T17411] bond8: (slave bridge5): Enslaving as a backup interface with an up link [ 221.006197][T17411] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1976'. [ 221.122889][ T40] audit: type=1400 audit(1771376822.916:968): avc: denied { create } for pid=17449 comm="syz.4.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 221.129502][ T40] audit: type=1400 audit(1771376822.916:969): avc: denied { setopt } for pid=17449 comm="syz.4.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 221.264051][ T7363] Process accounting resumed [ 221.275287][T17463] Process accounting resumed [ 221.332496][T17472] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1983'. [ 221.389594][T17485] netlink: 'syz.3.1985': attribute type 1 has an invalid length. [ 221.410592][T17485] bond11: (slave bridge4): Enslaving as a backup interface with an up link [ 221.414671][T17485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1985'. [ 221.559311][ T1162] hid-generic 0005:00B6:0009.0007: hidraw0: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 221.590889][T17535] fido_id[17535]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 221.697554][ T1457] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 221.737401][T17563] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 221.850587][T17572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1995'. [ 221.854885][T17572] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1995'. [ 221.868054][ T1457] usb 10-1: Using ep0 maxpacket: 8 [ 221.872612][ T1457] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.877110][ T1457] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 221.880700][ T1457] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.898668][ T1457] usb 10-1: config 0 descriptor?? [ 221.921869][T17586] fuse: Bad value for 'fd' [ 221.922995][T17587] : renamed from vlan0 [ 222.033928][T17595] kvm: kvm [17590]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 222.037621][T17595] kvm: kvm [17590]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 222.092544][T17595] kvm_intel: kvm [17590]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 222.108115][T17595] kvm: kvm [17590]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1 [ 222.111385][T17595] kvm: kvm [17590]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1 [ 222.255130][ T1457] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 222.259843][ T1457] usb 10-1: USB disconnect, device number 7 [ 222.297824][T17611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2000'. [ 222.301569][T17611] hsr_slave_0: left promiscuous mode [ 222.303901][T17611] hsr_slave_1: left promiscuous mode [ 222.375045][T17621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2001'. [ 222.386009][T17623] netlink: 'syz.3.2002': attribute type 1 has an invalid length. [ 222.427276][T17661] binder: BC_ACQUIRE_RESULT not supported [ 222.429185][T17661] binder: 17620:17661 ioctl c0306201 2000000003c0 returned -22 [ 222.432484][T17661] netlink: 496 bytes leftover after parsing attributes in process `syz.5.2001'. [ 222.436589][T17623] bond12: (slave bridge5): Enslaving as a backup interface with an up link [ 222.437351][T17661] ufs: You didn't specify the type of your ufs filesystem [ 222.437351][T17661] [ 222.437351][T17661] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 222.437351][T17661] [ 222.437351][T17661] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 222.442274][T17623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2002'. [ 222.495980][T17665] dlm: no local IP address has been set [ 222.499581][T17665] dlm: cannot start dlm midcomms -107 [ 222.505700][T17670] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 222.567419][ T5938] Bluetooth: hci6: command tx timeout [ 222.817100][ T1162] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 222.967014][ T1162] usb 10-1: Using ep0 maxpacket: 8 [ 222.973581][ T1162] usb 10-1: config 1 interface 0 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 222.979406][ T1162] usb 10-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.984900][ T1162] usb 10-1: config 1 interface 0 has no altsetting 0 [ 222.984907][T17706] FAT-fs (sr0): bogus number of reserved sectors [ 222.989958][T17706] FAT-fs (sr0): Can't find a valid FAT filesystem [ 222.991579][ T1162] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 222.997805][ T1162] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.001406][ T1162] usb 10-1: Product: syz [ 223.003189][ T1162] usb 10-1: Manufacturer: syz [ 223.005128][ T1162] usb 10-1: SerialNumber: syz [ 223.010238][T17683] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 223.057692][T17706] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 223.106530][T17710] netlink: 'syz.3.2012': attribute type 1 has an invalid length. [ 223.151879][T17710] bond13: (slave bridge6): Enslaving as a backup interface with an up link [ 223.161733][T17710] 8021q: adding VLAN 0 to HW filter on device bond13 [ 223.213436][T17747] netlink: 'syz.3.2013': attribute type 1 has an invalid length. [ 223.233029][T17747] bond14: (slave bridge7): Enslaving as a backup interface with an up link [ 223.236835][T17747] FAULT_INJECTION: forcing a failure. [ 223.236835][T17747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.241989][T17747] CPU: 1 UID: 0 PID: 17747 Comm: syz.3.2013 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.242027][T17747] Tainted: [L]=SOFTLOCKUP [ 223.242033][T17747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.242043][T17747] Call Trace: [ 223.242049][T17747] [ 223.242056][T17747] dump_stack_lvl+0x100/0x190 [ 223.242114][T17747] should_fail_ex.cold+0x5/0xa [ 223.242137][T17747] _copy_from_user+0x2e/0xd0 [ 223.242172][T17747] copy_msghdr_from_user+0x9f/0x4f0 [ 223.242202][T17747] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 223.242234][T17747] ___sys_sendmsg+0x106/0x1e0 [ 223.242255][T17747] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.242299][T17747] __sys_sendmsg+0x170/0x220 [ 223.242319][T17747] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.242349][T17747] do_syscall_64+0x106/0xf80 [ 223.242369][T17747] ? clear_bhb_loop+0x40/0x90 [ 223.242384][T17747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.242397][T17747] RIP: 0033:0x7f72df59c139 [ 223.242408][T17747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.242421][T17747] RSP: 002b:00007f72e0487028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.242434][T17747] RAX: ffffffffffffffda RBX: 00007f72df815fa0 RCX: 00007f72df59c139 [ 223.242443][T17747] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 223.242450][T17747] RBP: 00007f72e0487090 R08: 0000000000000000 R09: 0000000000000000 [ 223.242458][T17747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.242465][T17747] R13: 00007f72df816038 R14: 00007f72df815fa0 R15: 00007ffe614b9fa8 [ 223.242482][T17747] [ 223.345609][T17683] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.348414][T17683] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.405261][T17683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.412976][T17683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.485076][ T1151] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.488165][ T1151] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.491319][ T1151] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.494654][ T1151] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.587109][ T1162] usb 10-1: USB disconnect, device number 8 [ 223.649775][T17804] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 223.691196][T17811] netlink: 'syz.6.2016': attribute type 1 has an invalid length. [ 224.157323][ C3] net_ratelimit: 2001 callbacks suppressed [ 224.157343][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.239630][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.321686][T17831] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 224.691790][T17861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.694535][T17861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.697895][T17861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.707043][T17860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.709759][T17860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.712329][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.716921][T17859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.720281][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.750731][ T40] audit: type=1400 audit(1771376826.546:970): avc: denied { view } for pid=17864 comm="syz.6.2028" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 224.766768][T17868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17868 comm=syz.4.2029 [ 224.835997][ T1151] Bluetooth: hci7: Frame reassembly failed (-84) [ 224.903801][T17888] set match dimension is over the limit! [ 224.914579][T17888] netlink: 'syz.4.2033': attribute type 18 has an invalid length. [ 225.328612][T17901] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 226.359235][T17924] netlink: 'syz.5.2042': attribute type 1 has an invalid length. [ 226.381465][T17924] __nla_validate_parse: 8 callbacks suppressed [ 226.381483][T17924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2042'. [ 226.412479][ T40] audit: type=1400 audit(1771376828.206:971): avc: denied { connect } for pid=17958 comm="syz.5.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 226.472140][T17966] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 226.554624][T17974] netlink: 'syz.5.2047': attribute type 1 has an invalid length. [ 226.572715][T17974] bond4: (slave bridge4): Enslaving as a backup interface with an up link [ 226.575977][T17974] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2047'. [ 226.580357][T17974] FAULT_INJECTION: forcing a failure. [ 226.580357][T17974] name failslab, interval 1, probability 0, space 0, times 1 [ 226.584937][T17974] CPU: 1 UID: 0 PID: 17974 Comm: syz.5.2047 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.584955][T17974] Tainted: [L]=SOFTLOCKUP [ 226.584959][T17974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.584966][T17974] Call Trace: [ 226.584970][T17974] [ 226.584975][T17974] dump_stack_lvl+0x100/0x190 [ 226.584996][T17974] should_fail_ex.cold+0x5/0xa [ 226.585010][T17974] should_failslab+0xc2/0x120 [ 226.585026][T17974] __kmalloc_cache_noprof+0x7a/0x6f0 [ 226.585037][T17974] ? __hw_addr_add_ex+0x352/0x7e0 [ 226.585048][T17974] ? __queue_work+0x436/0x1150 [ 226.585061][T17974] __hw_addr_add_ex+0x352/0x7e0 [ 226.585074][T17974] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 226.585085][T17974] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 226.585100][T17974] dev_mc_add+0xb6/0x110 [ 226.585113][T17974] bond_open+0x763/0x1070 [ 226.585129][T17974] ? ip6_route_dev_notify+0xe4/0x750 [ 226.585147][T17974] ? __pfx_bond_open+0x10/0x10 [ 226.585160][T17974] ? notifier_call_chain+0x34c/0x420 [ 226.585179][T17974] ? __pfx_bond_open+0x10/0x10 [ 226.585192][T17974] __dev_open+0x3ad/0x960 [ 226.585210][T17974] ? __pfx___dev_open+0x10/0x10 [ 226.585235][T17974] __dev_change_flags+0x558/0x6f0 [ 226.585257][T17974] ? __pfx___dev_change_flags+0x10/0x10 [ 226.585280][T17974] ? validate_linkmsg+0x57c/0xba0 [ 226.585304][T17974] ? prb_read_valid+0x78/0xa0 [ 226.585320][T17974] ? __pfx_validate_linkmsg+0x10/0x10 [ 226.585344][T17974] netif_change_flags+0x8d/0x160 [ 226.585368][T17974] do_setlink.isra.0+0x1abb/0x3e50 [ 226.585397][T17974] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 226.585422][T17974] ? __lock_acquire+0x4a5/0x2630 [ 226.585452][T17974] ? lock_acquire+0x1cf/0x380 [ 226.585480][T17974] ? rcu_is_watching+0x12/0xc0 [ 226.585497][T17974] ? trace_contention_end+0x140/0x180 [ 226.585514][T17974] ? __mutex_lock+0x26a/0x1b90 [ 226.585531][T17974] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 226.585557][T17974] ? rtnl_newlink+0x8bb/0x2380 [ 226.585583][T17974] ? __pfx___mutex_lock+0x10/0x10 [ 226.585600][T17974] ? rcu_is_watching+0x12/0xc0 [ 226.585617][T17974] ? cap_capable+0x107/0x460 [ 226.585654][T17974] rtnl_newlink+0x11bd/0x2380 [ 226.585688][T17974] ? __pfx_rtnl_newlink+0x10/0x10 [ 226.585710][T17974] ? find_held_lock+0x2b/0x80 [ 226.585729][T17974] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 226.585749][T17974] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 226.585770][T17974] ? avc_has_perm_noaudit+0x145/0x3b0 [ 226.585797][T17974] ? __lock_acquire+0x4a5/0x2630 [ 226.585820][T17974] ? stack_trace_save+0x8e/0xc0 [ 226.585852][T17974] ? find_held_lock+0x2b/0x80 [ 226.585871][T17974] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 226.585896][T17974] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 226.585928][T17974] ? __pfx_rtnl_newlink+0x10/0x10 [ 226.585950][T17974] rtnetlink_rcv_msg+0x95e/0xe90 [ 226.585967][T17974] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 226.585986][T17974] ? __lock_acquire+0x4a5/0x2630 [ 226.586005][T17974] netlink_rcv_skb+0x159/0x420 [ 226.586020][T17974] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 226.586045][T17974] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.586067][T17974] ? netlink_deliver_tap+0x1ae/0xcc0 [ 226.586096][T17974] netlink_unicast+0x5aa/0x870 [ 226.586115][T17974] ? __pfx_netlink_unicast+0x10/0x10 [ 226.586141][T17974] netlink_sendmsg+0x8b0/0xda0 [ 226.586160][T17974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.586177][T17974] ? __might_fault+0x60/0x140 [ 226.586205][T17974] ____sys_sendmsg+0xa54/0xc30 [ 