last executing test programs: 2m36.118618506s ago: executing program 1 (id=289): socket$inet(0x2, 0x1, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x4800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r0, 0x0, 0x0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b03f6ffe0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x13) 2m36.048432568s ago: executing program 1 (id=291): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001d40)="1706184f78b8494cbb6ce17499013820a2f6121e0376ed9512a31557", 0x1c}, {&(0x7f0000000100)="644183e6152f3eadf576ac37b5d9a70a4ae7acd89e", 0x15}, {&(0x7f00000036c0)="1fca40ab9a1b8a64aa3ca48e92d1606a9eb73e57f121c9dbd048a1a93e4ef52bb70f076417735a0d4b3c0a08e057d1f6a54eef3f5f400eaf8e9dc633b8f143af70324117b140e6c78d79c8172587a1baa8957468c5634c937bba8a4c71e9590b7c8700c58661dc15b52f59faeed777f91e08b39a29e7eadb5e9aa0059e30902eb336d2594b4163179919be2f0990b2bc04a5f642ad8aa4069d668ca78869b7ab4815d506cb3dd76a86553f12be45ce564a62e2b33bb8f8aac25714dba696a3383b8f8d2590d7cf0f3bb88196b056ab", 0xd1}], 0x3, 0x0, 0x0, 0x20004001}}], 0x1, 0x8000) recvmsg$unix(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00042cbd7000fedbdf250600000008000900010000000c0010000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000080) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000080)) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="75270c6d03cf4a0e4437a956dec9750270a099b55d7eaa67832d15bd62ca3259218134020b8def87f47d64cb45e384255e7694e00556729b7076cb069ff2b8baf3", 0x41}, {&(0x7f0000000280)="88b9c2246bc1d8fd29bba2ba258dc3efe8af601b5a45758fb959466d19c464c032a30705e8722674f6bd70f44bed3c3b620b063ba267d6be2d05241c25d6e5a905e031d6d34769140adc8f7ae73a53d3d4a9ba", 0x53}, {&(0x7f0000000300)="b92c5f3bcfd6a5da6b6610c7464585ae73c520323f1faa98b4b72bd2e62e08b5026212997c887141895d390a8a74bcc442d3a9586588fcbeb3056e913b1942be129bdbfe637d8be57b240ba94914c5422b0729beb483527471cac5593bad7c57", 0x60}, {&(0x7f0000000380)="b9c98103f092fcfd0f613e67c656bfe792a5e584889cf620828163f0b7b1dc1282d44c9bd8239fcef5a5186831200218f4d912085705937e1342d37a53ecc230ff989ef28ac3286dfe28ac8a64add4604834abdfbac6326de41e12df71066961742380d510e0d084d072c526edb4fa8dd266520a5bd4da13437fcfe3eb9d3e62d61adcff2d85d23f4efa1cb918f195a77bf93ec8eceea96c1824693f57eb2f49597604cbaa8aed5603737ffd40d4216a0414058087bc046b56be6447641fa27db223c35eefbaedbe241ec50d29389ba1790fa82d46a9cec57ab2bc5b9ae606c99d68529d2f2571724147aa872e33cbb472ba1b", 0xf3}], 0x4, &(0x7f00000004c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x30}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt(r1, 0x5, 0x3, &(0x7f00000005c0)="1df070bc2bc05883c1540079351a7f8f6fbbb326e0bca7e08e123d5eed0ba8e6c0ebeace12f42b5456537b3420daf392c944971f55d9b00dfa5f54ccb0688467b864ad8c317e27cbeed01bf586090646681a407d8e913fb91009e120534165967a60a9f50d63b51f2548f5220c09a6696814d67c40d7948fb99ce8a21de6657e7029a89320975158feaae09da916838ba7201c", 0x93) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4, 0x7300}, 0x28) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000b40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000b80)={0x628, r6, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa5b, 0x19}}}}, [@NL80211_ATTR_BEACON_HEAD={0x230, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xf2}, @device_a, @device_b, @initial, {0x7, 0x5}}, 0x3f, @default, 0x120c, @val={0x0, 0x2, @random="8760"}, @void, @val={0x3, 0x1, 0xa5}, @void, @val={0x6, 0x2, 0x80}, @val={0x5, 0xda, {0x8, 0xb9, 0x1, "5ba7d76ed9155feea66fb19a2a1df9c55fc12ce3e866a0c696347f12f0afaef7518504c5aff1e359174f8cf103f91a2d8d160b415a9206844860f54e588cc1991923b3a3efdd008361ae07bf30a7ab923aee8af40959c90321ff742bd5e9a4f19ceea257d9a2894a2d6bf35562a1d2c470e44b903af4f27e6302dd90e0c6018dacd3bf04ed32983703f284a29d223358d88e9399443fa5fbfd9f9b3e46dc8cf0faa5584698f375d4340e326fe2474c821be41afb65da670624126c440e9333f448a027133dc30b9dd234dfd8d2dcf3aad644c83a0ae7e1"}}, @void, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0x1000, 0x1, 0x2, 0x0, {0x7fff, 0x1, 0x0, 0x10, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x0, 0x4, 0xf3}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xb, 0x4}}, @void, [{0xdd, 0x63, "895ea33ff19ccb9b19c6d4e3196ff7127e5cef66ad9946f4598b349a9f92ddfd7bd331739ca50f6a017b4a2e192ecb35dac9ccd8332d9f174cd8ad04bece0fab51787d98e409d56b65b06b9eef0f9a8332ee80c0ddff39ce269c522b417121862feec0"}, {0xdd, 0x8a, "03073bb2ef0804e68e4613263c627e653137e3934a37c7e44f4edb238ace6265de01cf4dad664ee48aa5c916b48effa18d5772afae4f7b0671806690311d8d69d7bbe77e275efd9c90864856ce22e8f31d3aaac2961c565e749ff9ae01ef1786c2d861e31e8b04628ca93204dfe45ef6f071958a7c121b5b72fd276ede77084953ad2fa1fa373e27d5cf"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x118, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xf9, 0x2, "11cd0b74a94909c04bf2dabd931d1208ebe4ba5d6d493a5acf88dc6cf8bd69f2093c92b85dc786d198976e6340ee4c2236b72760c9b5a21677b2525c37af531881d21ebd4b193654081cf91d1560e786e7f767484c5720e19b9cc662c58fbf42a4e43e4e5e501295863096631ec085547c7d125717485f42826f12fc4ec10b450849c0fc8ae2369c6d608cfed6f663787457b3289a89c4cd87b38cab08949e1c12971412333db8deca3fac282dd19c0dd73bbb0263bbc58e8b564995b75e33cf6f4397028f650c77500040543144326ed9b64dcc7aee671f35f6d06a0d0d544c2c0709c568f2b4bb8345503b4efe6d4a165f53fbc3"}, @NL80211_FTM_RESP_ATTR_LCI={0x11, 0x2, "2b6137cda892b6dcb2bc387a41"}]}, @NL80211_ATTR_IE={0x2f, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b, @broadcast}}, @gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x8e, 0x60}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x80, 0x40, 0x7}}]}, @NL80211_ATTR_BEACON_HEAD={0x28e, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x5b0}, @device_a, @broadcast, @initial, {0x1, 0x8e7}}, 0x9, @random, 0x0, @void, @void, @void, @void, @void, @val={0x5, 0x47, {0x7, 0xb9, 0xff, "46a262d1b4ce8c8f6017ec6a85cfc07b84d3f26d8bd4227a7cba497c9cd51f25dc302ec7334b9b964565a2a58f0aca77c72f981d93947bf447b9a2b031c59b5c393c409b"}}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0xa9, 0x8}}, @void, [{0xdd, 0x13, "873d71b611acfaa6d5239d55073421ef8bff76"}, {0xdd, 0x5c, "f1572cff64ff354d482bc3df0941188e0e64687d69d8dcfdfe4fb588401db631748b655cb9ece1356eb8312414b9a25c737e6d477df3c984637ccc75b9c28878f1cd92b6ecda0fdac8415d13ccca1909d78447e922da2efd9331768d"}, {0xdd, 0xf4, "2dd4df788d8ede9e14117f04499200e07e7d9ba25c29523fbb7095e9d1be0a0303a04abfbd124217daf15d4fa2f90ae45e50a67e225139a0907b3b1e99dd80f1eba6901623914cabd1ca170b2bca22f9aec979aab0c8502525e3e34807f6a1e5ab016cb41e8cf4eeb04f233da07cb9dd1fa5805d6f7aa6a9b18d6c1a52b100546f7506268a358c4e8a29d3a55ccb1b3f54ebeb203c9c2700211da2b13b00b637fe06ce5baa6d4a24a1dc47ccf4072f6c06888527253306ca2184c6ca648c7aa89d83102b2ecd6603aa04807fc45c9b4875585589893c96b690220c970a3945e017befa75b3e4af996ee249c4ad0833ea14ccbd04"}, {0xdd, 0x2e, "498d99e87c8f800960ffd870e34959ba2811142d62f9c181ddd1d2529a2b9f9db0041af5229b65bf859ea8196a92"}, {0xdd, 0x71, "cc80e1671e1323d59533d9d2689509760d003c45ca6d27beded7d7637a4e7f7f25a0badbebbb413d1cd6337d676a34ae7c8698a49b8ce20f6333993925349c4292b0b805c284b0eb6148d68bdafbbc23b5e49bbfd4e5e15c82aeaf4ad437aa3fc64522e70e9a6aa205a13aa182c372cdea"}]}}]}, 0x628}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008801) 2m35.719776441s ago: executing program 1 (id=294): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x0) r1 = fspick(r0, &(0x7f0000000040)='\x00', 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000340)='.\x00', 0xa50003d1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) (async) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_BULK(r4, 0x5523, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./bus\x00') (async) chdir(&(0x7f0000000380)='./bus\x00') io_setup(0x1, &(0x7f00000004c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r5, 0x3, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000140)='i', 0x1}]) (async) io_submit(r5, 0x3, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000140)='i', 0x1}]) 2m35.384401993s ago: executing program 1 (id=298): syz_emit_ethernet(0x52, &(0x7f0000001880)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x1c, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_ns={0x87, 0x0, 0x0, @loopback}}}}}}, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x90c0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @initdev}, &(0x7f0000000140)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@newtclass={0x48, 0x28, 0x800, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x6, 0xc}, {0xc, 0x2}, {0x4, 0x5}}, [@tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x3}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @TCA_RATE={0x6, 