226.586226][T17974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.586255][T17974] ___sys_sendmsg+0x190/0x1e0 [ 226.586276][T17974] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.586325][T17974] __sys_sendmsg+0x170/0x220 [ 226.586350][T17974] ? __pfx___sys_sendmsg+0x10/0x10 [ 226.586390][T17974] do_syscall_64+0x106/0xf80 [ 226.586415][T17974] ? clear_bhb_loop+0x40/0x90 [ 226.586437][T17974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.586455][T17974] RIP: 0033:0x7f34e2b9c139 [ 226.586470][T17974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.586486][T17974] RSP: 002b:00007f34e39aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.586502][T17974] RAX: ffffffffffffffda RBX: 00007f34e2e15fa0 RCX: 00007f34e2b9c139 [ 226.586512][T17974] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 226.586521][T17974] RBP: 00007f34e39aa090 R08: 0000000000000000 R09: 0000000000000000 [ 226.586532][T17974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.586541][T17974] R13: 00007f34e2e16038 R14: 00007f34e2e15fa0 R15: 00007ffe5f1288d8 [ 226.586565][T17974] [ 226.594427][T18013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2049'. [ 226.602814][T17974] 8021q: adding VLAN 0 to HW filter on device bond4 [ 226.858630][ T40] audit: type=1400 audit(1771376828.656:972): avc: denied { read } for pid=18021 comm="syz.5.2050" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 226.867509][ T40] audit: type=1400 audit(1771376828.656:973): avc: denied { open } for pid=18021 comm="syz.5.2050" path="/108/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 226.869083][T18029] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 226.877345][ T5938] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 226.877361][ T5939] Bluetooth: hci7: command 0xfc11 tx timeout [ 226.881394][T18029] block device autoloading is deprecated and will be removed. [ 226.891381][ T40] audit: type=1400 audit(1771376828.686:974): avc: denied { ioctl } for pid=18021 comm="syz.5.2050" path="/108/file0/file0" dev="fuse" ino=64 ioctlcmd=0x932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 226.894315][T18022] md: md2 stopped. [ 226.954386][T18044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2055'. [ 226.979694][T18049] F2FS-fs (nbd6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 226.982085][T18049] F2FS-fs (nbd6): Can't find valid F2FS filesystem in 1th superblock [ 226.985190][T18049] F2FS-fs (nbd6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 226.997849][T18049] F2FS-fs (nbd6): Can't find valid F2FS filesystem in 2th superblock [ 227.006671][ T40] audit: type=1400 audit(1771376828.796:975): avc: denied { setopt } for pid=18058 comm="syz.4.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 227.038476][T18067] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 227.156539][T18076] netlink: 'syz.6.2062': attribute type 7 has an invalid length. [ 227.157821][T18072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2061'. [ 227.176733][ T40] audit: type=1800 audit(1771376828.956:976): pid=18076 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.2062" name="file0" dev="tmpfs" ino=155 res=0 errno=0 [ 227.184214][T18072] 8021q: adding VLAN 0 to HW filter on device bond9 [ 227.188583][ T40] audit: type=1804 audit(1771376828.986:977): pid=18076 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.2062" name="/newroot/26/file0" dev="tmpfs" ino=155 res=1 errno=0 [ 227.204812][T18072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2061'. [ 227.212207][T18072] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 227.216705][T18072] bond9: (slave batadv1): Enslaving as an active interface with an up link [ 227.319039][ T40] audit: type=1400 audit(1771376829.116:978): avc: denied { connect } for pid=18126 comm="syz.6.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 227.377744][ T40] audit: type=1400 audit(1771376829.166:979): avc: denied { write } for pid=18126 comm="syz.6.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 227.392218][T18122] netlink: 'syz.4.2066': attribute type 1 has an invalid length. [ 227.462743][T18171] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2066'. [ 227.557007][ T29] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 227.687849][T18195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18195 comm=syz.6.2075 [ 227.699060][ T29] usb 10-1: device descriptor read/64, error -71 [ 227.733434][T18208] netlink: 'syz.6.2078': attribute type 1 has an invalid length. [ 227.889863][T18269] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 227.893934][ T40] audit: type=1400 audit(1771376829.686:980): avc: denied { relabelto } for pid=18267 comm="syz.4.2084" name="404" dev="tmpfs" ino=2157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 227.900224][T18269] ip6gretap1: entered promiscuous mode [ 227.904533][T18269] ip6gretap1: entered allmulticast mode [ 227.943969][T18276] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 227.947379][ T29] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 227.949817][T18283] cgroup: No subsys list or none specified [ 227.954003][T18280] netlink: 'syz.4.2087': attribute type 5 has an invalid length. [ 227.962406][T18280] ip6erspan0: entered promiscuous mode [ 227.994078][T18289] netlink: 'syz.4.2089': attribute type 1 has an invalid length. [ 228.031300][T18289] bond11: (slave bridge8): Enslaving as a backup interface with an up link [ 228.035430][T18289] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2089'. [ 228.039230][T18289] 8021q: adding VLAN 0 to HW filter on device bond11 [ 228.090285][ T29] usb 10-1: device descriptor read/64, error -71 [ 228.197415][ T29] usb usb10-port1: attempt power cycle [ 228.359599][T18354] netlink: 'syz.4.2097': attribute type 10 has an invalid length. [ 228.362336][T18354] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 228.366138][T18354] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 228.371862][T18354] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 228.535279][T18365] dummy0: entered allmulticast mode [ 228.540815][T18365] dummy0: left allmulticast mode [ 228.547450][ T29] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 228.578004][ T29] usb 10-1: device descriptor read/8, error -71 [ 228.641765][T18370] fuse: Unknown parameter 'nd' [ 228.677864][T18372] netlink: 'syz.4.2105': attribute type 1 has an invalid length. [ 228.706678][T18372] bond12: (slave bridge9): Enslaving as a backup interface with an up link [ 228.818300][ T29] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 228.841018][ T29] usb 10-1: device descriptor read/8, error -71 [ 228.881733][T18420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2110'. [ 228.947162][ T29] usb usb10-port1: unable to enumerate USB device [ 229.017124][T18460] netlink: 71 bytes leftover after parsing attributes in process `syz.6.2112'. [ 229.367487][T18481] overlayfs: failed to resolve './bus': -2 [ 229.441473][ T829] net_ratelimit: 13 callbacks suppressed [ 229.441492][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.486492][T18488] netlink: 'syz.3.2119': attribute type 1 has an invalid length. [ 229.514339][T18488] 8021q: adding VLAN 0 to HW filter on device bond16 [ 230.289302][T18529] bridge3: port 1(veth3) entered blocking state [ 230.291770][T18529] bridge3: port 1(veth3) entered disabled state [ 230.294412][T18529] veth3: entered allmulticast mode [ 230.297143][T18529] veth3: entered promiscuous mode [ 230.315223][T18529] vlan2: entered allmulticast mode [ 230.320308][T18529] veth1: entered allmulticast mode [ 230.322738][T18529] bridge3: port 2(vlan2) entered blocking state [ 230.325345][T18529] bridge3: port 2(vlan2) entered disabled state [ 230.329636][T18529] vlan2: entered promiscuous mode [ 230.331622][T18529] veth1: entered promiscuous mode [ 230.343052][T18598] QAT: failed to copy from user cfg_data. [ 230.452776][T18597] delete_channel: no stack [ 230.488872][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.510206][T18629] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 230.976713][T18679] sctp: [Deprecated]: syz.6.2135 (pid 18679) Use of int in max_burst socket option. [ 230.976713][T18679] Use struct sctp_assoc_value instead [ 231.020738][T18684] can: request_module (can-proto-0) failed. [ 231.180843][T18703] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.213254][T18704] bond3: (slave gretap1): making interface the new active one [ 231.219047][T18704] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 231.363357][T18749] geneve2: entered promiscuous mode [ 231.531182][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.599381][ T7363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.603058][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.897917][T18774] validate_nla: 1 callbacks suppressed [ 231.897959][T18774] netlink: 'syz.4.2149': attribute type 1 has an invalid length. [ 231.939912][T18774] bond13: (slave bridge10): Enslaving as a backup interface with an up link [ 231.946509][T18774] __nla_validate_parse: 9 callbacks suppressed [ 231.946525][T18774] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2149'. [ 231.953227][T18774] 8021q: adding VLAN 0 to HW filter on device bond13 [ 231.956907][ T9421] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 232.067646][T18837] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 232.070115][ T9421] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 232.136005][T18850] syzkaller0: entered promiscuous mode [ 232.139278][T18850] syzkaller0: entered allmulticast mode [ 232.568925][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.669817][T18915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2164'. [ 232.676224][T18915] bridge_slave_1: left allmulticast mode [ 232.679971][T18915] bridge_slave_1: left promiscuous mode [ 232.682480][T18915] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.689225][T18858] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 232.694165][T18915] bridge_slave_1: entered allmulticast mode [ 232.698939][T18915] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 232.740157][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 232.740168][ T40] audit: type=1400 audit(1771376834.536:990): avc: denied { setattr } for pid=18922 comm="syz.6.2166" path="socket:[54748]" dev="sockfs" ino=54748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.777489][T18926] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 232.972213][T18960] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2174'. [ 232.976743][T18960] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2174'. [ 232.980371][T18960] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2174'. [ 232.983606][T18960] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2174'. [ 232.986734][T18960] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2174'. [ 232.990093][T18960] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2174'. [ 232.993163][T18960] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2174'. [ 232.996242][T18960] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2174'. [ 233.217120][ T9] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 233.290427][T18977] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 233.357040][ T9] usb 11-1: device descriptor read/64, error -71 [ 233.597829][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.626972][ T9] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 233.756975][ T9] usb 11-1: device descriptor read/64, error -71 [ 233.867083][ T9] usb usb11-port1: attempt power cycle [ 234.207015][ T9] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 234.231478][ T9] usb 11-1: device descriptor read/8, error -71 [ 234.327259][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.477011][ T9] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 234.497970][ T9] usb 11-1: device descriptor read/8, error -71 [ 234.617150][ T9] usb usb11-port1: unable to enumerate USB device [ 234.637314][ T7363] net_ratelimit: 1 callbacks suppressed [ 234.637331][ T7363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.643166][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.646072][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.959811][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.962537][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.969304][T19018] 9p: Bad value for 'debug' [ 234.984868][T19018] ALSA: seq fatal error: cannot create timer (-22) [ 235.422494][T19052] erspan1: entered promiscuous mode [ 235.680951][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.857500][T19074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.860331][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.039893][T19086] dlm: no locking on control device [ 236.071045][T19089] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 236.076037][T19090] netlink: 'syz.6.2207': attribute type 1 has an invalid length. [ 236.100701][T19090] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.413213][ T40] audit: type=1400 audit(1771901126.195:991): avc: denied { read } for pid=19152 comm="syz.6.2213" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 236.421258][ T40] audit: type=1400 audit(1771901126.195:992): avc: denied { open } for pid=19152 comm="syz.6.2213" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 236.668649][ T29] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 236.671829][ T50] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 236.731705][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.799508][ T50] usb 10-1: device descriptor read/64, error -71 [ 236.819508][ T29] usb 11-1: Using ep0 maxpacket: 8 [ 236.822319][ T29] usb 11-1: config 1 interface 0 has no altsetting 0 [ 236.826254][ T29] usb 11-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.40 [ 236.830180][ T29] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.832569][ T29] usb 11-1: Product: 鎷⦩爳뱦䇖ⴥ啴뵢វ修璠韞뢍汞甇䮭侈ℹ碘⦧兯亥嵢≉稽㷦ꪭ掽ﭲ䄔쏍槴솆 [ 236.836854][ T29] usb 11-1: Manufacturer: 䟣⇂뺚쭦眅ꗡჅꦅޙཌꝅ늊鋣磻゚鵱曌鉟觗㝰綌䪒専ɓ냟縘團Ⱖ㤍ᢆ尖꙯⑂純ง큁⟍湡搜뱧㷰ⴠ剑葃⧃穡⚰ꛣ⬙膾 [ 236.842913][ T29] usb 11-1: SerialNumber: 鋛伴諁⌽会ᔟꇔ児웞⬷뚟刅碜鄱㤺⻯㭖䋱谋⍜嫾輸ꛉ뷕㷬뛉嫗糌ﱧ쌍킀咕腷䄟ẏ쐼町﬏趰퓻 [ 237.061797][ T29] usbhid 11-1:1.0: can't add hid device: -71 [ 237.064011][ T29] usbhid 11-1:1.0: probe with driver usbhid failed with error -71 [ 237.067231][ T50] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 237.071756][ T29] usb 11-1: USB disconnect, device number 8 [ 237.202477][ T50] usb 10-1: device descriptor read/64, error -71 [ 237.323651][ T50] usb usb10-port1: attempt power cycle [ 237.666173][ T50] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 237.686756][ T50] usb 10-1: device descriptor read/8, error -71 [ 237.697585][ T7363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.793201][T19173] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 237.880672][ T40] audit: type=1400 audit(1771901127.654:993): avc: denied { create } for pid=19182 comm="syz.6.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 237.889146][ T40] audit: type=1400 audit(1771901127.654:994): avc: denied { ioctl } for pid=19182 comm="syz.6.2217" path="socket:[56613]" dev="sockfs" ino=56613 ioctlcmd=0x4945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 237.914424][T19186] batadv_slave_1: entered promiscuous mode [ 237.920031][T19184] batadv_slave_1: left promiscuous mode [ 237.938391][ T50] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 237.958700][ T50] usb 10-1: device descriptor read/8, error -71 [ 238.082767][ T50] usb usb10-port1: unable to enumerate USB device [ 238.341202][ T7363] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 238.493853][ T7363] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 238.496728][ T7363] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 238.500741][ T7363] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 238.504658][ T7363] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 238.508919][ T7363] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 238.515166][ T7363] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 238.519088][ T7363] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 238.522488][ T7363] usb 11-1: Product: syz [ 238.523998][ T7363] usb 11-1: Manufacturer: syz [ 238.533313][ T7363] cdc_wdm 11-1:1.0: skipping garbage [ 238.535529][ T7363] cdc_wdm 11-1:1.0: skipping garbage [ 238.540032][ T7363] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 238.542898][ T7363] cdc_wdm 11-1:1.0: Unknown control protocol [ 239.239017][ T7363] usb 11-1: USB disconnect, device number 9 [ 239.513004][T19232] __nla_validate_parse: 60 callbacks suppressed [ 239.513023][T19232] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2224'. [ 239.864189][T19245] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2227'. [ 239.877365][ T5958] net_ratelimit: 3 callbacks suppressed [ 239.877378][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.914131][T19248] sg_write: data in/out 3250/14 bytes for SCSI command 0x0-- guessing data in; [ 239.914131][T19248] program syz.6.2229 not setting count and/or reply_len properly [ 239.921443][T19248] ata1.00: invalid cdb length 6 [ 240.124479][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.226044][T19261] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 240.228971][T19261] overlayfs: missing 'lowerdir' [ 240.469699][T19277] netlink: 'syz.5.2235': attribute type 1 has an invalid length. [ 240.540278][T19303] bond5: (slave bridge5): Enslaving as a backup interface with an up link [ 240.548151][T19277] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2235'. [ 240.555867][ T9425] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 240.558106][T19277] 8021q: adding VLAN 0 to HW filter on device bond5 [ 240.668294][ T9425] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 240.760273][ T7363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.762995][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.826247][T19320] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2237'. [ 240.856700][T19322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2238'. [ 240.898238][T19324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2239'. [ 240.899872][ T1162] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 240.924335][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.050926][ T1162] usb 10-1: Using ep0 maxpacket: 32 [ 241.054642][ T1162] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 241.057973][ T1162] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 241.063870][ T1162] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 241.067400][ T1162] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 241.081363][ T1162] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 241.085193][ T1162] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 241.089581][ T1162] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 241.111366][ T1162] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 241.116691][ T1162] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 241.119935][ T1162] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.133718][ T1162] usb 10-1: config 0 descriptor?? [ 241.137994][T19315] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 241.352822][ T1162] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 241.554142][ C2] usblp0: nonzero read bulk status received: -71 [ 241.749367][T19347] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_1, syncid = 2, id = 0 [ 241.753751][ T1457] usb 10-1: USB disconnect, device number 17 [ 241.762098][ T1457] usblp0: removed [ 241.890926][T19361] netlink: 'syz.6.2244': attribute type 1 has an invalid length. [ 241.902891][T19361] 8021q: adding VLAN 0 to HW filter on device bond5 [ 241.920956][T19361] bond5: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 241.924646][T19361] bond5: entered allmulticast mode [ 241.929604][T19361] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2244'. [ 241.939515][T19361] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 241.971308][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.152559][T19417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2250'. [ 242.156476][T19417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19417 comm=syz.4.2250 [ 242.481130][T19429] futex_wake_op: syz.6.2254 tries to shift op by -1; fix this program [ 242.484402][T19429] futex_wake_op: syz.6.2254 tries to shift op by -1; fix this program [ 242.501296][T19429] futex_wake_op: syz.6.2254 tries to shift op by -1; fix this program [ 242.504805][T19429] futex_wake_op: syz.6.2254 tries to shift op by -1; fix this program [ 242.508131][T19429] futex_wake_op: syz.6.2254 tries to shift op by -1; fix this program [ 242.513054][T19429] futex_wake_op: syz.6.2254 tries to shift op by -1; fix this program [ 242.516574][T19429] futex_wake_op: syz.6.2254 tries to shift op by -1; fix this program [ 242.519982][T19429] futex_wake_op: syz.6.2254 tries to shift op by -1; fix this program [ 242.523646][T19429] futex_wake_op: syz.6.2254 tries to shift op by -1; fix this program [ 242.527417][T19429] futex_wake_op: syz.6.2254 tries to shift op by -1; fix this program [ 242.626490][ T40] audit: type=1400 audit(1771901132.359:995): avc: denied { read } for pid=19432 comm="syz.5.2255" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 242.833576][ T829] usb 11-1: new low-speed USB device number 10 using dummy_hcd [ 242.892643][T19448] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 242.899113][T19448] FAULT_INJECTION: forcing a failure. [ 242.899113][T19448] name failslab, interval 1, probability 0, space 0, times 0 [ 242.904423][T19448] CPU: 0 UID: 0 PID: 19448 Comm: syz.5.2257 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.904450][T19448] Tainted: [L]=SOFTLOCKUP [ 242.904455][T19448] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.904466][T19448] Call Trace: [ 242.904471][T19448] [ 242.904478][T19448] dump_stack_lvl+0x100/0x190 [ 242.904508][T19448] should_fail_ex.cold+0x5/0xa [ 242.904527][T19448] ? tomoyo_encode2+0xfb/0x3c0 [ 242.904542][T19448] should_failslab+0xc2/0x120 [ 242.904566][T19448] __kmalloc_noprof+0xe0/0x850 [ 242.904588][T19448] ? d_absolute_path+0x136/0x1b0 [ 242.904615][T19448] tomoyo_encode2+0xfb/0x3c0 [ 242.904636][T19448] tomoyo_encode+0x29/0x50 [ 242.904652][T19448] tomoyo_realpath_from_path+0x18c/0x690 [ 242.904676][T19448] tomoyo_path_number_perm+0x23c/0x580 [ 242.904700][T19448] ? tomoyo_path_number_perm+0x22e/0x580 [ 242.904725][T19448] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 242.904777][T19448] ? find_held_lock+0x2b/0x80 [ 242.904798][T19448] ? __fget_files+0x215/0x3d0 [ 242.904822][T19448] ? hook_file_ioctl_common+0x146/0x410 [ 242.904849][T19448] ? __fget_files+0x21f/0x3d0 [ 242.904878][T19448] security_file_ioctl+0xd3/0x230 [ 242.904907][T19448] __x64_sys_ioctl+0xb7/0x210 [ 242.904932][T19448] do_syscall_64+0x106/0xf80 [ 242.904966][T19448] ? clear_bhb_loop+0x40/0x90 [ 242.904988][T19448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.905005][T19448] RIP: 0033:0x7f34e2b9c139 [ 242.905020][T19448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.905037][T19448] RSP: 002b:00007f34e39aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.905075][T19448] RAX: ffffffffffffffda RBX: 00007f34e2e15fa0 RCX: 00007f34e2b9c139 [ 242.905087][T19448] RDX: 0000200000000280 RSI: 0000000000003b8d RDI: 0000000000000003 [ 242.905098][T19448] RBP: 00007f34e39aa090 R08: 0000000000000000 R09: 0000000000000000 [ 242.905108][T19448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.905117][T19448] R13: 00007f34e2e16038 R14: 00007f34e2e15fa0 R15: 00007ffe5f1288d8 [ 242.905143][T19448] [ 242.905175][T19448] ERROR: Out of memory at tomoyo_realpath_from_path. [ 243.008194][ T829] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 243.012509][ T829] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 243.024879][ T829] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 243.038671][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.044314][ T829] usb 11-1: string descriptor 0 read error: -22 [ 243.047321][ T829] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 243.050947][ T829] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.066443][T19437] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 243.089680][T19458] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 243.189780][T19463] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2260'. [ 243.276614][ T829] cdc_ncm 11-1:1.0: bind() failure [ 243.285207][ T829] cdc_ncm 11-1:1.1: CDC Union missing and no IAD found [ 243.290583][ T829] cdc_ncm 11-1:1.1: bind() failure [ 243.300220][ T829] usb 11-1: USB disconnect, device number 10 [ 243.371828][T19489] overlayfs: failed to clone upperpath [ 243.386628][ T9] libceph: connect (1)[c::]:6789 error -101 [ 243.389164][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 243.457009][T19502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2269'. [ 243.478056][T19502] overlayfs: failed to clone upperpath [ 243.488804][T19491] ceph: No mds server is up or the cluster is laggy [ 243.605935][ T40] audit: type=1400 audit(1771901133.333:996): avc: denied { ioctl } for pid=19509 comm="syz.5.2272" path="socket:[57356]" dev="sockfs" ino=57356 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 243.739588][ T9424] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.744281][ T9424] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.747876][ T9424] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.754492][ T9424] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.833470][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.870205][ T40] audit: type=1400 audit(1771901133.591:997): avc: denied { setattr } for pid=19520 comm="syz.6.2274" name="ALG" dev="sockfs" ino=55947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 243.984821][T19538] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 244.050178][T19550] vlan0: entered allmulticast mode [ 244.051776][T19550] veth0_vlan: entered allmulticast mode [ 244.068151][T19555] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 244.071050][T19555] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 244.082256][ T40] audit: type=1400 audit(1771901133.809:998): avc: denied { write } for pid=19553 comm="syz.6.2283" path="socket:[57018]" dev="sockfs" ino=57018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 244.115105][ T40] audit: type=1400 audit(1771901133.839:999): avc: denied { getopt } for pid=19556 comm="syz.6.2284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 244.245194][ T40] audit: type=1400 audit(1771901133.958:1000): avc: denied { shutdown } for pid=19611 comm="syz.6.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 244.283270][T19615] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 244.514579][T19638] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 244.556069][ T40] audit: type=1400 audit(1771901134.286:1001): avc: denied { write } for pid=19637 comm="syz.6.