0x5, {0xb3, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24048080}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40012163) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000440)={r2, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) 2m35.216250767s ago: executing program 1 (id=300): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setpriority(0x0, 0x0, 0x9) r1 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x6, 0x8}) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r1, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f00000003c0)) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="fa82", 0xff80}], 0x1}, 0x20000000) r5 = socket$nl_route(0x10, 0x3, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/211, 0xd3, 0x136c, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r7 = eventfd(0x2) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000480)=r7) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000108000000000400000000000000", @ANYRES16=r2, @ANYBLOB="0040000080a004000c002b80080001005a1f96bbbc5d407fcebee351f762effad6b98a9b61a7f722c67bfa35df9e14ae3617fa3f6ed92f5d6b", @ANYRES32, @ANYBLOB], 0x34}}, 0x0) 2m34.537039864s ago: executing program 3 (id=312): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x3) ioctl$NBD_DO_IT(r3, 0xab03) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x38, r5, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0xc, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x4000) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) 2m34.419794259s ago: executing program 2 (id=314): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x3eba9afa58128dd4, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0x5, 0x100000000, 0xffffffffffffffff}) (async, rerun: 64) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x66000300) (rerun: 64) ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f00000000c0)=0xfffffff9) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000040)=0x1) (async, rerun: 32) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x10c40, 0x0) (rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async, rerun: 64) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x4020}, {0xffffffffffffffff, 0x604}, {0xffffffffffffffff, 0x2001}, {r4, 0x8100}, {0xffffffffffffffff, 0x48}, {r5, 0x204}], 0x6, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340), 0x8) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (rerun: 32) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r7, 0x7b1, &(0x7f0000000200)={0x0, 0x6, 0x13, 0x1}) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, r8, 0x1, 0x400021, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}}, {0x14, 0x2, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) 2m34.419331883s ago: executing program 0 (id=315): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) (async) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x103, 0x4, {0x0, 0x20, 0x1}}) syz_init_net_socket$ax25(0x3, 0x5, 0xc3) 2m34.339504634s ago: executing program 0 (id=316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0x40045731, &(0x7f0000000280)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'pim6reg0\x00', 0xc00}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="bb64753734e50b1e3f220065b7a35d32", 0x10) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CMP_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000180)) bind$ax25(r4, &(0x7f0000000080)={{0x3, @default, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x2) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0x40045731, &(0x7f0000000280)) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) (async) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'pim6reg0\x00', 0xc00}) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="bb64753734e50b1e3f220065b7a35d32", 0x10) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CMP_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x5, 0xcd) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000180)) (async) bind$ax25(r4, &(0x7f0000000080)={{0x3, @default, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) 2m34.268268581s ago: executing program 2 (id=317): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d004e24000006001c"], 0x2c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.empty_time\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000480)=""/247, 0xf7}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2b, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffff9}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x5}, @exit, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) 2m34.267855264s ago: executing program 1 (id=318): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10100) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0x80044dfe, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000000c0)=0xcd) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000000140)) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) fchdir(r3) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)={0x43c, 0x3f3, 0x8, 0x70bd29, 0x25dfdbff, {0x5, 0x2, 0x2d, [0x5, 0x9, 0x2d, 0x0, 0xae24, 0x8, 0x1a4, 0xffff, 0x5, 0x7, 0x1, 0x35b83d60, 0x6, 0x5, 0xde7, 0x8, 0x7, 0x10001, 0x1, 0x3, 0x40, 0x7fffffff, 0x4, 0x32da, 0x5, 0x2, 0x0, 0x1000, 0x2, 0xffffffff, 0x7, 0x7f, 0x3, 0x2, 0xc, 0x200, 0xa3c4, 0x7fff, 0x5, 0x2, 0x81, 0x5, 0x7, 0x8, 0x3, 0xfffffc01, 0x0, 0xfd5, 0xc7, 0x10, 0x1, 0x1, 0x3, 0x1, 0xfffff4d6, 0x1, 0x4, 0x9, 0x6, 0xb, 0xb4f1, 0x2, 0x9, 0x5], [0x5, 0x1, 0xcb8, 0x0, 0x0, 0x93, 0x3, 0x4, 0x378, 0x4, 0x401, 0x4, 0x1365, 0x1, 0x6a, 0x2, 0x0, 0x1, 0x9, 0xc, 0x4, 0x3, 0x7, 0xe72, 0x0, 0x8, 0x8, 0x9, 0xb1d, 0x8, 0x4, 0x8000, 0x5, 0x5121, 0xf55b, 0x404d, 0x0, 0x2, 0x7, 0x800, 0x1000, 0x3, 0xffffffff, 0xfffffff3, 0x4, 0x15e9d4e4, 0x20, 0x2, 0x7fff, 0x3, 0x5, 0x80, 0x80000000, 0x101, 0x9, 0x8000, 0xffffffff, 0x9, 0x4, 0x75e, 0x21, 0x6, 0x8], [0xfffffffe, 0x4, 0xfa, 0x3, 0xca6, 0x3, 0x9, 0xffff0001, 0xf, 0x9, 0x3, 0x80000001, 0x2e18, 0x8, 0x3, 0xac9d, 0x8, 0x2, 0xc084, 0x6, 0xf, 0x0, 0x4, 0x5, 0x2, 0x0, 0x2, 0x81, 0x1, 0xff, 0xc, 0x3ff, 0xed, 0x2, 0x9, 0x1, 0x5, 0x8, 0x3, 0x400, 0xfffffffb, 0x7, 0xffff7fff, 0xda, 0xf, 0xffff, 0x98ad, 0xff, 0x0, 0xabd, 0x10000, 0x1, 0x7, 0x10001, 0x3, 0x7, 0x2, 0xf90, 0x7, 0x4, 0x7fffffff, 0x9, 0x9, 0xe], [0x5, 0x2, 0x6, 0x80000001, 0xa1, 0x2b89ed03, 0x6, 0x44, 0x2, 0xeaa5, 0x9, 0xf, 0x0, 0x9, 0xffffffff, 0x401, 0xb5cc, 0xd4ab, 0xe75, 0x8000, 0x400, 0x5, 0x9, 0xf, 0xf09f, 0x59, 0x4, 0x7fffffff, 0xa, 0x40000000, 0x5, 0x5, 0xfffffff9, 0x7, 0x0, 0x247, 0x7, 0x20, 0x9, 0xfffff801, 0x2, 0x1, 0x5, 0x3, 0x9, 0x2, 0x7, 0x6, 0xfffffffe, 0x200, 0x3, 0x80000001, 0x0, 0x1, 0x200, 0x5, 0x0, 0x401, 0x1ff, 0x9, 0x2, 0x7f, 0x7, 0x6a], 0x1c, ['./cgroup.cpu/syz1\x00', '/dev/nbd#\x00']}, [""]}, 0x43c}, 0x1, 0x0, 0x0, 0x8080}, 0x800) openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0), 0xc0040, 0x0) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000700)=0xfffffffffffffffa) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x270040, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, r6, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0xa}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) writev(r3, &(0x7f0000000a80)=[{&(0x7f0000000900)="630641b8ae878d6b983c6b58075a94f15c6fae4de970f08e7d5cc4290f23ee8bc3fe625d19b2d6ef0cb5101913dbcf3236755bbe6d1b0b5fdf68554d667c00c1d86a489f6d7b17b2f731681f52fccf1e30bb5a3db818650375fd67c699f61a8f1bb41d924ce94f759ba86eb67d9669d8", 0x70}, {&(0x7f0000000980)="a3e6344c5bf38f1a4fa9023beeb8b7c6728854e9f8b65a16f59b85969f8435d58df4b7a4f86bfc559b49040da50c9f295598b452acd2ded5995af7836d60dc0eb21fab31e32b985ff53b68ebb47aabe31f68bee91ff132421cdbca3659136084c065923e8d4665e6b1b171861c1f9e48d6ca4310946d76545ef91db6ba172f450abf49760d5cec3eca416b4a3baae8725e50f6342809df43c4557ff22ae044370c26fea00650030645368b37d9a9ecb4a35fb48cbe5ea513d8f207360b01088643553201c6de60ff359fa84008ca7da1aaad21d2f3fd04340788e456770882ef", 0xe0}], 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), r5) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x6c, r8, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44805}, 0x240000c4) close(r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)=@ipv4_getroute={0x1c, 0x1a, 0x800, 0x70bd2b, 0x25dfdbfd, {0x2, 0x10, 0x0, 0x4, 0x1fe, 0x0, 0xc8, 0x1, 0x100}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x200448d4) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000d40), 0x406801, 0x0) fsetxattr$security_selinux(r9, &(0x7f0000000d80), &(0x7f0000000dc0)='system_u:object_r:crypt_device_t:s0\x00', 0x24, 0x1) ioctl$VIDIOC_G_AUDOUT(r5, 0x80345631, &(0x7f0000000e00)) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000f00)={'erspan0\x00', &(0x7f0000000e80)={'ip_vti0\x00', 0x0, 0x8, 0x10, 0x7fff, 0x4, {{0xd, 0x4, 0x1, 0x0, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @multicast2, {[@generic={0x10, 