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 244.566016][ T9] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 244.598786][ T40] audit: type=1400 audit(1771901134.326:1002): avc: denied { getopt } for pid=19645 comm="syz.6.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 244.671773][T19646] dlm: non-version read from control device 0 [ 244.716605][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 244.721471][T19648] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 244.725254][ T9] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 244.737345][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.751901][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 244.754448][ T9] pvrusb2: ********** [ 244.756121][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 244.766862][ T9] pvrusb2: Important functionality might not be entirely working. [ 244.769939][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 244.785081][ T9] pvrusb2: ********** [ 244.890309][T19670] overlayfs: failed to clone upperpath [ 244.900507][ T40] audit: type=1400 audit(1771901134.624:1003): avc: denied { shutdown } for pid=19669 comm="syz.4.2300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 244.910526][T19670] __nla_validate_parse: 5 callbacks suppressed [ 244.910544][T19670] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2300'. [ 244.951285][ T2488] pvrusb2: Invalid write control endpoint [ 245.022390][ T2488] pvrusb2: Invalid write control endpoint [ 245.025119][ T2488] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 245.034757][ T2488] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 245.037479][ T2488] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 245.041784][ T1334] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 245.044584][ T2488] pvrusb2: Device being rendered inoperable [ 245.055566][ T2488] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 245.059573][ T2488] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 245.070132][ T2488] pvrusb2: Attached sub-driver cx25840 [ 245.072842][ T2488] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 245.077003][ T2488] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 245.081640][T19681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2301'. [ 245.122534][ T5958] net_ratelimit: 5 callbacks suppressed [ 245.122550][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.156042][T19622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2291'. [ 245.165908][ T50] usb 10-1: USB disconnect, device number 18 [ 245.190377][ T1334] usb 11-1: Using ep0 maxpacket: 32 [ 245.195576][ T1334] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 245.198920][ T1334] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 245.205020][ T1334] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 245.212305][ T1334] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 245.226579][ T1334] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 245.238261][ T1334] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 245.244311][ T1334] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 245.248501][ T1334] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 245.253971][ T1334] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 245.257643][ T1334] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.271452][ T1334] usb 11-1: config 0 descriptor?? [ 245.274715][T19660] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 245.292896][T19703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.296461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.398084][T19709] geneve1: entered allmulticast mode [ 245.490319][ T1334] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 245.687450][ C3] usblp0: nonzero read bulk status received: -71 [ 245.691189][ T1334] usb 11-1: USB disconnect, device number 11 [ 245.703594][ T1334] usblp0: removed [ 245.772646][T19725] team0: Device gtp1 is of different type [ 245.820882][T19731] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 245.834473][ T40] audit: type=1400 audit(1771901135.548:1004): avc: denied { connect } for pid=19724 comm="syz.5.2307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 246.171338][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.178055][ T9425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.181691][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.192909][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.257577][ T5938] Bluetooth: hci6: unexpected event 0x2f length: 509 > 260 [ 246.336060][ T5939] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 246.346305][ T5939] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 246.350102][ T5939] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 246.354327][ T5939] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 246.358891][ T5939] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 246.404873][T19794] 9p: p9: multiple sources not supported [ 246.431139][T19778] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2311'. [ 246.622088][T19782] chnl_net:caif_netlink_parms(): no params data found [ 246.692125][T19782] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.694999][T19782] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.697853][T19782] bridge_slave_0: entered allmulticast mode [ 246.701191][T19782] bridge_slave_0: entered promiscuous mode [ 246.704332][T19782] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.705329][T19918] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 246.706598][T19782] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.712160][T19782] bridge_slave_1: entered allmulticast mode [ 246.716206][T19782] bridge_slave_1: entered promiscuous mode [ 246.742027][T19782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.748183][T19782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.749116][T19940] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2318'. [ 246.784245][T19940] 8021q: adding VLAN 0 to HW filter on device bond6 [ 246.797745][T19782] team0: Port device team_slave_0 added [ 246.802968][T19782] team0: Port device team_slave_1 added [ 246.828493][T19782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.831791][T19782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.841832][T19782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.847741][T19782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.850454][T19782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.859769][T19782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.891499][ T7363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.894741][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.903788][T19782] hsr_slave_0: entered promiscuous mode [ 246.906306][T19782] hsr_slave_1: entered promiscuous mode [ 246.908663][T19782] debugfs: 'hsr0' already exists in 'hsr' [ 246.910537][T19782] Cannot create hsr debugfs directory [ 247.020132][T19782] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 247.026447][T19782] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 247.033168][T19782] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 247.041398][T19782] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 247.059169][T19782] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.061353][T19782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.063901][T19782] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.066676][T19782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.102021][T19782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.102457][ T9] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 247.111320][ T9426] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.114731][ T9426] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.122647][T19782] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.130244][ T9421] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.132483][ T9421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.138670][ T9426] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.141028][ T9426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.172836][T20128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2322'. [ 247.175806][T20128] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2322'. [ 247.177478][T19782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.201494][ T40] audit: type=1400 audit(1771901136.899:1005): avc: denied { recv } for pid=0 comm="swapper/1" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 247.207198][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.253415][ T9] usb 11-1: Using ep0 maxpacket: 32 [ 247.267519][ T9] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 247.270642][ T9] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 247.274992][ T9] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 247.278654][ T9] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 247.282216][ T9] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 247.287604][ T9] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 247.292469][ T9] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 247.299245][ T9] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 247.305540][ T9] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 247.309317][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.320908][T19782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.321417][ T9] usb 11-1: config 0 descriptor?? [ 247.326987][T20012] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 247.505765][ T50] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 247.537039][ T9] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 247.549156][T19782] veth0_vlan: entered promiscuous mode [ 247.554341][T19782] veth1_vlan: entered promiscuous mode [ 247.574402][T19782] veth0_macvtap: entered promiscuous mode [ 247.580120][T19782] veth1_macvtap: entered promiscuous mode [ 247.589897][T19782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.599171][T19782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.606941][ T9425] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.610455][ T9425] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.614957][ T9425] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.619491][ T9425] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.666854][ T50] usb 10-1: Using ep0 maxpacket: 16 [ 247.672182][ T50] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 247.673265][ T9421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.675719][ T50] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.679462][ T9421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.681795][ T50] usb 10-1: Product: syz [ 247.685773][ T50] usb 10-1: Manufacturer: syz [ 247.688101][ T50] usb 10-1: SerialNumber: syz [ 247.709742][ T9421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.712837][ T9421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.737576][ C0] usblp0: nonzero read bulk status received: -71 [ 247.741043][ T9] usb 11-1: USB disconnect, device number 12 [ 247.749375][ T9] usblp0: removed [ 247.776000][T20196] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2312'. [ 247.841342][T20199] Context (ID=0x1) not attached to queue pair (handle=0xffffffff:0x1) [ 247.910732][T20140] hpfs: hpfs_map_sector(): read error [ 247.960182][T20205] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2324'. [ 247.975864][T20205] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2324'. [ 247.976757][ T9425] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.978935][T20140] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 247.985142][ T9425] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.992895][ T50] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 247.995279][ T9425] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.999363][ T9425] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.002151][ T50] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 248.006431][ T50] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 248.013302][ T50] usb 10-1: media controller created [ 248.021296][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 248.040778][ T50] zl10353_read_register: readreg error (reg=127, ret==-71) [ 248.070005][ T50] dvb_usb_gl861 10-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 248.074603][ T50] usb 10-1: USB disconnect, device number 19 [ 248.411124][ T5938] Bluetooth: hci5: command tx timeout [ 248.694622][T20284] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 248.721411][T20284] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 249.009128][ T5939] Bluetooth: hci0: sending frame failed (-49) [ 249.013304][ T5938] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 249.327256][T20360] syzkaller1: entered promiscuous mode [ 249.329217][T20360] syzkaller1: entered allmulticast mode [ 249.462955][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 249.462967][ T40] audit: type=1400 audit(1771901139.154:1008): avc: denied { bind } for pid=20366 comm="syz.5.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 249.741994][ T40] audit: type=1400 audit(1771901139.432:1009): avc: denied { write } for pid=20388 comm="syz.7.