0x12, "a4845ea958e3108bfe0c69fea826a2ea"}, @timestamp_addr={0x44, 0xc, 0x66, 0x1, 0x3, [{@broadcast, 0x3}]}]}}}}}) sendmsg$nl_route(r10, &(0x7f00000010c0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)=@ipv6_getroute={0x134, 0x1a, 0x800, 0x70bd29, 0x25dfdbff, {0xa, 0x10, 0x80, 0xd7, 0xff, 0x0, 0xfe, 0xa, 0x200}, [@RTA_UID={0x8, 0x19, 0xee00}, @RTA_GATEWAY={0x14, 0x5, @empty}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0xa, 0x1, r11}}, @RTA_METRICS={0xde, 0x8, 0x0, 0x1, "2d4a9477d597e4de19194473be786499086f1dac4ab738a4d24af65ae463cc170c938db1be27a4a148b4f619f2834f55f97c1383e8415a2179c8bcf51c99b305ebb7b8e157363953b1f29f8ad6d185babf67ed0435271f1acb9c3b781455203491bc730223b96a5395bfe90f2ea2cd76a9457632ced61799159b197273bff815d5e1ffff9204f40475afeb158de31a1886e1134e05a610e6c0fe6a111a4ab6bc53f69fdcd9a27b5cb24982f74ec1f58d4a905e0535e1749fcf80ca45063059c592dbfb42a91851077bc117e075ddcc4de752fdf7c5f149b02aaa"}, @RTA_MARK={0x8, 0x10, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x81}]}, 0x134}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c804) close(r5) close(r3) 2m34.267221471s ago: executing program 2 (id=319): ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, 0x0) syz_emit_vhci(&(0x7f0000000f00)=ANY=[@ANYBLOB="02c93012000e00050033050a000f00"], 0x17) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x14, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}}, 0x40) 2m34.119707751s ago: executing program 2 (id=320): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000000c0)) r1 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r3, 0x541b, &(0x7f0000000000)={0x3, @null}) mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4023}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_NET_NS_PID={0x8}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000000)) 2m34.119419493s ago: executing program 3 (id=321): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'ip6_vti0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000540)="10030600e0ff020004004788aa96a13bb100001100007fca1a8519e3fc260c73c40b3d50d87ccb5969150990b56302253a31925cf9b648945fb8a149a71ca6a084b0bb42a4f8bbad1bd2d5f7772726289b8da0b4526bd20f65c65ed133bf63679aa9d56af225fe9342284de45e28377ab2a169d253d17808cc8df59d0b928ff6a6b9d5ca108a962fc4418d0f8fd3b15ec7bc5840c73baf26bb816941a7857508c7", 0xa1, 0x0, &(0x7f0000000140)={0x11, 0x4, r2, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpid() fcntl$setownex(r5, 0xf, &(0x7f0000000100)={0x2, r6}) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)=0x0) wait4(r7, 0x0, 0x80000000, 0x0) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2009}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="81000000823e20fc6f66f3526d82a31d026e642c6785f17dd465dc9b6928ba6b3870fed431d9f6744292af1d741ee195c4a5e060512d517faf39b5ef9ab1ee87282d3fe7202236139fe21fc4facbd1f7bb450dd88c8da11d55969e9837444b7b2bcd86736b41dd1d7204a140bd01aa8092ad37a6dbfc7647c0b47571ee3051ef8787a54f5edc10012c1f1c21f6e05a378416d702da03a93cbb0ec429715856bd1ca2ce865e234361071b37c921decb0e8aebf77bf4b7ae20d68911a6ff91b22e245fbc68945d1a6252ab89b44c87bcf5121d595a35a69f0887a9f3fa9c42ccf1de75c3fcf885f0ed0678fd06cae06494ad65714b8a07e339331366628f2e3de8413a5d47baa61c6ce0427e61993b622fb83590767c973747b674d9fe500ed7312826aa0d", @ANYRES16=r4, @ANYBLOB="00042cbd7000ffdbdf250e000000600004802400078008000400ab00000008000200b1000000080004000f00000008000100050000000900010073797a31000000002c00078008000200030000000800030009000000080001000900000008000400000000000800010003000000"], 0x74}, 0x1, 0x0, 0x0, 0xc044}, 0x801) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r8}, 0x10) r9 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) poll(&(0x7f0000000040)=[{r9, 0x830a}], 0x1, 0x0) ioctl$VIDIOC_ENUMSTD(r9, 0xc0485619, &(0x7f0000000600)={0xf50, 0x4, "4390ccd480a2de9e6ef14e8fb753f26bc15193268c1b113c", {0x5, 0x5}, 0xd1a}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltaction={0x28, 0x30, 0x9, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x28}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r11, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r12 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) 2m34.119232507s ago: executing program 0 (id=322): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) (async) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pwrite64(r3, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async) r4 = socket$rxrpc(0x21, 0x2, 0xa) (async) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000040)={0x22, ""/34}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) fsetxattr$security_capability(r4, &(0x7f0000000100), &(0x7f0000000180)=@v1={0x1000000, [{0xffffffff, 0x2f1d}]}, 0xc, 0x1) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x44, r6, 0x511, 0x4, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x44}}, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000480)=0xffffffff, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00'/20, @ANYRES32=r7, @ANYBLOB="000000008a20000014001a80100004800c0001800800010009000000"], 0x34}, 0x1, 0x0, 0x0, 0x54005}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_bond\x00'}) 2m34.009795024s ago: executing program 0 (id=323): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0100000000000000240000626f6e64a6b2000014000280050001000300000005001b1ee9ffffff0000000000"], 0x44}}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x20, 0x700, 0x9, 0x5, {{0x1a, 0x4, 0x2, 0x0, 0x68, 0x68, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010100, @empty, {[@end, @generic={0x86, 0xc, "e348e104014935ab5222"}, @rr={0x7, 0x1f, 0xd2, [@multicast1, @empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @local, @broadcast]}, @timestamp={0x44, 0xc, 0x51, 0x0, 0x0, [0x7, 0x1]}, @end, @lsrr={0x83, 0x7, 0x58, [@multicast1]}, @timestamp_addr={0x44, 0x14, 0xd7, 0x1, 0x7, [{@loopback, 0x2}, {@rand_addr=0x64010102, 0x3}]}]}}}}}) creat(0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) close(0xffffffffffffffff) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="043e1101"], 0x14) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1335f0a6) openat$vcsa(0xffffffffffffff9c, 0x0, 0x14b180, 0x0) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=@gettfilter={0x54, 0x2e, 0x800, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x7, 0xfff1}, {0x0, 0xe}, {0x1, 0x3}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0xc40}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x606b72fa}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4008) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000300)=r6}, 0x20) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) 2m33.909687258s ago: executing program 0 (id=324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500000000005a8c97b982451b58a2fc39d90000000001a9da000900010073797a30000000002c000000030a01020000000001000000010000000900010073797a30000000000900030095797a300000000030000000060a010400000000000000000100000008000b400000000008000a40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xa4}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r1, &(0x7f0000000340)=""/79, 0x4f) getdents(r1, 0x0, 0x3b) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000140)={0xf97cff8c, 0x8, 'SE Linux', "048f9e5384f6eb5e03c3caa57100f78a"}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x0, &(0x7f0000000080), &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m33.819298476s ago: executing program 3 (id=325): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000040)) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000040)) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) 2m33.819111675s ago: executing program 0 (id=326): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x24b5, 0x1be, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) creat(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x2b0, 0x268, 0x300, 0x2b0, 0x268, 0x3e8, 0x460, 0x460, 0x3e8, 0x460, 0x9, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @loopback, [], [], 'veth0_to_hsr\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x9401}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "1852aa405753905554ed000600ebaf5ffbbbcc15d0abddcb5ae29b3b8f45"}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0xa4203, 0x0) dup3(r2, r3, 0x80000) mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=prefer=statiF:0']) 2m33.818984459s ago: executing program 3 (id=327): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x2, 0x4, 0x3c8, 0x0, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3e}, @dev, 0x0, 0xff0000ff, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x108}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x41) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000001c0)={0x10000000, 0xf, 