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 249.762820][T20415] autofs4:pid:20415:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 249.768604][T20415] autofs4:pid:20415:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 249.987941][ T40] audit: type=1400 audit(1771901139.671:1010): avc: denied { write } for pid=20425 comm="syz.6.2370" path="socket:[58211]" dev="sockfs" ino=58211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 249.988060][T20426] __nla_validate_parse: 5 callbacks suppressed [ 249.988072][T20426] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2370'. [ 250.145267][T20442] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 250.215572][ T9426] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 250.246408][T20450] bond7: option xmit_hash_policy: invalid value (6) [ 250.247407][T20482] overlayfs: failed to clone upperpath [ 250.251517][T20450] bond7 (unregistering): Released all slaves [ 250.278206][T20520] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2375'. [ 250.280994][T20520] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2375'. [ 250.346300][ T5958] net_ratelimit: 7 callbacks suppressed [ 250.346317][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.428209][T20534] netlink: 'syz.6.2380': attribute type 1 has an invalid length. [ 250.434987][ T9424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.439432][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.461431][T20534] 8021q: adding VLAN 0 to HW filter on device bond7 [ 250.469268][T20534] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20534 comm=syz.6.2380 [ 250.504803][ T5939] Bluetooth: hci5: command tx timeout [ 250.551626][ T40] audit: type=1800 audit(1771901140.237:1011): pid=20572 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2381" name="file0" dev="tmpfs" ino=651 res=0 errno=0 [ 250.784737][T20585] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2382'. [ 251.075518][ T40] audit: type=1400 audit(1771901140.754:1012): avc: denied { name_bind } for pid=20589 comm="syz.6.2384" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 251.403625][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.438841][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.597504][ T5939] Bluetooth: hci5: command tx timeout [ 253.001337][ T7363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.004078][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.162965][T20442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 253.193494][T20602] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 253.237014][T20614] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 253.395008][T20635] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 253.486733][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.645372][T20646] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2394'. [ 253.823414][T20654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48805 sclass=netlink_route_socket pid=20654 comm=syz.7.2396 [ 254.095180][ T40] audit: type=1400 audit(1771901143.756:1013): avc: denied { ioctl } for pid=20665 comm="syz.4.2400" path="socket:[58344]" dev="sockfs" ino=58344 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 254.120770][ T40] audit: type=1400 audit(1771901143.786:1014): avc: denied { map } for pid=20665 comm="syz.4.2400" path="socket:[58344]" dev="sockfs" ino=58344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 254.131060][ T40] audit: type=1400 audit(1771901143.786:1015): avc: denied { read } for pid=20665 comm="syz.4.2400" path="socket:[58344]" dev="sockfs" ino=58344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 254.167521][T20672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2402'. [ 254.379347][T20689] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 254.627096][T20719] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2413'. [ 254.678528][T20723] /dev/nullb0: Can't lookup blockdev [ 254.682142][T20723] /dev/nullb0: Can't lookup blockdev [ 254.689205][ T5939] Bluetooth: hci5: command tx timeout [ 254.831339][T20746] mkiss: ax0: crc mode is auto. [ 254.869873][T20760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.873264][T20760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.877319][T20760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.881175][T20760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.980978][T20793] overlayfs: conflicting options: nfs_export=on,index=off [ 254.991766][ T13] nci: nci_rsp_packet: unknown rsp opcode 0xc02 [ 255.030884][T20804] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2427'. [ 256.160321][T20829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=20829 comm=syz.5.2432 [ 256.805450][T20841] netlink: 276 bytes leftover after parsing attributes in process `syz.5.2435'. [ 257.818429][T20742] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 257.822634][T20817] netlink: 504 bytes leftover after parsing attributes in process `syz.7.2430'. [ 257.831900][T20845] netlink: 'syz.5.2435': attribute type 1 has an invalid length. [ 257.835099][T20845] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2435'. [ 257.850018][T20845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2435'. [ 257.898155][T20859] netlink: 'syz.4.2440': attribute type 5 has an invalid length. [ 258.130872][T20873] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 258.454999][ T40] audit: type=1400 audit(1771901148.091:1016): avc: denied { bind } for pid=20881 comm="syz.6.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 258.463158][ T40] audit: type=1400 audit(1771901148.091:1017): avc: denied { name_bind } for pid=20881 comm="syz.6.2445" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 258.471932][ T40] audit: type=1400 audit(1771901148.091:1018): avc: denied { node_bind } for pid=20881 comm="syz.6.2445" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 258.785924][ T40] audit: type=1400 audit(1771901148.419:1019): avc: denied { write } for pid=20891 comm="syz.7.2448" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 259.015212][T20937] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 259.352540][ T40] audit: type=1400 audit(1771901148.986:1020): avc: denied { name_bind } for pid=20982 comm="syz.5.2463" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 259.748115][ T1162] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 259.765141][T20998] atomic_op ffff88804b1a1998 conn xmit_atomic 0000000000000000 [ 259.802463][ T40] audit: type=1400 audit(1771901149.434:1021): avc: denied { name_bind 0x1000000 } for pid=20999 comm="syz.4.2468" path="socket:[60891]" dev="sockfs" ino=60891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 259.890773][ T1162] usb 10-1: device descriptor read/64, error -71 [ 260.131732][ T1162] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 260.272486][ T1162] usb 10-1: device descriptor read/64, error -71 [ 260.381427][ T1162] usb usb10-port1: attempt power cycle [ 260.714521][T20986] can0: slcan on ttyS3. [ 260.724584][ T1162] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 260.727272][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.743820][ T1162] usb 10-1: device descriptor read/8, error -71 [ 260.994758][ T1162] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 261.006145][T21032] can: request_module (can-proto-0) failed. [ 261.015693][ T1162] usb 10-1: device descriptor read/8, error -71 [ 261.119194][T21040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2478'. [ 261.125434][ T1162] usb usb10-port1: unable to enumerate USB device [ 261.240467][T21047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2481'. [ 261.244036][T21047] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2481'. [ 261.491283][T21060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2487'. [ 261.495493][T21060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2487'. [ 261.861311][ T40] audit: type=1400 audit(1771901151.483:1022): avc: denied { ioctl } for pid=21067 comm="syz.7.2489" path="socket:[60955]" dev="sockfs" ino=60955 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 261.940585][ T40] audit: type=1804 audit(1771901151.553:1023): pid=21073 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.2491" name="file0" dev="ramfs" ino=59118 res=1 errno=0 [ 262.065154][ T40] audit: type=1400 audit(1771901151.682:1024): avc: denied { remount } for pid=21075 comm="syz.7.2492" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 262.450176][T21085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2495'. [ 262.455270][T21085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2495'. [ 262.526299][T21099] xt_recent: Unsupported userspace flags (000000b2) [ 262.528552][T20987] can0 (unregistered): slcan off ttyS3. [ 262.591591][T21108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2499'. [ 262.622338][ T40] audit: type=1326 audit(1771901152.229:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21098 comm="syz.4.2497" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d78d9c139 code=0x0 [ 262.912980][T21126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=21126 comm=syz.7.2503 [ 264.047682][ T40] audit: type=1400 audit(1771901153.652:1026): avc: denied { listen } for pid=21179 comm="syz.7.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 264.054625][ T40] audit: type=1400 audit(1771901153.652:1027): avc: denied { accept } for pid=21179 comm="syz.7.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 264.101094][ T5939] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 264.105671][ T5939] CPU: 2 UID: 0 PID: 5939 Comm: kworker/u33:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.105702][ T5939] Tainted: [L]=SOFTLOCKUP [ 264.105709][ T5939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 264.105723][ T5939] Workqueue: hci5 hci_rx_work [ 264.105758][ T5939] Call Trace: [ 264.105767][ T5939] [ 264.105780][ T5939] dump_stack_lvl+0x100/0x190 [ 264.105809][ T5939] sysfs_warn_dup.cold+0x1c/0x28 [ 264.105832][ T5939] sysfs_create_dir_ns+0x24b/0x2b0 [ 264.105858][ T5939] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 264.105877][ T5939] ? find_held_lock+0x2b/0x80 [ 264.105896][ T5939] ? kobject_add_internal+0x25f/0x930 [ 264.105912][ T5939] ? kobject_add_internal+0x25f/0x930 [ 264.105934][ T5939] ? do_raw_spin_unlock+0x145/0x1e0 [ 264.105957][ T5939] kobject_add_internal+0x2c8/0x930 [ 264.105982][ T5939] kobject_add+0x16a/0x1e0 [ 264.106003][ T5939] ? __pfx_kobject_add+0x10/0x10 [ 264.106022][ T5939] ? class_to_subsys+0x10f/0x150 [ 264.106051][ T5939] ? kobject_put+0xb9/0x640 [ 264.106068][ T5939] ? _raw_spin_unlock+0x28/0x50 [ 264.106101][ T5939] device_add+0x294/0x1950 [ 264.106125][ T5939] ? __pfx_dev_set_name+0x10/0x10 [ 264.106151][ T5939] ? __pfx_device_add+0x10/0x10 [ 264.106174][ T5939] ? mgmt_send_event_skb+0x2fb/0x460 [ 264.106208][ T5939] hci_conn_add_sysfs+0x1a3/0x260 [ 264.106242][ T5939] le_conn_complete_evt+0x11cb/0x1f40 [ 264.106276][ T5939] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 264.106310][ T5939] hci_le_conn_complete_evt+0x23c/0x3a0 [ 264.106337][ T5939] ? skb_pull_data+0x15f/0x1e0 [ 264.106363][ T5939] hci_le_meta_evt+0x34a/0x5f0 [ 264.106392][ T5939] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 264.106422][ T5939] hci_event_packet+0x682/0x11c0 [ 264.106449][ T5939] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 264.106479][ T5939] ? __pfx_hci_event_packet+0x10/0x10 [ 264.106507][ T5939] ? kcov_remote_start+0x374/0x660 [ 264.106532][ T5939] ? lockdep_hardirqs_on+0x78/0x100 [ 264.106595][ T5939] hci_rx_work+0x451/0xfc0 [ 264.106638][ T5939] process_one_work+0x9d7/0x1920 [ 264.106676][ T5939] ? __pfx_process_one_work+0x10/0x10 [ 264.106705][ T5939] ? __pfx_hci_rx_work+0x10/0x10 [ 264.106736][ T5939] worker_thread+0x5da/0xe40 [ 264.106767][ T5939] ? kthread+0x13a/0x450 [ 264.106783][ T5939] ? __pfx_worker_thread+0x10/0x10 [ 264.106803][ T5939] kthread+0x370/0x450 [ 264.106820][ T5939] ? __pfx_kthread+0x10/0x10 [ 264.106839][ T5939] ret_from_fork+0x754/0xd80 [ 264.106861][ T5939] ? __pfx_ret_from_fork+0x10/0x10 [ 264.106881][ T5939] ? __switch_to+0x7b4/0x1120 [ 264.106903][ T5939] ? __pfx_kthread+0x10/0x10 [ 264.106920][ T5939] ret_from_fork_asm+0x1a/0x30 [ 264.106954][ T5939] [ 264.106983][ T5939] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 264.223819][ T5939] Bluetooth: hci5: failed to register connection device [ 264.264855][T21183] netlink: 700 bytes leftover after parsing attributes in process `syz.7.2513'. [ 264.268405][T21183] netlink: 700 bytes leftover after parsing attributes in process `syz.7.2513'. [ 264.300489][ T40] audit: type=1326 audit(1771901153.901:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21185 comm="syz.7.2514" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e21d9c139 code=0x0 [ 264.476291][T21200] netlink: 'syz.6.2517': attribute type 10 has an invalid length. [ 264.479999][T21200] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 264.484964][T21200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.548815][ T40] audit: type=1400 audit(1771901154.149:1029): avc: denied { setattr } for pid=21209 comm="syz.7.2519" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 264.587100][T21212] bond8: option downdelay: invalid value (18446744073709551615) [ 264.590485][T21212] bond8: option downdelay: allowed values 0 - 2147483647 [ 264.597651][T21212] bond8 (unregistering): Released all slaves [ 264.764603][T21281] input: syz1 as /devices/virtual/input/input22 [ 264.890872][T21291] trusted_key: encrypted_key: keyword 'u' not recognized [ 265.013293][T21299] syz.6.2524 (21299): drop_caches: 0 [ 265.092669][T21301] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 265.096001][T21301] block device autoloading is deprecated and will be removed. [ 265.153499][T21311] netlink: 