0xffffffffffffff85}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x68}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x9, 0x7, 0x1, 0xa9, 0xba55}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000100)={r3, 0x5f, "dc57082487c5a1f012953a810cda091c373b1fe89edd66bb26f0ebcb9bf43c81ba188bc995a219762120f4df4464b17f50318c5abcd5a7e9b88566b40726e9c5da726db01464d946a2efc32a1d14aade7413d7db367b1d0c0d55cf24a13a34"}, &(0x7f0000000180)=0x67) 2m33.718982034s ago: executing program 3 (id=328): r0 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0x286f, 0x800, 0x2, 0x3bb}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440)='./bus/file0\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m33.713274185s ago: executing program 2 (id=329): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) mkdir(&(0x7f0000000040)='./file0\x00', 0x20) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f00000001c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m33.648562565s ago: executing program 3 (id=330): arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1}) lseek(r0, 0x8, 0x4) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, r2, &(0x7f00000000c0)={0x8, 0x3, 0x1, 0x4}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"782fa8913241b1ccdab45c8ee30716ef", 0x0, 0x0, {0x7fffffff, 0x400}, {0x1, 0x9}, 0x7fffffff, [0x80000000, 0xaf, 0x48, 0x4, 0x0, 0x2, 0x5, 0x80000001, 0x7, 0x8, 0x8106, 0x0, 0xad3, 0x3, 0xc6, 0x204000]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000400)={"b059d2b8aa65046c8818e01e731bc38d", r4, r5, {0xccd, 0x1}, {0x9bd, 0x3}, 0xff, [0x10, 0xfffffffffffffffb, 0x4, 0xac1, 0x100, 0x40, 0x2, 0x2, 0x5, 0xfffffffffffffffc, 0xffffffffffffffc0, 0x1, 0x5aefdb7a, 0x8, 0x9, 0x100000000]}) (async) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r6, &(0x7f0000000500)="584da8421a48d1555ac7090cfd33fd686f5979a42b9d666414f14eee4d20df88330306463f91b01e811dfe0bee6e0b5c2189fde9d752f700a57b2748ef8e885ea6106634192b4eeefee3793ce012de91c42892175dad5c43a6d2d5e4b6b5c27efdbc", 0x62) (async) r7 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000580), 0x80480, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x60, &(0x7f0000000640)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8}}], [{@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x52, 0x34, 0x38, 0x34, 0x65, 0x85, 0x66, 0x35], 0x2d, [0x30, 0x0, 0x63, 0x65], 0x2d, [0x31, 0x33, 0x64, 0x65], 0x2d, [0x63, 0x63, 0x30, 0x63], 0x2d, [0x33, 0x63, 0x64, 0x62, 0x31, 0x35, 0x31, 0x38]}}}]}}) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000740)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000840)={r8}) close(r6) (async) ioctl$SNDRV_PCM_IOCTL_FORWARD(r7, 0x40084149, &(0x7f0000000880)=0xffffffffffffffff) sendto$unix(r7, &(0x7f00000008c0)="a8cb35c9ad7c6d32b1e0afa37fb2cf5a0ca7a451f6d1d6e275f6808f63c70d7a16e97e8c5315fd56fbb74d41ba43b762b015adebdf35678da0eb709d066c0276678ecd96145061167d623055053e6128eec869a95dbc0f2e0e8e7355d9bf1a48976716e9db4d710f2571f1276ae06a708a36597c8dfb7bd6d21f556373c16896bb7bd9cc19d21a7520b1b47a48d26b94442f91b98bac693ab794a598882a0623307d76143aeeb6788041335dba8134545beeca15ec628927c8db68d9dda5c796ffcf5ef1acd50eac8b58037577", 0xcd, 0x4000005, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000009c0)={@in6={{0xa, 0x4e22, 0x1, @loopback, 0x3363}}, 0x0, 0x0, 0x23, 0x0, "3310a7bd12d6bd33b0ab86f8836645d02aa1a7bb66b0a3f5d387ad276f8ae10595e84bd1afa6d63c606ff25edaba7ac03bf90e06f65e7cdb0cc13374f8781939535b4b2e2bd1087ee2f375b653218917"}, 0xd8) (async) mount$9p_fd(0x0, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x0, &(0x7f0000000b40)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '\'-'}}, {@uname={'uname', 0x3d, 'group_id'}}], [{@uid_lt={'uid<', r2}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@uid_gt={'uid>', r2}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000c40)={&(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r7, 0xc00464af, &(0x7f0000000cc0)=r9) (async) r10 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000d00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0xae, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x6, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0xe, 0x4}}]}}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x250, 0x81, 0xb, 0x9, 0xff, 0x2}, 0xc, &(0x7f0000000d80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0xb, 0x4, 0xd}]}, 0x4, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x809}}]}) syz_usb_control_io$printer(r10, &(0x7f0000001080)={0x14, &(0x7f0000000f40)={0x20, 0x21, 0x18, {0x18, 0x8, "d7b3c70406d4eb1c2bf9b4b73030139e5a612b2d5c18"}}, &(0x7f0000000f80)={0x0, 0x3, 0xf9, @string={0xf9, 0x3, "3b360ef5b167f56c881af08e4198515b35e13f67de2302b676ac4b39cbd6192d8ab54057b59f563ec6b157d851dd708b4af477a2bd31895be0bc38ba86086ed58c5fdc094c592f45aee0a447fc132c9b6e0528afa15127c7de5c882ba8e8acc4f1a148f0f5e21ed3c8ef0b4c3c6354f516da1b9e59913494b57ef68ecb7f59d263a638afcd79747cd2fc7b9317d2590cbc94149a2f999fc333f010dbd09ea214d88316aab8cb4f31bb548ffbc8e864eb7699fcac66116fb14883a6815387f0feaa512ea8cd9183598f54fc0de5024d57e50a6ad9cb8a2172ef5c0795cf927aaeaa4b02ebe7120e003fd321057850320ddd0f80daad954f"}}}, &(0x7f0000001340)={0x34, &(0x7f00000010c0)={0x20, 0x9, 0x6f, "357a3032ccbe2397cbdef43793f9bdba7cd1fd176be81f4ec77c9263a91d063ab8b2e678518508ee0e441c0326c233f759c72a1441473a3ea174dc1510f4581a6f43c75e49c68637eb5a2f6af5cb98c4bd85848fb408cee1aa8d3421784dbd83d6efeef66d50915f757782b52e39ab"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000011c0)={0x20, 0x0, 0xd8, {0xd6, "f45f4c964c4e749644e492e2e5fb764cd8e0dcb7722d7d6ff75b1d849e33a4c4095f5317c29f53422803efd47dc5f6be501321dba8dc551cad5881f43e3559304f40f524700954b08343dbd0a97bb149c1b55865988ac9d2097311bcda62c8191fcbb3a810b1e5fbea5cf7cef687f22d579aee96c281d016077b9cdeb86c12676b681c544736bd9668ad7fb6f045db9fe5c85bdd2b6933ae11e5a49c2828538a73e3bba44bb2943736100802f280010728dc0d61aefcfa4d5f972e07f11427ce0d8f2f1a163356699a2894464108f774d06ff4bb61b3"}}, &(0x7f00000012c0)={0x20, 0x1, 0x1, 0x80}, &(0x7f0000001300)={0x20, 0x0, 0x1, 0xff}}) (async) r11 = accept4$vsock_stream(r7, &(0x7f0000001380)={0x28, 0x0, 0x0, @local}, 0x10, 0x800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r11, 0x8983, &(0x7f00000013c0)={0x6, 'batadv_slave_1\x00', {0x7ff}}) (async) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000001400)={0x3}) (async) r12 = syz_open_procfs(r1, &(0x7f0000001440)='cmdline\x00') ioctl$DRM_IOCTL_MODE_GETFB2(r12, 0xc06864ce, &(0x7f0000001480)={r9, 0x8, 0x11, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0], [0x6a8372bd, 0xfff, 0x9, 0xcd], [0x3, 0xe37, 0x1, 0xd584], [0x4555, 0x0, 0x3d71, 0xfffffffffffffffb]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f0000001580)={r9, 0xfffffffa, 0x6d, 0x750e, 0x2, [r13, 0x0, r8], [0x8, 0x28000, 0x1, 0x2], [0x7, 0x4, 0x8, 0x11ca732], [0x100000000, 0x4, 0x9, 0x2]}) 2m33.598097594s ago: executing program 2 (id=331): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x4) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x1, @local, @local, {[], {{0x3, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x80, {[@window={0x3, 0x3, 0xda}]}}}}}}}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGRDESC(r2, 0x4008c002, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m18.554928585s ago: executing program 32 (id=326): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x24b5, 0x1be, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) creat(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x2b0, 0x268, 0x300, 0x2b0, 0x268, 0x3e8, 0x460, 0x460, 0x3e8, 0x460, 0x9, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @loopback, [], [], 'veth0_to_hsr\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x9401}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "1852aa405753905554ed000600ebaf5ffbbbcc15d0abddcb5ae29b3b8f45"}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0xa4203, 0x0) dup3(r2, r3, 0x80000) mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=prefer=statiF:0']) 2m18.509421045s ago: executing program 33 (id=318): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10100) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0x80044dfe, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000000c0)=0xcd) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000000140)) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) fchdir(r3) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)={0x43c, 0x3f3, 0x8, 0x70bd29, 0x25dfdbff, {0x5, 0x2, 0x2d, [0x5, 0x9, 0x2d, 0x0, 0xae24, 0x8, 0x1a4, 0xffff, 0x5, 0x7, 0x1, 0x35b83d60, 0x6, 0x5, 0xde7, 0x8, 0x7, 0x10001, 0x1, 0x3, 0x40, 0x7fffffff, 0x4, 0x32da, 0x5, 0x2, 0x0, 0x1000, 0x2, 0xffffffff, 0x7, 0x7f, 0x3, 0x2, 0xc, 0x200, 0xa3c4, 0x7fff, 0x5, 0x2, 0x81, 0x5, 0x7, 0x8, 0x3, 0xfffffc01, 0x0, 0xfd5, 0xc7, 0x10, 0x1, 0x1, 0x3, 0x1, 0xfffff4d6, 0x1, 0x4, 0x9, 0x6, 0xb, 0xb4f1, 0x2, 0x9, 0x5], [0x5, 0x1, 0xcb8, 0x0, 0x0, 0x93, 0x3, 0x4, 0x378, 0x4, 0x401, 0x4, 0x1365, 0x1, 0x6a, 0x2, 0x0, 0x1, 0x9, 0xc, 0x4, 0x3, 0x7, 0xe72, 0x0, 0x8, 0x8, 0x9, 0xb1d, 0x8, 0x4, 0x8000, 0x5, 0x5121, 0xf55b, 0x404d, 0x0, 0x2, 0x7, 0x800, 0x1000, 0x3, 0xffffffff, 0xfffffff3, 0x4, 0x15e9d4e4, 0x20, 0x2, 0x7fff, 0x3, 0x5, 0x80, 0x80000000, 0x101, 0x9, 0x8000, 0xffffffff, 0x9, 0x4, 0x75e, 0x21, 0x6, 0x8], [0xfffffffe, 0x4, 0xfa, 0x3, 0xca6, 0x3, 0x9, 0xffff0001, 0xf, 0x9, 0x3, 0x80000001, 0x2e18, 0x8, 0x3, 0xac9d, 0x8, 0x2, 0xc084, 0x6, 0xf, 0x0, 0x4, 0x5, 0x2, 0x0, 0x2, 0x81, 0x1, 0xff, 0xc, 0x3ff, 0xed, 0x2, 0x9, 0x1, 0x5, 0x8, 0x3, 0x400, 0xfffffffb, 0x7, 0xffff7fff, 0xda, 0xf, 0xffff, 0x98ad, 0xff, 0x0, 0xabd, 0x10000, 0x1, 0x7, 0x10001, 0x3, 0x7, 0x2, 0xf90, 0x7, 0x4, 0x7fffffff, 0x9, 0x9, 0xe], [0x5, 0x2, 0x6, 0x80000001, 0xa1, 0x2b89ed03, 0x6, 0x44, 0x2, 0xeaa5, 0x9, 0xf, 0x0, 0x9, 0xffffffff, 0x401, 0xb5cc, 0xd4ab, 0xe75, 0x8000, 0x400, 0x5, 0x9, 0xf, 0xf09f, 0x59, 0x4, 0x7fffffff, 0xa, 0x40000000, 0x5, 0x5, 0xfffffff9, 0x7, 0x0, 0x247, 0x7, 0x20, 0x9, 0xfffff801, 0x2, 0x1, 0x5, 0x3, 0x9, 0x2, 0x7, 0x6, 0xfffffffe, 0x200, 0x3, 0x80000001, 0x0, 0x1, 0x200, 0x5, 0x0, 0x401, 0x1ff, 0x9, 0x2, 0x7f, 0x7, 0x6a], 0x1c, ['./cgroup.cpu/syz1\x00', '/dev/nbd#\x00']}, [""]}, 0x43c}, 0x1, 0x0, 0x0, 0x8080}, 0x800) openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0), 0xc0040, 0x0) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000700)=0xfffffffffffffffa) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x270040, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, r6, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0xa}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) writev(r3, &(0x7f0000000a80)=[{&(0x7f0000000900)="630641b8ae878d6b983c6b58075a94f15c6fae4de970f08e7d5cc4290f23ee8bc3fe625d19b2d6ef0cb5101913dbcf3236755bbe6d1b0b5fdf68554d667c00c1d86a489f6d7b17b2f731681f52fccf1e30bb5a3db818650375fd67c699f61a8f1bb41d924ce94f759ba86eb67d9669d8", 0x70}, {&(0x7f0000000980)="a3e6344c5bf38f1a4fa9023beeb8b7c6728854e9f8b65a16f59b85969f8435d58df4b7a4f86bfc559b49040da50c9f295598b452acd2ded5995af7836d60dc0eb21fab31e32b985ff53b68ebb47aabe31f68bee91ff132421cdbca3659136084c065923e8d4665e6b1b171861c1f9e48d6ca4310946d76545ef91db6ba172f450abf49760d5cec3eca416b4a3baae8725e50f6342809df43c4557ff22ae044370c26fea00650030645368b37d9a9ecb4a35fb48cbe5ea513d8f207360b01088643553201c6de60ff359fa84008ca7da1aaad21d2f3fd04340788e456770882ef", 0xe0}], 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), r5) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x6c, r8, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44805}, 0x240000c4) close(r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)=@ipv4_getroute={0x1c, 0x1a, 0x800, 0x70bd2b, 0x25dfdbfd, {0x2, 0x10, 0x0, 0x4, 0x1fe, 0x0, 0xc8, 0x1, 0x100}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x200448d4) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000d40), 0x406801, 0x0) fsetxattr$security_selinux(r9, &(0x7f0000000d80), &(0x7f0000000dc0)='system_u:object_r:crypt_device_t:s0\x00', 0x24, 0x1) ioctl$VIDIOC_G_AUDOUT(r5, 0x80345631, &(0x7f0000000e00)) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000f00)={'erspan0\x00', &(0x7f0000000e80)={'ip_vti0\x00', 0x0, 0x8, 0x10, 0x7fff, 0x4, {{0xd, 0x4, 0x1, 0x0, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @multicast2, {[@generic={0x10, 0x12, "a4845ea958e3108bfe0c69fea826a2ea"}, @timestamp_addr={0x44, 0xc, 0x66, 0x1, 0x3, [{@broadcast, 0x3}]}]}}}}}) sendmsg$nl_route(r10, &(0x7f00000010c0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)=@ipv6_getroute={0x134, 0x1a, 0x800, 0x70bd29, 0x25dfdbff, {0xa, 0x10, 0x80, 0xd7, 0xff, 0x0, 0xfe, 0xa, 0x200}, [@RTA_UID={0x8, 0x19, 0xee00}, @RTA_GATEWAY={0x14, 0x5, @empty}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0xa, 0x1, r11}}, @RTA_METRICS={0xde, 0x8, 0x0, 0x1, "2d4a9477d597e4de19194473be786499086f1dac4ab738a4d24af65ae463cc170c938db1be27a4a148b4f619f2834f55f97c1383e8415a2179c8bcf51c99b305ebb7b8e157363953b1f29f8ad6d185babf67ed0435271f1acb9c3b781455203491bc730223b96a5395bfe90f2ea2cd76a9457632ced61799159b197273bff815d5e1ffff9204f40475afeb158de31a1886e1134e05a610e6c0fe6a111a4ab6bc53f69fdcd9a27b5cb24982f74ec1f58d4a905e0535e1749fcf80ca45063059c592dbfb42a91851077bc117e075ddcc4de752fdf7c5f149b02aaa"}, @RTA_MARK={0x8, 0x10, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x81}]}, 0x134}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c804) close(r5) close(r3) 2m18.495698603s ago: executing program 34 (id=331): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x4) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x1, @local, @local, {[], {{0x3, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x80, {[@window={0x3, 0x3, 0xda}]}}}}}}}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGRDESC(r2, 0x4008c002, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m18.333425539s ago: executing program 35 (id=330): arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1}) lseek(r0, 0x8, 0x4) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, r2, &(0x7f00000000c0)={0x8, 0x3, 0x1, 0x4}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"782fa8913241b1ccdab45c8ee30716ef", 0x0, 0x0, {0x7fffffff, 0x400}, {0x1, 0x9}, 0x7fffffff, [0x80000000, 0xaf, 0x48, 0x4, 0x0, 0x2, 0x5, 0x80000001, 0x7, 0x8, 0x8106, 0x0, 0xad3, 0x3, 0xc6, 0x204000]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000400)={"b059d2b8aa65046c8818e01e731bc38d", r4, r5, {0xccd, 0x1}, {0x9bd, 0x3}, 0xff, [0x10, 0xfffffffffffffffb, 0x4, 0xac1, 0x100, 0x40, 0x2, 0x2, 0x5, 0xfffffffffffffffc, 0xffffffffffffffc0, 0x1, 0x5aefdb7a, 0x8, 0x9, 0x100000000]}) (async) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r6, &(0x7f0000000500)="584da8421a48d1555ac7090cfd33fd686f5979a42b9d666414f14eee4d20df88330306463f91b01e811dfe0bee6e0b5c2189fde9d752f700a57b2748ef8e885ea6106634192b4eeefee3793ce012de91c42892175dad5c43a6d2d5e4b6b5c27efdbc", 0x62) (async) r7 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000580), 0x80480, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x60, &(0x7f0000000640)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8}}], [{@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x52, 0x34, 0x38, 0x34, 0x65, 0x85, 0x66, 0x35], 0x2d, [0x30, 0x0, 0x63, 0x65], 0x2d, [0x31, 0x33, 0x64, 0x65], 0x2d, [0x63, 0x63, 0x30, 0x63], 0x2d, [0x33, 0x63, 0x64, 0x62, 0x31, 0x35, 0x31, 0x38]}}}]}}) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000740)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000840)={r8}) close(r6) (async) ioctl$SNDRV_PCM_IOCTL_FORWARD(r7, 0x40084149, &(0x7f0000000880)=0xffffffffffffffff) sendto$unix(r7, &(0x7f00000008c0)="a8cb35c9ad7c6d32b1e0afa37fb2cf5a0ca7a451f6d1d6e275f6808f63c70d7a16e97e8c5315fd56fbb74d41ba43b762b015adebdf35678da0eb709d066c0276678ecd96145061167d623055053e6128eec869a95dbc0f2e0e8e7355d9bf1a48976716e9db4d710f2571f1276ae06a708a36597c8dfb7bd6d21f556373c16896bb7bd9cc19d21a7520b1b47a48d26b94442f91b98bac693ab794a598882a0623307d76143aeeb6788041335dba8134545beeca15ec628927c8db68d9dda5c796ffcf5ef1acd50eac8b58037577", 0xcd, 0x4000005, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000009c0)={@in6={{0xa, 0x4e22, 0x1, @loopback, 0x3363}}, 0x0, 0x0, 0x23, 0x0, "3310a7bd12d6bd33b0ab86f8836645d02aa1a7bb66b0a3f5d387ad276f8ae10595e84bd1afa6d63c606ff25edaba7ac03bf90e06f65e7cdb0cc13374f8781939535b4b2e2bd1087ee2f375b653218917"}, 0xd8) (async) mount$9p_fd(0x0, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x0, &(0x7f0000000b40)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '\'-'}}, {@uname={'uname', 0x3d, 'group_id'}}], [{@uid_lt={'uid<', r2}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@uid_gt={'uid>', r2}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000c40)={&(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r7, 0xc00464af, &(0x7f0000000cc0)=r9) (async) r10 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000d00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0xae, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x6, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0xe, 0x4}}]}}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x250, 0x81, 0xb, 0x9, 0xff, 0x2}, 0xc, &(0x7f0000000d80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0xb, 0x4, 0xd}]}, 0x4, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x809}}]}) syz_usb_control_io$printer(r10, &(0x7f0000001080)={0x14, &(0x7f0000000f40)={0x20, 0x21, 0x18, {0x18, 0x8, "d7b3c70406d4eb1c2bf9b4b73030139e5a612b2d5c18"}}, &(0x7f0000000f80)={0x0, 0x3, 0xf9, @string={0xf9, 