'syz.6.2526': attribute type 8 has an invalid length. [ 265.159574][T21311] bond0: entered promiscuous mode [ 265.161232][T21311] bond_slave_0: entered promiscuous mode [ 265.163150][T21311] bond_slave_1: entered promiscuous mode [ 265.166018][T21311] gretap0: entered promiscuous mode [ 265.168433][T21311] bond0: left promiscuous mode [ 265.169983][T21311] bond_slave_0: left promiscuous mode [ 265.171801][T21311] bond_slave_1: left promiscuous mode [ 265.174246][T21311] gretap0: left promiscuous mode [ 265.205741][T21319] netlink: 'syz.6.2526': attribute type 8 has an invalid length. [ 265.212916][T21319] bond0: entered promiscuous mode [ 265.214657][T21319] bond_slave_0: entered promiscuous mode [ 265.216684][T21319] bond_slave_1: entered promiscuous mode [ 265.219784][T21319] gretap0: entered promiscuous mode [ 265.222104][T21319] bond0: left promiscuous mode [ 265.223658][T21319] bond_slave_0: left promiscuous mode [ 265.225691][T21319] bond_slave_1: left promiscuous mode [ 265.228394][T21319] gretap0: left promiscuous mode [ 265.462808][T21341] syzkaller0: entered promiscuous mode [ 265.464626][T21341] syzkaller0: entered allmulticast mode [ 265.559544][T21351] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 265.565357][ T40] audit: type=1804 audit(1771901155.164:1030): pid=21351 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.2535" name="/newroot/148/file0" dev="tmpfs" ino=798 res=1 errno=0 [ 265.568039][T21351] ref_ctr increment failed for inode: 0x31e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802d84ee40 [ 265.579995][T21350] uprobe: syz.6.2535:21350 failed to unregister, leaking uprobe [ 265.841925][T21377] 8021q: VLANs not supported on ip6tnl0 [ 266.053536][T21417] netlink: 'syz.4.2552': attribute type 1 has an invalid length. [ 266.093186][T21417] bond14: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 266.145110][T21417] veth5: entered promiscuous mode [ 266.148776][T21417] bond14: (slave veth5): Enslaving as a backup interface with a down link [ 266.153656][T21508] overlayfs: failed to resolve './file0': -2 [ 266.179514][T21529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21529 comm=syz.4.2556 [ 266.220457][ T829] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 266.371906][ T829] usb 10-1: Using ep0 maxpacket: 8 [ 266.374937][ T829] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.378234][ T829] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 266.382690][ T829] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 266.385604][ T829] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.393225][ T829] usb 10-1: config 0 descriptor?? [ 266.397619][ T829] iowarrior 10-1:0.0: no interrupt-in endpoint found [ 266.879443][T21566] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge0 [ 266.956321][ T40] audit: type=1400 audit(1771901156.558:1031): avc: denied { map } for pid=21569 comm="syz.4.2565" path="pipe:[59350]" dev="pipefs" ino=59350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 266.964886][ T40] audit: type=1400 audit(1771901156.558:1032): avc: denied { execute } for pid=21569 comm="syz.4.2565" path="pipe:[59350]" dev="pipefs" ino=59350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 266.991289][T21574] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 267.056928][T21577] __nla_validate_parse: 37 callbacks suppressed [ 267.056933][T21578] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2567'. [ 267.056945][T21577] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2567'. [ 267.177947][ T1162] usb 10-1: USB disconnect, device number 24 [ 267.248797][T21650] overlay: Unknown parameter 'e' [ 267.523413][T21726] netlink: 'syz.4.2573': attribute type 3 has an invalid length. [ 267.663452][T21748] loop5: detected capacity change from 0 to 7 [ 267.666746][ C1] blk_print_req_error: 330 callbacks suppressed [ 267.666760][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 267.672791][ C1] buffer_io_error: 37 callbacks suppressed [ 267.672804][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 267.679471][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 267.683142][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 267.686502][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 267.690535][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 267.693707][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 267.696768][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 267.712756][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 267.715927][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 267.721337][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 267.724579][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 267.790922][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 267.791285][T21756] loop5: detected capacity change from 7 to 0 [ 267.794479][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 267.797652][T21748] ldm_validate_partition_table(): Disk read failed. [ 267.806983][T21748] Dev loop5: unable to read RDB block 0 [ 267.811490][T21748] loop5: unable to read partition table [ 267.813782][T21748] loop5: partition table beyond EOD, truncated [ 267.816310][T21748] loop_reread_partitions: partition scan of loop5 (ɍn/C>|n˨,l-"@Iy}c9sGQaG%x?) failed (rc=-5) [ 267.948240][T21774] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2582'. [ 268.011986][T21777] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2581'. [ 268.125377][T21800] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2586'. [ 268.128375][T21799] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2586'. [ 268.129549][T21800] netlink: 'syz.6.2586': attribute type 30 has an invalid length. [ 268.132008][T21799] netlink: 'syz.6.2586': attribute type 30 has an invalid length. [ 268.142498][ T1151] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.151402][ T9424] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.160286][ T9424] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.163185][ T9424] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.185426][T21808] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2588'. [ 268.190027][ T829] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 268.192651][T21808] ip6gre1: entered promiscuous mode [ 268.195074][T21808] ip6gre1: entered allmulticast mode [ 268.201111][T21811] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 268.201111][T21811] program syz.7.2587 not setting count and/or reply_len properly [ 268.214136][T21808] netlink: 'syz.6.2588': attribute type 23 has an invalid length. [ 268.319615][T21813] netlink: 312 bytes leftover after parsing attributes in process `syz.6.2589'. [ 268.327044][T21813] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 268.329866][T21813] overlayfs: missing 'lowerdir' [ 268.343966][T21815] tmpfs: Cannot change global quota limit on remount [ 268.360715][ T829] usb 10-1: Using ep0 maxpacket: 8 [ 268.367533][ T829] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 268.371697][T21817] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 268.371988][ T829] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 268.378417][ T829] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.385170][ T829] usb 10-1: config 0 descriptor?? [ 268.394749][ T829] iowarrior 10-1:0.0: no interrupt-in endpoint found [ 269.062211][T21871] xt_connbytes: Forcing CT accounting to be enabled [ 269.067210][T21871] set match dimension is over the limit! [ 269.072592][ T40] audit: type=1400 audit(1771901158.658:1033): avc: denied { create } for pid=21870 comm="syz.6.2607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 269.098318][T21881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2608'. [ 269.103847][T21881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2608'. [ 269.104853][ T829] usb 10-1: USB disconnect, device number 25 [ 269.138736][T21889] binder_alloc: binder_alloc_mmap_handler: 21870 200000ffc000-200000ffd000 already mapped failed -16 [ 269.144069][T21889] lo: entered promiscuous mode [ 269.150892][T21889] tunl0: entered promiscuous mode [ 269.161089][T21889] gre0: entered promiscuous mode [ 269.184283][T21889] gretap0: entered promiscuous mode [ 269.200244][T21889] erspan0: entered promiscuous mode [ 269.207088][T21889] ip_vti0: entered promiscuous mode [ 269.214288][T21889] ip6_vti0: entered promiscuous mode [ 269.222306][T21889] sit0: entered promiscuous mode [ 269.235218][T21889] ip6tnl0: entered promiscuous mode [ 269.247065][T21889] ip6gre0: entered promiscuous mode [ 269.253347][T21889] syz_tun: entered promiscuous mode [ 269.260503][T21889] ip6gretap0: entered promiscuous mode [ 269.266034][T21889] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.268522][T21889] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.271099][T21889] bridge0: entered promiscuous mode [ 269.276957][T21889] vcan0: entered promiscuous mode [ 269.279900][T21889] bond0: entered promiscuous mode [ 269.281536][T21889] bond_slave_0: entered promiscuous mode [ 269.283623][T21889] bond_slave_1: entered promiscuous mode [ 269.290047][T21889] team0: entered promiscuous mode [ 269.291683][T21889] team_slave_0: entered promiscuous mode [ 269.293617][T21889] team_slave_1: entered promiscuous mode [ 269.299217][T21889] dummy0: entered promiscuous mode [ 269.304406][T21889] nlmon0: entered promiscuous mode [ 269.308886][T21889] caif0: entered promiscuous mode [ 269.310714][T21889] vxcan0: entered promiscuous mode [ 269.313609][T21889] vxcan1: entered promiscuous mode [ 269.317402][T21889] veth0: entered promiscuous mode [ 269.325276][ T5938] Bluetooth: hci5: command 0x0406 tx timeout [ 269.328649][T21889] wg0: entered promiscuous mode [ 269.345488][T21889] wg1: entered promiscuous mode [ 269.356290][T21889] wg2: entered promiscuous mode [ 269.359784][T21889] veth0_to_bridge: entered promiscuous mode [ 269.370294][T21889] veth1_to_bridge: entered promiscuous mode [ 269.377280][T21889] veth0_to_bond: entered promiscuous mode [ 269.380110][T21902] netlink: 'syz.5.2612': attribute type 7 has an invalid length. [ 269.384932][T21889] veth1_to_bond: entered promiscuous mode [ 269.394873][T21889] veth0_to_team: entered promiscuous mode [ 269.400378][T21906] MINIX-fs: blocksize too small for device [ 269.403741][T21889] veth1_to_team: entered promiscuous mode [ 269.414616][T21889] veth0_to_batadv: entered promiscuous mode [ 269.422023][T21889] batadv_slave_0: entered promiscuous mode [ 269.427411][T21889] veth1_to_batadv: entered promiscuous mode [ 269.433061][T21889] batadv_slave_1: entered promiscuous mode [ 269.447190][T21889] xfrm0: entered promiscuous mode [ 269.454013][T21889] veth0_to_hsr: entered promiscuous mode [ 269.468620][T21889] veth1_to_hsr: entered promiscuous mode [ 269.480590][T21889] hsr0: entered promiscuous mode [ 269.484232][T21889] veth1_virt_wifi: entered promiscuous mode [ 269.490185][T21889] veth0_virt_wifi: entered promiscuous mode [ 269.496166][T21889] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 269.522193][T21889] vlan0: entered promiscuous mode [ 269.524936][T21889] vlan1: entered promiscuous mode [ 269.535067][T21889] macvlan0: entered promiscuous mode [ 269.543840][T21889] macvlan1: entered promiscuous mode [ 269.552214][T21889] ipvlan0: entered promiscuous mode [ 269.555193][T21889] ipvlan1: entered promiscuous mode [ 269.569138][T21889] macvtap0: entered promiscuous mode [ 269.573282][T21889] macsec0: entered promiscuous mode [ 269.582424][T21889] geneve0: entered promiscuous mode [ 269.589465][T21889] geneve1: entered promiscuous mode [ 269.597127][T21889] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 269.607493][T21889] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 269.614978][T21889] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 269.622930][T21889] netdevsim netdevsim6 netdevsim3: entered promiscuous mode [ 269.634696][T21889] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 269.646122][T21889] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode [ 269.652171][T21889] bridge1: entered promiscuous mode [ 269.655775][T21889] bond1: entered promiscuous mode [ 269.659413][T21889] bridge2: entered promiscuous mode [ 269.661887][T21889] syztnl0: entered promiscuous mode [ 269.664248][T21889] bond2: entered promiscuous mode [ 269.666412][T21889] sit1: entered promiscuous mode [ 269.672020][T21889] bridge3: entered promiscuous mode [ 269.676206][T21889] veth2: entered promiscuous mode [ 269.679504][T21889] macvlan0.2: entered promiscuous mode [ 269.682436][T21889] bond3: entered promiscuous mode [ 269.684609][T21889] gretap1: entered promiscuous mode [ 269.691330][T21889] vlan3: entered promiscuous mode [ 269.700004][T21889] bond4: entered promiscuous mode [ 269.703678][T21889] vlan4: entered promiscuous mode [ 269.705844][T21889] bond5: entered promiscuous mode [ 269.708740][T21889] ip6gretap1: entered promiscuous mode [ 269.712147][T21889] veth4: entered promiscuous mode [ 269.714313][T21889] veth5: entered promiscuous mode [ 269.716744][T21889] bond6: entered promiscuous mode [ 269.720501][T21889] vxlan0: entered promiscuous mode [ 269.722619][T21889] bond7: entered promiscuous mode [ 269.726519][T21889] vxlan1: entered promiscuous mode [ 269.733844][T21889] vxlan2: entered promiscuous mode [ 269.741267][T21889] syzkaller1: entered promiscuous mode [ 269.763028][ T12] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.765935][ T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.780188][ T12] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.783011][ T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.785816][ T12] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.788759][ T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.792066][ T12] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.795024][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.921509][ T7363] IPVS: starting estimator thread 0... [ 269.925084][T21970] IPVS: sed: FWM 3 0x00000003 - no destination available [ 269.992057][T21974] 9p: Could not find request transport: viravxC&Rtio [ 270.008428][T21972] IPVS: using max 44 ests per chain, 105600 per kthread [ 270.149273][ T5992] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 270.309660][ T5992] usb 10-1: Using ep0 maxpacket: 8 [ 270.313748][ T5992] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 270.317888][ T5992] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 270.322124][ T5992] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.328375][ T5992] usb 10-1: config 0 descriptor?? [ 270.333668][ T5992] iowarrior 10-1:0.0: no interrupt-in endpoint found [ 270.998564][ T5992] usb 10-1: USB disconnect, device number 26 [ 271.068230][T22006] netlink: 'syz.4.2628': attribute type 30 has an invalid length. [ 271.120327][T22016] netlink: 'syz.4.2628': attribute type 4 has an invalid length. [ 271.124989][T22016] netlink: 'syz.4.2628': attribute type 30 has an invalid length. [ 271.153444][T22024] sp0: Synchronizing with TNC [ 271.155262][T22024] sp0: Found TNC [ 271.166653][T22024] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 271.178640][T22032] [U] `` [ 271.360620][T22049] 8021q: adding VLAN 0 to HW filter on device bond17 [ 271.403062][T22085] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 271.415218][ T5938] Bluetooth: hci5: command 0x0406 tx timeout [ 271.482844][T22097] input: syz1 as /devices/virtual/input/input23 [ 272.021060][ T40] audit: type=1400 audit(1771901161.594:1034): avc: denied { read } for pid=22114 comm="syz.6.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 272.262816][ T40] audit: type=1400 audit(1771901161.833:1035): avc: denied { connect } for pid=22128 comm="syz.6.2650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 272.268285][ T6011] libceph: connect (1)[c::]:6789 error -101 [ 272.271106][ T6011] libceph: mon0 (1)[c::]:6789 connect error [ 272.524667][T22168] __nla_validate_parse: 5 callbacks suppressed [ 272.524679][T22168] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2649'. [ 272.531060][ T6011] libceph: connect (1)[c::]:6789 error -101 [ 272.533961][ T6011] libceph: mon0 (1)[c::]:6789 connect error [ 273.038539][ T40] audit: type=1400 audit(1771901162.600:1036): avc: denied { setattr } for pid=22179 comm="syz.7.2656" name="XDP" dev="sockfs" ino=63641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 273.053715][ T6011] libceph: connect (1)[c::]:6789 error -101 [ 273.057734][ T6011] libceph: mon0 (1)[c::]:6789 connect error [ 273.102047][T22129] ceph: No mds server is up or the cluster is laggy [ 273.254950][T22200] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2661'. [ 273.360149][T22212] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2663'. [ 273.560225][T22226] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 273.603885][ T40] audit: type=1400 audit(1771901163.167:1037): avc: denied { create } for pid=22232 comm="syz.7.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 273.608144][ T5938] Bluetooth: hci5: adv larger than maximum supported [ 273.610245][ T5938] Bluetooth: hci5: Malformed LE Event: 0x0d [ 273.610959][ T40] audit: type=1400 audit(1771901163.177:1038): avc: denied { validate_trans } for pid=22232 comm="syz.7.2671" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 273.663213][T22239] nft_compat: unsupported protocol 0 [ 273.756523][T22250] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 273.761658][T22250] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2676'. [ 273.765937][T22250] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2676'. [ 273.780652][ T9425] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.780662][T22250] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2676'. [ 273.780692][ T9425] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.784334][T22250] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2676'. [ 273.796935][ T9425] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.801218][ T9425] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.215972][T22283] kvm: MONITOR instruction emulated as NOP! [ 274.282881][T22292] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2689'. [ 274.296402][T22292] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2689'. [ 274.327153][ T40] audit: type=1400 audit(1771901163.884:1039): avc: denied { write } for pid=22295 comm="syz.5.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 274.361244][T22300] syz.6.2691: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 274.367195][T22300] tipc: Started in network mode [ 274.371659][T22300] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 274.375503][T22300] tipc: Enabling of bearer rejected, failed to enable media [ 274.547713][ T40] audit: type=1400 audit(1771901164.103:1040): avc: denied { setopt } for pid=22319 comm="syz.5.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 274.681011][ T39] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 274.849693][ T39] usb 11-1: Using ep0 maxpacket: 8 [ 274.852754][ T39] usb 11-1: config 1 interface 0 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 274.855932][ T39] usb 11-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.862823][ T39] usb 11-1: config 1 interface 0 has no altsetting 0 [ 274.866598][ T39] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 274.869364][ T39] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.872279][ T39] usb 11-1: Product: syz [ 274.873802][ T39] usb 11-1: Manufacturer: syz [ 274.875352][ T39] usb 11-1: SerialNumber: syz [ 274.879202][T22302] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 275.159715][T22358] netlink: 'syz.6.2692': attribute type 2 has an invalid length. [ 275.163313][T22358] netlink: 'syz.6.2692': attribute type 1 has an invalid length. [ 275.166931][T22358] netlink: 'syz.6.2692': attribute type 1 has an invalid length. [ 275.170620][T22358] sctp: [Deprecated]: syz.6.2692 (pid 22358) Use of int in maxseg socket option. [ 275.170620][T22358] Use struct sctp_assoc_value instead [ 275.271628][ T5938] Bluetooth: hci5: command 0x0406 tx timeout [ 275.273598][ T5939] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 275.596097][T22363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.654035][T22363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.710864][T22363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.303911][T22380] Illegal XDP return value 4294967262 on prog (id 311) dev N/A, expect packet loss! [ 276.339774][T22382] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 276.346946][T22382] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 276.542397][T22405] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2719'. [ 276.698519][T22469] vlan2: entered allmulticast mode [ 276.700275][T22469] veth1: entered allmulticast mode [ 276.779672][T22484] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 276.992566][T22491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22491 comm=syz.4.2724 [ 277.156336][T22498] 9p: Bad value for 'version' [ 277.575319][ T39] usb 11-1: USB disconnect, device number 13 [ 277.647270][ T40] audit: type=1400 audit(1771901167.190:1041): avc: denied { accept } for pid=22512 comm="syz.6.2730" path="socket:[65778]" dev="sockfs" ino=65778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 277.893458][T22523] syzkaller0: entered promiscuous mode [ 277.895285][T22523] syzkaller0: entered allmulticast mode [ 277.938033][T22551] __nla_validate_parse: 1 callbacks suppressed [ 277.938045][T22551] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2734'. [ 277.991046][ T1334] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 278.055486][T22561] xt_hashlimit: size too large, truncated to 1048576 [ 278.143205][ T1334] usb 10-1: Using ep0 maxpacket: 8 [ 278.147023][ T1334] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 278.151743][ T1334] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 278.160268][ T1334] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.175282][ T1334] usb 10-1: config 0 descriptor?? [ 278.187773][T22575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.229385][T22579] tmpfs: Bad value for 'mpol' [ 278.231355][T22579] geneve1: left promiscuous mode [ 278.233244][T22579] geneve1: entered allmulticast mode [ 278.389157][ T1334] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 278.487860][T22601] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2747'. [ 278.609387][T22621] netem: change failed [ 278.620061][T22613] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2752'. [ 278.623097][T22613] gre0: left promiscuous mode [ 278.636078][T22602] overlayfs: failed to clone upperpath [ 278.743070][ T6011] usb 10-1: USB disconnect, device number 27 [ 278.864266][ T40] audit: type=1400 audit(1771901168.406:1042): avc: denied { create } for pid=22654 comm="syz.5.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 278.884842][T22655] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 278.935537][T22664] tipc: Enabling of bearer rejected, failed to enable media [ 278.941376][T22664] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2756'. [ 279.210030][T22700] all: renamed from bridge_slave_0 (while UP) [ 279.288846][T21414] ================================================================== [ 279.291418][T21414] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 279.294297][T21414] Read of size 8 at addr ffff8880230f0978 by task syz.4.2548/21414 [ 279.299072][T21414] [ 279.300218][T21414] CPU: 2 UID: 0 PID: 21414 Comm: syz.4.2548 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.300234][T21414] Tainted: [L]=SOFTLOCKUP [ 279.300239][T21414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 279.300245][T21414] Call Trace: [ 279.300249][T21414] [ 279.300254][T21414] dump_stack_lvl+0x100/0x190 [ 279.300274][T21414] print_report+0x156/0x4c9 [ 279.300289][T21414] ? __virt_addr_valid+0x81/0x620 [ 279.300305][T21414] ? __phys_addr+0xe8/0x180 [ 279.300320][T21414] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 279.300337][T21414] kasan_report+0xdf/0x1e0 [ 279.300353][T21414] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 279.300372][T21414] __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 279.300393][T21414] bulk_make_private+0xd8/0x720 [ 279.300409][T21414] umount_tree+0x3fb/0xec0 [ 279.300423][T21414] ? lock_acquire+0x1cf/0x380 [ 279.300439][T21414] ? __pfx_umount_tree+0x10/0x10 [ 279.300452][T21414] ? switch_task_namespaces+0x89/0x2c0 [ 279.300467][T21414] put_mnt_ns+0x267/0x300 [ 279.300479][T21414] switch_task_namespaces+0x133/0x2c0 [ 279.300493][T21414] do_exit+0x824/0x2aa0 [ 279.300509][T21414] ? __pfx_do_exit+0x10/0x10 [ 279.300524][T21414] ? cgroup_update_frozen_flag+0x107/0x210 [ 279.300535][T21414] ? find_held_lock+0x2b/0x80 [ 279.300547][T21414] ? get_signal+0x184f/0x21e0 [ 279.300560][T21414] do_group_exit+0xd5/0x2a0 [ 279.300576][T21414] get_signal+0x1ec7/0x21e0 [ 279.300587][T21414] ? __asan_memset+0x23/0x50 [ 279.300601][T21414] ? __pfx_get_signal+0x10/0x10 [ 279.300613][T21414] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 279.300624][T21414] arch_do_signal_or_restart+0x91/0x7a0 [ 279.300638][T21414] ? __pfx_get_timespec64+0x10/0x10 [ 279.300651][T21414] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 279.300666][T21414] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 279.300681][T21414] exit_to_user_mode_loop+0x86/0x4a0 [ 279.300698][T21414] do_syscall_64+0x67c/0xf80 [ 279.300714][T21414] ? clear_bhb_loop+0x40/0x90 [ 279.300725][T21414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.300736][T21414] RIP: 0033:0x7f4d78d5ca0e [ 279.300821][T21414] Code: Unable to access opcode bytes at 0x7f4d78d5c9e4. [ 279.300825][T21414] RSP: 002b:00007f4d79c89f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 279.300836][T21414] RAX: fffffffffffffdfc RBX: 00007f4d79c8a6c0 RCX: 00007f4d78d5ca0e [ 279.300843][T21414] RDX: 00007f4d79c89fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 279.300849][T21414] RBP: 00007f4d78e327e0 R08: 0000000000000000 R09: 0000000000000000 [ 279.300855][T21414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.300861][T21414] R13: 00007f4d79016038 R14: 00007f4d79015fa0 R15: 00007ffea4918958 [ 279.300871][T21414] [ 279.300875][T21414] [ 279.388921][T21414] Allocated by task 22594: [ 279.390426][T21414] kasan_save_stack+0x30/0x50 [ 279.392015][T21414] kasan_save_track+0x14/0x30 [ 279.393664][T21414] __kasan_slab_alloc+0x89/0x90 [ 279.395374][T21414] kmem_cache_alloc_noprof+0x241/0x6e0 [ 279.397185][T21414] alloc_vfsmnt+0x23/0x6a0 [ 279.398689][T21414] clone_mnt+0x4b/0x930 [ 279.400076][T21414] vfs_open_tree+0xb02/0x1500 [ 279.401636][T21414] __x64_sys_open_tree+0xa3/0x150 [ 279.403308][T21414] do_syscall_64+0x106/0xf80 [ 279.404848][T21414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.406861][T21414] [ 279.407663][T21414] Freed by task 0: [ 279.408933][T21414] kasan_save_stack+0x30/0x50 [ 279.410576][T21414] kasan_save_track+0x14/0x30 [ 279.412134][T21414] kasan_save_free_info+0x3b/0x70 [ 279.413791][T21414] __kasan_slab_free+0x5f/0x80 [ 279.415392][T21414] kmem_cache_free+0x124/0x6a0 [ 279.416967][T21414] rcu_core+0x5a2/0x10d0 [ 279.418407][T21414] handle_softirqs+0x1eb/0x9e0 [ 279.420031][T21414] __irq_exit_rcu+0xef/0x150 [ 279.421637][T21414] irq_exit_rcu+0x9/0x30 [ 279.423079][T21414] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 279.425001][T21414] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 279.426957][T21414] [ 279.427823][T21414] Last potentially related work creation: [ 279.429452][T21414] kasan_save_stack+0x30/0x50 [ 279.430835][T21414] kasan_record_aux_stack+0xa7/0xc0 [ 279.432385][T21414] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 279.434398][T21414] task_work_run+0x150/0x240 [ 279.436201][T21414] exit_to_user_mode_loop+0x100/0x4a0 [ 279.438079][T21414] do_syscall_64+0x67c/0xf80 [ 279.439729][T21414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.441661][T21414] [ 279.442505][T21414] Second to last potentially related work creation: [ 279.444620][T21414] kasan_save_stack+0x30/0x50 [ 279.446355][T21414] kasan_record_aux_stack+0xa7/0xc0 [ 279.448398][T21414] task_work_add+0x28b/0x3b0 [ 279.449937][T21414] mntput_no_expire_slowpath+0x3da/0xb00 [ 279.451794][T21414] mntput_no_expire+0x1fd/0x220 [ 279.453395][T21414] mntput+0x6b/0xa0 [ 279.454713][T21414] vfs_open_tree+0x1235/0x1500 [ 279.456377][T21414] __x64_sys_open_tree+0xa3/0x150 [ 279.458142][T21414] do_syscall_64+0x106/0xf80 [ 279.459694][T21414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.461646][T21414] [ 279.462499][T21414] The buggy address belongs to the object at ffff8880230f08c0 [ 279.462499][T21414] which belongs to the cache mnt_cache of size 352 [ 279.466890][T21414] The buggy address is located 184 bytes inside of [ 279.466890][T21414] freed 352-byte region [ffff8880230f08c0, ffff8880230f0a20) [ 279.471437][T21414] [ 279.472250][T21414] The buggy address belongs to the physical page: [ 279.474335][T21414] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880230f0380 pfn:0x230f0 [ 279.477700][T21414] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 279.480496][T21414] memcg:ffff888034a84a01 [ 279.481908][T21414] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 279.484693][T21414] page_type: f5(slab) [ 279.486030][T21414] raw: 00fff00000000240 ffff88801ceb4280 ffffea0000b06690 ffffea0000dac290 [ 279.488968][T21414] raw: ffff8880230f0380 0000000800120010 00000000f5000000 ffff888034a84a01 [ 279.491769][T21414] head: 00fff00000000240 ffff88801ceb4280 ffffea0000b06690 ffffea0000dac290 [ 279.494590][T21414] head: ffff8880230f0380 0000000800120010 00000000f5000000 ffff888034a84a01 [ 279.497397][T21414] head: 00fff00000000001 ffffea00008c3c01 00000000ffffffff 00000000ffffffff [ 279.500226][T21414] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 279.503105][T21414] page dumped because: kasan: bad access detected [ 279.505243][T21414] page_owner tracks the page as allocated [ 279.507110][T21414] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5925, tgid 5925 (syz-executor), ts 55412831374, free_ts 55107249325 [ 279.513951][T21414] post_alloc_hook+0x153/0x170 [ 279.515555][T21414] get_page_from_freelist+0x111d/0x3140 [ 279.517365][T21414] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 279.519370][T21414] new_slab+0xa6/0x6d0 [ 279.520738][T21414] refill_objects+0x26b/0x400 [ 279.522326][T21414] __pcs_replace_empty_main+0x19f/0x600 [ 279.524165][T21414] kmem_cache_alloc_noprof+0x480/0x6e0 [ 279.526007][T21414] alloc_vfsmnt+0x23/0x6a0 [ 279.527532][T21414] clone_mnt+0x4b/0x930 [ 279.528906][T21414] copy_tree+0xfc/0xbf0 [ 279.530275][T21414] __do_loopback+0x2fc/0x520 [ 279.531780][T21414] path_mount+0x1967/0x23d0 [ 279.533292][T21414] __x64_sys_mount+0x293/0x310 [ 279.534897][T21414] do_syscall_64+0x106/0xf80 [ 279.536441][T21414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.538374][T21414] page last free pid 15 tgid 15 stack trace: [ 279.540321][T21414] __free_frozen_pages+0x7ca/0x10a0 [ 279.542007][T21414] rcu_core+0x5a2/0x10d0 [ 279.543459][T21414] handle_softirqs+0x1eb/0x9e0 [ 279.545046][T21414] run_ksoftirqd+0x38/0x60 [ 279.546541][T21414] smpboot_thread_fn+0x3d3/0xaa0 [ 279.548245][T21414] kthread+0x370/0x450 [ 279.549596][T21414] ret_from_fork+0x754/0xd80 [ 279.551137][T21414] ret_from_fork_asm+0x1a/0x30 [ 279.552725][T21414] [ 279.553486][T21414] Memory state around the buggy address: [ 279.555430][T21414] ffff8880230f0800: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 279.558093][T21414] ffff8880230f0880: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 279.560737][T21414] >ffff8880230f0900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 279.563449][T21414] ^ [ 279.566100][T21414] ffff8880230f0980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 279.568744][T21414] ffff8880230f0a00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 279.571401][T21414] ================================================================== [ 279.575120][T21414] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 279.577535][T21414] CPU: 2 UID: 0 PID: 21414 Comm: syz.4.2548 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.581068][T21414] Tainted: [L]=SOFTLOCKUP [ 279.582510][T21414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 279.585841][T21414] Call Trace: [ 279.586986][T21414] [ 279.587969][T21414] dump_stack_lvl+0x100/0x190 [ 279.589543][T21414] vpanic+0x552/0x970 [ 279.590891][T21414] ? __pfx_vpanic+0x10/0x10 [ 279.592464][T21414] ? mark_held_locks+0x40/0x70 [ 279.594053][T21414] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 279.596155][T21414] panic+0xd1/0xe0 [ 279.597470][T21414] ? __pfx_panic+0x10/0x10 [ 279.598962][T21414] ? check_panic_on_warn+0x1f/0x90 [ 279.600679][T21414] check_panic_on_warn.cold+0x19/0x34 [ 279.602508][T21414] end_report.part.0+0x3a/0x90 [ 279.604094][T21414] kasan_report.cold+0xe/0x18 [ 279.605668][T21414] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 279.607876][T21414] __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 279.609917][T21414] bulk_make_private+0xd8/0x720 [ 279.611544][T21414] umount_tree+0x3fb/0xec0 [ 279.613035][T21414] ? lock_acquire+0x1cf/0x380 [ 279.614679][T21414] ? __pfx_umount_tree+0x10/0x10 [ 279.616324][T21414] ? switch_task_namespaces+0x89/0x2c0 [ 279.618162][T21414] put_mnt_ns+0x267/0x300 [ 279.619602][T21414] switch_task_namespaces+0x133/0x2c0 [ 279.621336][T21414] do_exit+0x824/0x2aa0 [ 279.622710][T21414] ? __pfx_do_exit+0x10/0x10 [ 279.624253][T21414] ? cgroup_update_frozen_flag+0x107/0x210 [ 279.626357][T21414] ? find_held_lock+0x2b/0x80 [ 279.627983][T21414] ? get_signal+0x184f/0x21e0 [ 279.629549][T21414] do_group_exit+0xd5/0x2a0 [ 279.631096][T21414] get_signal+0x1ec7/0x21e0 [ 279.632627][T21414] ? __asan_memset+0x23/0x50 [ 279.634242][T21414] ? __pfx_get_signal+0x10/0x10 [ 279.635895][T21414] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 279.637639][T21414] arch_do_signal_or_restart+0x91/0x7a0 [ 279.639515][T21414] ? __pfx_get_timespec64+0x10/0x10 [ 279.641307][T21414] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 279.643329][T21414] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 279.645293][T21414] exit_to_user_mode_loop+0x86/0x4a0 [ 279.647049][T21414] do_syscall_64+0x67c/0xf80 [ 279.648611][T21414] ? clear_bhb_loop+0x40/0x90 [ 279.650176][T21414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.652192][T21414] RIP: 0033:0x7f4d78d5ca0e [ 279.653693][T21414] Code: Unable to access opcode bytes at 0x7f4d78d5c9e4. [ 279.655968][T21414] RSP: 002b:00007f4d79c89f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 279.658783][T21414] RAX: fffffffffffffdfc RBX: 00007f4d79c8a6c0 RCX: 00007f4d78d5ca0e [ 279.661405][T21414] RDX: 00007f4d79c89fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 279.664045][T21414] RBP: 00007f4d78e327e0 R08: 0000000000000000 R09: 0000000000000000 [ 279.666683][T21414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.669354][T21414] R13: 00007f4d79016038 R14: 00007f4d79015fa0 R15: 00007ffea4918958 [ 279.671986][T21414] [ 279.673710][T21414] Kernel Offset: disabled [ 279.675166][T21414] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:59:29 Registers: info registers vcpu 0 CPU#0 RAX=0000000000200000 RBX=ffff888100fd9530 RCX=0000000000000015 RDX=ffff88802aa34900 RSI=ffffffff8681926a RDI=ffff88802aa34900 RBP=0000000000000015 RSP=ffffc90003c8f088 R8 =0000000000000005 R9 =000000000000001f R10=0000000000000015 R11=0000000000000154 R12=ffffc9000013d138 R13=ffff888100fd958c R14=ffff888100fd9538 R15=0000000000000000 RIP=ffffffff86819277 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9dea22e300 ffffffff 00c00000 GS =0000 ffff8880d634a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000560675496f40 CR3=0000000037fa0000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=c1e2541333360be7 c45642bbce9f1ac9 c1e2541333360be7 c45642bbce9f1ac9 c1e2541333360be7 c45642bbce9f1ac9 c1e2541333360be7 c45642bbce9f1ac9 ZMM18=c0dec3e5415e6ff6 24dd1b9e9099e193 c0dec3e5415e6ff6 24dd1b9e9099e193 c0dec3e5415e6ff6 24dd1b9e9099e193 c0dec3e5415e6ff6 24dd1b9e9099e193 ZMM19=d00c000000000000 0000000000000004 d00c000000000000 0000000000000003 d00c000000000000 0000000000000002 d00c000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0809800301080002 8004040275b8006c 6f6f7468746501ff ffffffffffffffef ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0802800300100004 8004000402100001 08000a0106e02f3a 3a3a5b01ffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffff5080480 03656372756f7301 ffffffffffffffff f308000320080006 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300000000000019 ffffffa803000000 00000009ffffff9c 0700000000000002 ZMM25=24dd1b9e24dd1b9e 24dd1b9e24dd1b9e 24dd1b9e24dd1b9e 24dd1b9e24dd1b9e 24dd1b9e24dd1b9e 24dd1b9e24dd1b9e 24dd1b9e24dd1b9e 24dd1b9e24dd1b9e ZMM26=415e6ff6415e6ff6 415e6ff6415e6ff6 415e6ff6415e6ff6 415e6ff6415e6ff6 415e6ff6415e6ff6 415e6ff6415e6ff6 415e6ff6415e6ff6 415e6ff6415e6ff6 ZMM27=c0dec3e5c0dec3e5 c0dec3e5c0dec3e5 c0dec3e5c0dec3e5 c0dec3e5c0dec3e5 c0dec3e5c0dec3e5 c0dec3e5c0dec3e5 c0dec3e5c0dec3e5 c0dec3e5c0dec3e5 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=cf0c0000cf0c0000 cf0c0000cf0c0000 cf0c0000cf0c0000 cf0c0000cf0c0000 cf0c0000cf0c0000 cf0c0000cf0c0000 cf0c0000cf0c0000 cf0c0000cf0c0000 info registers vcpu 1 CPU#1 RAX=0000000000000095 RBX=0000000000000002 RCX=0000000000000002 RDX=0000000000000002 RSI=ffff888034a3d418 RDI=ffff888034a3c900 RBP=ffffc9000398f2e8 RSP=ffffc9000398f250 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff888034a3d418 R13=ffff888034a3c900 R14=0000000000000004 R15=0000000000000009 RIP=ffffffff81e48ca2 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d644a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4d78fe42f8 CR3=000000000e598000 CR4=00352ef0 DR0=0000000000000000 DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000153b0010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe66dc5096 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe66dc5096 00007ffe66dc509c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e21e32e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e21e32e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e21e32fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e21e32e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3b1f324c057d4126 1017000500000000 0000000008ee0018 00006e6170737265 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e21fea498 00007f2e21fea468 00007f2e21fea4a0 00007f2e21fea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8578a0f5 RDI=ffffffff9b49b940 RBP=ffffffff9b49b900 RSP=ffffc90005ea7430 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000035 R14=0000000000000010 R15=ffffffff8578a090 RIP=ffffffff8578a11f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d654a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555586ce27e0 CR3=0000000046155000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffae694d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2ff81466 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2ff81466 00007ffc2ff8146c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffae5c32e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffae5c32e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffae5c32fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffae5c32e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffae5dea4a0 00007ffae5dea480 00007ffae5dea488 00007ffae5dea4b8 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffae5dea498 00007ffae5dea468 00007ffae5dea4a0 00007ffae5dea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffc90006737c00 RCX=ffffffff828ce865 RDX=0000000000000001 RSI=0000000000000000 RDI=ffff888012870000 RBP=ffffc90006737a70 RSP=ffffc900067379c8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000014fe9 R13=fffffbfff1c82d28 R14=0000000000000001 R15=ffff8880339f4d18 RIP=ffffffff82089350 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555555877500 ffffffff 00c00000 GS =0000 ffff8880d664a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbdbf015f40 CR3=0000000040a42000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbdbfb4d020 00007fbdbefea460 00007fbdbefea470 00007fbdbefea4b0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbdbefea498 00007fbdbefea468 00007fbdbefea4a0 00007fbdbefea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000