0x3, "3b360ef5b167f56c881af08e4198515b35e13f67de2302b676ac4b39cbd6192d8ab54057b59f563ec6b157d851dd708b4af477a2bd31895be0bc38ba86086ed58c5fdc094c592f45aee0a447fc132c9b6e0528afa15127c7de5c882ba8e8acc4f1a148f0f5e21ed3c8ef0b4c3c6354f516da1b9e59913494b57ef68ecb7f59d263a638afcd79747cd2fc7b9317d2590cbc94149a2f999fc333f010dbd09ea214d88316aab8cb4f31bb548ffbc8e864eb7699fcac66116fb14883a6815387f0feaa512ea8cd9183598f54fc0de5024d57e50a6ad9cb8a2172ef5c0795cf927aaeaa4b02ebe7120e003fd321057850320ddd0f80daad954f"}}}, &(0x7f0000001340)={0x34, &(0x7f00000010c0)={0x20, 0x9, 0x6f, "357a3032ccbe2397cbdef43793f9bdba7cd1fd176be81f4ec77c9263a91d063ab8b2e678518508ee0e441c0326c233f759c72a1441473a3ea174dc1510f4581a6f43c75e49c68637eb5a2f6af5cb98c4bd85848fb408cee1aa8d3421784dbd83d6efeef66d50915f757782b52e39ab"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000011c0)={0x20, 0x0, 0xd8, {0xd6, "f45f4c964c4e749644e492e2e5fb764cd8e0dcb7722d7d6ff75b1d849e33a4c4095f5317c29f53422803efd47dc5f6be501321dba8dc551cad5881f43e3559304f40f524700954b08343dbd0a97bb149c1b55865988ac9d2097311bcda62c8191fcbb3a810b1e5fbea5cf7cef687f22d579aee96c281d016077b9cdeb86c12676b681c544736bd9668ad7fb6f045db9fe5c85bdd2b6933ae11e5a49c2828538a73e3bba44bb2943736100802f280010728dc0d61aefcfa4d5f972e07f11427ce0d8f2f1a163356699a2894464108f774d06ff4bb61b3"}}, &(0x7f00000012c0)={0x20, 0x1, 0x1, 0x80}, &(0x7f0000001300)={0x20, 0x0, 0x1, 0xff}}) (async) r11 = accept4$vsock_stream(r7, &(0x7f0000001380)={0x28, 0x0, 0x0, @local}, 0x10, 0x800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r11, 0x8983, &(0x7f00000013c0)={0x6, 'batadv_slave_1\x00', {0x7ff}}) (async) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000001400)={0x3}) (async) r12 = syz_open_procfs(r1, &(0x7f0000001440)='cmdline\x00') ioctl$DRM_IOCTL_MODE_GETFB2(r12, 0xc06864ce, &(0x7f0000001480)={r9, 0x8, 0x11, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0], [0x6a8372bd, 0xfff, 0x9, 0xcd], [0x3, 0xe37, 0x1, 0xd584], [0x4555, 0x0, 0x3d71, 0xfffffffffffffffb]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f0000001580)={r9, 0xfffffffa, 0x6d, 0x750e, 0x2, [r13, 0x0, r8], [0x8, 0x28000, 0x1, 0x2], [0x7, 0x4, 0x8, 0x11ca732], [0x100000000, 0x4, 0x9, 0x2]}) 1m34.266147325s ago: executing program 4 (id=359): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001400), 0x1, 0x2001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f0000000380)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000001440)=""/1) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xc8601, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/296, @ANYRES64=0x3, @ANYBLOB="050000000000000001000000000000000500000000000000050000000000000002000000f70d000003000000000000000600000000000000280000000000000000000000000000000000000045f9262bca0000000000000008000000ff000000070000000010000003000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="e5000000060000000000000000000000000000000bd700000000000001000000010000002d00000000000000"], 0xb0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x3, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x10000, 0xffffffffffffffff}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x5e8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x74}}, 0x0) 1m33.906342599s ago: executing program 4 (id=362): socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(0x0, 0x6000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000040)={&(0x7f0000000000)="6fe99bc42f70b95211954d8cf28bb2a9af4ebe2745ea0887e12f92a853", 0x0, &(0x7f00000000c0)="6464ad48aafc0aa32212aafe4ce5cfa8d6c5820b460a0714542ef8492642b0c7e61c79998540ebf8e865a77a2b9882a91ad8a071c9328e47eb6584d4540e3b49cccf16167052c811bd8454473b4ef66e63cf2a4bf7af825c25f365d1de15211511d49d24b756ec3bf41709ed601e3cfd13335dd40e315168734e34f2ebe1ba09d5b9ac6db2f51437038e37a5eed96f1dd65f95189fe4a128f1cd0094d6ef195d07e586", 0x0, 0x3}, 0xfffffffffffffeda) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d80), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)={0x34, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}}, 0x4810) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=@newtclass={0x44c, 0x28, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xd, 0xffff}, {0x4, 0x8}, {0x3, 0x8}}, [@c_cbq={{0x8}, {0x420, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x2, 0xfffff3af, 0x1, 0x100, 0x9, 0x9, 0x1d, 0x6, 0x1e71, 0x80000001, 0x8, 0x101, 0x100, 0x4, 0x4, 0x401, 0xfffffffb, 0xc0, 0xd68, 0x6, 0x0, 0x4, 0xff, 0x7, 0x100, 0x5, 0x2, 0x1, 0xd, 0x2b5fe3c2, 0x3ff, 0xe, 0x8, 0xa319, 0x9, 0x5, 0x3, 0x80e5, 0x4010000, 0xa6000, 0x2, 0x41f9, 0x2, 0xd82, 0x6, 0x6, 0x3, 0x5, 0xdf2, 0x400, 0x101, 0x4, 0xffffff15, 0x101, 0x6, 0x8, 0x5, 0x7b7, 0x2, 0x4, 0xe18, 0x2, 0x4, 0x5, 0x4, 0x8, 0x0, 0x4, 0x1, 0x4, 0x8, 0x5, 0x7ff, 0x0, 0x14, 0x3, 0x9, 0x6, 0x0, 0x6, 0xa729, 0x3, 0x2, 0x3, 0x7, 0x1, 0x1, 0x8, 0x2, 0x2, 0xb61, 0x2, 0xc389, 0x1, 0xfff, 0x7, 0x1, 0x1ff, 0x9, 0x2, 0x5066296c, 0x2, 0x0, 0x1, 0x9, 0x6d1, 0x80000000, 0x4, 0x6, 0xe2, 0x6, 0x2, 0x2, 0x7, 0xb5, 0x80, 0x7, 0x5, 0x7fff, 0x1, 0x5, 0x4, 0x10000, 0x8, 0x4, 0x54, 0x9, 0x0, 0x8, 0x47e, 0xffffffff, 0x2010, 0x38, 0x84, 0x208e, 0x2, 0x6, 0x8, 0x88f2, 0x158, 0x2, 0x0, 0x2f1fe04a, 0xbd, 0x9, 0x101, 0xa00000, 0x2, 0xfffffffd, 0x0, 0xc8c, 0x703b8a94, 0x7, 0x8, 0x6, 0x9, 0x5c, 0x63, 0x5, 0x100, 0x1, 0x9, 0x1, 0x200, 0x10001, 0xed, 0x6, 0x0, 0x7, 0x368, 0x6, 0x2, 0x2, 0x2, 0x9, 0x10000, 0x0, 0x1, 0x2, 0x6, 0x6, 0x1, 0x0, 0x1f97, 0x7, 0x1, 0xf, 0x2, 0x3, 0x7, 0x9, 0xfffffffb, 0x0, 0x81, 0x8, 0x9, 0x7, 0x80000000, 0x0, 0x400, 0x2, 0x2000000, 0x6, 0x0, 0x81, 0x88, 0x5, 0x8, 0xdca, 0x9, 0x36ea, 0xffffffff, 0xe8, 0xffff, 0x10, 0x4, 0x3, 0x2ac, 0x2, 0x80000000, 0xfd, 0xc0000, 0x80, 0x4, 0x80000000, 0x9, 0x6b54, 0xada, 0x0, 0xaf, 0x800, 0x9, 0x6a12, 0x400, 0x5, 0x5, 0x9, 0xae, 0x10000000, 0x5, 0x9, 0x5, 0x40, 0x6, 0x9, 0x5, 0x2, 0x9, 0x7, 0xd94b, 0x14a, 0x7, 0x8, 0x0, 0x8, 0x9]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x29, 0x2, 0x1e, 0x2, 0x711dfbfa, 0x5, 0x8, 0x2}}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x48}, 0x2000000) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 1m33.028996076s ago: executing program 4 (id=372): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000fbd1df2521000000050020000000000009001f0070687931000000000c0005"], 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000000) 1m33.02871736s ago: executing program 4 (id=373): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000400)=""/243) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x39, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1m32.548723637s ago: executing program 4 (id=377): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r2}, 0x4) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r4, 0xedaa7000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xae5b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m32.54830166s ago: executing program 4 (id=378): socket$inet(0x2, 0x3, 0x2) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4050) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) io_setup(0xa, &(0x7f0000000240)=0x0) io_getevents(r2, 0x1, 0x42, &(0x7f0000000340), &(0x7f0000000000)={0x0, 0x3938700}) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2c10", 0x2}, {&(0x7f0000000140)="7957c03f6be6981d796cfd996523f36bd904adadeac8c1f78b01517d082126f70eb5b1fe8a02fc2ad7c035b9633c4d72434f55f147e8f1af43cad94c52cf4b63604e33ab10d29c4c47b16d88829a5efd16d057e5b778e509ca72fd33512212c38305f41d225bbdb444d6a9cafacdcd9b15b97a6b1da62cb4ee7d969fc9087fbb7062983534dd5df5285e086c78351b9a8d", 0x91}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) mprotect(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x0) syz_emit_ethernet(0x36, &(0x7f00000008c0)={@link_local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) 1m17.494260401s ago: executing program 36 (id=378): socket$inet(0x2, 0x3, 0x2) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4050) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) io_setup(0xa, &(0x7f0000000240)=0x0) io_getevents(r2, 0x1, 0x42, &(0x7f0000000340), &(0x7f0000000000)={0x0, 0x3938700}) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2c10", 0x2}, {&(0x7f0000000140)="7957c03f6be6981d796cfd996523f36bd904adadeac8c1f78b01517d082126f70eb5b1fe8a02fc2ad7c035b9633c4d72434f55f147e8f1af43cad94c52cf4b63604e33ab10d29c4c47b16d88829a5efd16d057e5b778e509ca72fd33512212c38305f41d225bbdb444d6a9cafacdcd9b15b97a6b1da62cb4ee7d969fc9087fbb7062983534dd5df5285e086c78351b9a8d", 0x91}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) mprotect(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x0) syz_emit_ethernet(0x36, &(0x7f00000008c0)={@link_local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) 29.64857644s ago: executing program 5 (id=868): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write(r0, &(0x7f0000000180)="2cd889f0253e14f3", 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000240)={0x2a, 0x6, 0x0, {0x1, 0x1, 0x1, 0x0, '}'}}, 0x2a) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b5738", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000008ac0)=ANY=[], 0xff8}, 0x1, 0x0, 0x0, 0x20000040}, 0x4005) splice(r3, 0x0, r4, 0x0, 0x714f, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r3, 0x0) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 28.448337541s ago: executing program 5 (id=881): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x40) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000280)={0x1, 0x5, 0x1, &(0x7f0000000240)={0x15, "c7e12af15a4cf8e28532198f1dd3d72c7074e604ae040385df097b0790797c3b09"}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0xfffffff7}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xd, 0x101301) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xdc79}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}, {}, {0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x10}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe, 0x0, 0x0, 0x2}, {}, {}, {}, {0x2}, {0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500100001a00010000000000000000007f0000010000000000000000000000000000000000000000000000000000000100000000000000000000f00000000000", @ANYRESOCT=0x0, @ANYRES8=r1, @ANYBLOB="fe800000000000000000000000000000000004d433000000e000000100000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000e388000000000000000000000000000000000000000000000000000040000000000000000a00000300000000000000005d001400636d61632861657329"], 0x150}}, 0x0) 28.387472346s ago: executing program 5 (id=884): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x204100, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000040)=0x1e6e, 0x4) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x80000003, 0x1, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0x4000000}}}}]}, 0x78}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x11, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x2}, @map_val={0x18, 0x7, 0x2, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x63}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000180)='GPL\x00', 0xffff, 0x76, &(0x7f00000001c0)=""/118, 0x41100, 0x2f3285b93a09958a, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x6}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000280)=[{0x2, 0x1, 0xb, 0xa}, {0x5, 0x4, 0xf, 0x5}, {0x1, 0x4, 0x2, 0x4}], 0x10, 0x6239, @value=r7}, 0x94) fsetxattr$security_ima(r0, &(0x7f0000002dc0), &(0x7f0000002e00)=@sha1={0x1, "400f01435805c004daec905b1fbcc48c89bcbe84"}, 0x15, 0x3) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa000, 0x0, &(0x7f0000ff6000/0xa000)=nil) r8 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r8, 0x110, 0x2, &(0x7f0000000140)='\')\x00', 0x3) 28.047273132s ago: executing program 5 (id=888): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000240), 0x200440, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) setitimer(0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000dd2cc137d6ba56de5f0000000000000000000000000000005776e7450886381a5dd89578565466b2e69ecec9f71ec7d45adb536d902768ca3d6edd948bb2e33a3ef5880b5c68c731b375ff3be7267f6aa6d05eda8ba9d7d949e53370fc0c6a439a30373d5f923e2425fa87e956cfe1960538ae0f7418a0facfcba40e58aae6cf77da8d5054a0e9fb574b67b2fbeca7d620af18706930cc8ff81e861b62d56d278075a1d5e0498d42ff0c22d897baa000"/194], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) munlock(&(0x7f00005fc000/0x4000)=nil, 0x4000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mem_connect\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) 27.608207842s ago: executing program 5 (id=890): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x4000}) (async) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)={'trans=rdma,', {}, 0x2c, {[{@common=@privport}]}}) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0500000800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000030000000100"/28], 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x2f, 0xb, 0xbb, 0x9, 0x14, @remote, @mcast1, 0x10, 0x1, 0x7f, 0x3}}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x11}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x100, '\x00', r2, r3, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000079184000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r8, 0x0, 0x15, &(0x7f0000000000)=0x5, 0x4) 27.128477216s ago: executing program 5 (id=894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0xc) (async, rerun: 64) r2 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) (rerun: 64) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) (async, rerun: 64) io_uring_enter(r2, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0xc0, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x40, 0x6, "961b5480684136587ad744145f556e042759ee17848e03fb97745035a996641c8d77b862610c963698021f2cc49e6de471fad1a2f78a945133775a68"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x35, 0x6, "e41c1f5f69fa054783a02772de9ab7aaa4be7cfa9419eab58ebe5aafc463e26dac7b6f3b1216825b491be8d8fa798638b2"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x78, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x180}}, 0x0) 27.04549954s ago: executing program 37 (id=894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0xc) (async, rerun: 64) r2 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) (rerun: 64) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) (async, rerun: 64) io_uring_enter(r2, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0xc0, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x40, 0x6, "961b5480684136587ad744145f556e042759ee17848e03fb97745035a996641c8d77b862610c963698021f2cc49e6de471fad1a2f78a945133775a68"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x35, 0x6, "e41c1f5f69fa054783a02772de9ab7aaa4be7cfa9419eab58ebe5aafc463e26dac7b6f3b1216825b491be8d8fa798638b2"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x78, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x180}}, 0x0) 19.77399974s ago: executing program 9 (id=927): r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0xd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f0000000340)={0x2a, 0x2}) socket$rds(0x15, 0x5, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0) (async) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) (async) bind$rds(r0, &(0x7f0000000000)={0x2, 0xd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) openat$fb1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) (async) ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f0000000340)={0x2a, 0x2}) (async) 18.528432097s ago: executing program 9 (id=938): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xad}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006110740000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ec0)={{r0}, &(0x7f0000001e40), &(0x7f0000001e80)=r1}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000140)={@val={0x800e}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}}, 0x2e) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'bond_slave_1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001981100fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 16.758308308s ago: executing program 8 (id=941): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x1, 0x400) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000440)={{0x7, 0x5, 0x0, 0x7f, '\x00', 0x1}, 0x1, 0x30, 0x6, r2, 0x3, 0x8229, 'syz1\x00', &(0x7f0000000400)=['/dev/fuse\x00', 'fuse\x00', '\x00'], 0x10}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012, 0x3}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r8, 0xffffffffffffffff) ioctl$SIOCAX25GETUID(r6, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r8}) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) accept4(r0, &(0x7f00000002c0)=@l2, &(0x7f0000000140)=0x80, 0x80000) getdents64(r9, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000000, 0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0x100000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xc000, 0x0, 0x0, 0x0, 0x2000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0xfffffffd) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_macvtap\x00', &(0x7f0000000180)=@ethtool_cmd={0x2c, 0x7, 0x0, 0x9, 0x7d, 0x5, 0x81, 0x87, 0xda, 0xf3, 0xa, 0x31, 0x6, 0x4, 0x0, 0x8001f76, [0x7fff, 0x7b0]}}) 16.678360588s ago: executing program 6 (id=944): setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="32b414c70f58edf6c22e03f2d6df5f6005f69b3e2cb951bdd0738020d8af7f4aeb85eaf82cc7a7d9a7dbed362c5d8bea899f7e4fd8c804fc62b40002a6cdb0a37500cf19bbc0309a691411d91916436407be4d91521d3cc32cbb69b6698a38d66630420913197daeb1aebc5e8ded337f38"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x80, 0x2, {{0xa, 0x4, 0x0, 0x37, 0x28, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @local, {[@cipso={0x86, 0x6, 0x3}, @generic={0x94, 0x2}, @lsrr={0x83, 0x3, 0xc3}, @cipso={0x86, 0x6, 0x1}]}}}}}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x12, "32bdc324e1599219f50804526613d2a8"}, @md5sig={0x13, 0x12, "c855f27ba6095218cb330364f749df1c"}]}}}}}}}}, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xc0145b0e, &(0x7f0000000040)) 16.218250128s ago: executing program 9 (id=945): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendfile(r0, r0, 0x0, 0x3fffff) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0x40, {{0x2, 0x4e22, @rand_addr=0x64010101}}}, 0x88) fsopen(&(0x7f0000000240)='sysfs\x00', 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 16.218011856s ago: executing program 9 (id=946): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x0, 0x6, '\x00', [@hao={0xc9, 0x10, @private1}, @padn={0x1, 0x1, [0x0]}, @pad1, @ra={0x5, 0x2, 0xde}, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0x2}]}, 0x40) (async) getsockopt$inet6_buf(r0, 0x29, 0x58, &(0x7f0000000040)=""/166, &(0x7f0000000100)=0xa6) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000140)=@srh={0x84, 0x4, 0x4, 0x2, 0x40, 0x0, 0x61, [@remote, @empty]}, 0x28) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x101, @loopback, 0x5}, 0x1c) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x400a01, 0x0) ioctl$SNDCTL_TMR_METRONOME(r3, 0x40045407) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) r5 = getuid() (rerun: 64) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@private2, @in6=@empty, 0x4e20, 0x0, 0x4e24, 0x4, 0x2, 0x20, 0x321122472d8985f, 0x3b, 0x0, r5}, {0x10, 0x3, 0x0, 0xf3f5, 0xffff, 0x2, 0x5, 0x4}, {0x7, 0x77, 0x1, 0x9}, 0x5, 0x6e6bbe, 0x2, 0x1, 0x1, 0x2}, {{@in6=@private0, 0x4d2}, 0xa, @in6=@remote, 0x3502, 0x2, 0x2, 0x0, 0x2e9, 0x80, 0x3}}, 0xe8) (async) sendto$inet6(r0, &(0x7f0000000300)="610fa0e4d380eec4ddd49dbff4f3caf1d22235f011a9828840500a0efe337e058546100b688da4aeb79a6c28d5dc18d3ba8e01b00f8100292119cd6c9118adc0b2143ca7c2f33f185df4c0948386fd84df61564730d31e6474d0ce4693a5dad677ecd1178763057b426758fe97deed11b4799356df9336594fc795de237d32e04e3de1dd275bafd03486633b5c8f0af0e52355ff23080fe1", 0x98, 0x20000000, &(0x7f00000003c0)={0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) r6 = openat$incfs(0xffffffffffffffff, &(0x7f0000000400)='.log\x00', 0x208000, 0xc0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0x1397d7b5ae91b5ee}}, './file0\x00'}) (async) ioctl$TIOCSERGETLSR(r6, 0x5459, &(0x7f0000000480)) (async, rerun: 32) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f00000004c0)=0x3, 0x4) (rerun: 32) faccessat2(r6, &(0x7f0000000500)='./file0\x00', 0x80, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x9, 0x8, 0x80000001, 0x4043, r7, 0x0, '\x00', r8, r7, 0x1, 0x4, 0x2, 0xa, @void, @value, @void, @value}, 0x50) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000600)={0x68c245c5, 0x4, 0xf2, 0x9, 0xc5, 0x6, 0x4, 0x3}, &(0x7f0000000640)={0x0, 0x6, 0x5, 0x6, 0xff, 0x0, 0x8, 0x7}, &(0x7f0000000680)={0x2, 0x2, 0x1, 0x7, 0x1, 0x2, 0x101, 0x7}, &(0x7f0000000700)={r9, r10+60000000}, &(0x7f0000000780)={&(0x7f0000000740)={[0x7f]}, 0x8}) (async, rerun: 32) r11 = socket$inet6(0xa, 0xa, 0x1000) (rerun: 32) getsockopt$IP6T_SO_GET_REVISION_MATCH(r11, 0x29, 0x44, &(0x7f00000007c0)={'icmp6\x00'}, &(0x7f0000000800)=0x1e) (async) ioctl$sock_inet_SIOCGIFADDR(r6, 0x8915, &(0x7f0000000840)={'bond_slave_1\x00', {0x2, 0x0, @initdev}}) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000880), 0x200281, 0x0) (async, rerun: 64) setsockopt$MRT_ASSERT(r7, 0x0, 0xcf, &(0x7f00000008c0), 0x4) (async, rerun: 64) setsockopt$sock_int(r4, 0x1, 0x23, &(0x7f0000000900), 0x4) rt_sigpending(&(0x7f0000000940), 0x8) 16.157177519s ago: executing program 9 (id=948): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a9d42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008a04"]) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000001980)=""/236, &(0x7f0000000080)=0x18) 15.978326187s ago: executing program 9 (id=950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000000000000000004000000000060000000000000006010040"]) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r7 = syz_open_pts(0xffffffffffffffff, 0x20002) ioctl$TIOCMBIS(r7, 0x5416, &(0x7f0000000000)=0x7d18) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r8 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r8, &(0x7f00000002c0)='./file1\x00', 0x100, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r8, &(0x7f0000000100)='./file1\x00', r8, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file1\x00') r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r11 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r11, 0xc0405665, &(0x7f0000000280)={0x0, 0x2}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="010000001184f9bb1c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r10], 0x44}}, 0x0) 15.978044969s ago: executing program 7 (id=951): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000240)=""/68) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000080), 0x4) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_CAP_MAX_VCPU_ID(r5, 0x4068aea3, &(0x7f0000001500)={0x80, 0x0, 0x1000000000000000}) (async) ioctl$RTC_UIE_ON(r1, 0x7003) (async) lseek(r5, 0x9, 0x3) (async) ioctl$RTC_AIE_ON(r1, 0x7001) 15.868570688s ago: executing program 8 (id=952): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x4, 0x3, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4000000000000001, 0x0, 0x800, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc874, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xd7b]}) r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='\xcd\xd4\xdc\x8b\'\x00\xb9\x11JX\xc2\x0eP\va\x84\xcb\xa0\xa1r\xab\xd2\xaf\x81\xfd\x14M\xf4\x844z\xc8\xf8x\xa5&v\xe1\x12\xbb\x95\xae u\x1b\xeb\x11\xed\x9a\x83n\xc30L \a\xa7\xf6\xeb\xcb+\xa0\xc8\xb8eo\xb8\x89\xfaWy2\xee\x88\xab\xfb\f \x88\x95C_\r!\xd4\xc2\xa5c\xc6\x1f\x95\x83\x04\xa5\xeb\xa16\xba\a\xe7', &(0x7f0000000780)='&\b\x1a\x16\xd7\xd3K\x18YquL\xf1y\x14\x96:\xfco3\xe2\a\b\xd0\xe3\xd9\x1c!\x8f\xca\x9b\xaf\xc1\xeb\xe4\xde\xbb7O\xf1O\xb8\x05_\x11\x04\a\x82\x1c7h\xfbU\x03T\xf4\xc1\xe2\xd1\xcd<\f\x8bOHb#\x9d\x192\x9aAX\xa2\'\xd8\xb2U\xdbb\xba\xa9C\x8a/\x8d\xdb\x96\xed;A\x8aX\xc4\x14\xb0\x90\xfa4\x16\xdb\xb7\xd8\x05\xb42\x01\xb7\xa1S@\t\xb8.d\x9bT\f\xfa\xbe\xd5qT\xb6\x1e\xcc\xed\xa1\x8c\xa2\x0e\xda\x0fSk\x86\xe7W\xc5\x95\xf6\xda\x8f\xadRt\x9c\xed\xe97\x9dk\x8b\xb8\xc4+l>\x05\xdeJ\xd6\xe9\xb3g\xc050q\x82LL\xe9\xd6\x0e\xd7\x12\xf8\x8f\x1e\x9fj\x0f/\xc7\x91U\xcd\xb0k\x10\xa3#6a\t\xb9\xd3\xbe\xbc\x1f\xfd@\xdd\xb6\x02UJ\xb6\x90\x98\xbed\x1e\xfa\x81 \x0fh?\xb0G\xd2\xa0:$`a\xfd\t\xed\x9aF\\\xdd\xe6*\x1bR;\xe8D\x95\x12uw\xdc8\x06\xfel\xd6\xc7\xc0\xd9)J^\x1b\x14\v\xfc\x9d\xc8\xa1\x89C\xdcH\xb2\x03\x9a\x18\xd93\xd4\xda\x9d\x94\x18\x15\xc54\x8bf\x01\xff\xd1\\\xa6\xdb\xa6\x83\xdc\xcf\xbf\xf1p\xec\x82\xf3\x01\x88\xd4\x87\x02\xf1\xb0[\xbf\x1cr\xc3_1\xd6\xb3Z\xaa\xd7\x81L\xc2{\xfeuIk\xa7\x15\x15', 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r1, 0x0) (rerun: 32) 15.868322529s ago: executing program 7 (id=953): bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40850}], 0x1, 0x40800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) 15.768039445s ago: executing program 7 (id=954): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@RTM_DELMDB={0x38, 0x55, 0x701, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x0, {@ip4=@local}}}]}, 0x38}}, 0x40080) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="32b414c70f58edf6c22e03f2d6df5f6005f69b3e2cb951bdd0738020d8af7f4aeb85eaf82cc7a7d9a7dbed362c5d8bea899f7e4fd8c804fc62b40002a6cdb0a37500cf19bbc0309a691411d91916436407be4d91521d3cc32cbb69b6698a38d66630420913197daeb1aebc5e8ded337f38cc98b23b692f2bb4ecf21c906179194d585474cd92aed95b37e8c3ccbe69b49f3c37128de3e2f52667a6e33de9251d24f53f386ee0cb13489c881acad6328e35a60e132b06b4ccaff326e3e61610eb8f0c816bc424928ac4d6edf0ee9c6cec155b89396415e86ca535f78274b0f74830"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(r2, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(lrw(cbc(des-generic)),sha3-224)\x00'}, 0x58) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'tunl0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x80, 0x2, {{0x17, 0x4, 0x0, 0x37, 0x5c, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @local, {[@cipso={0x86, 0x1e, 0x3, [{0x2, 0x2}, {0x7, 0x7, "02bb43f806"}, {0x1, 0xf, "32e922f9e18fde1ac0382c745c"}]}, @generic={0x94, 0x12, "40a9b200"/16}, @lsrr={0x83, 0x7, 0xc3, [@rand_addr=0x64010100]}, @cipso={0x86, 0x10, 0x1, [{0x7, 0x5, "ec9d38"}, {0x2, 0x5, "0859ef"}]}]}}}}}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x12, "32bdc324e1599219f50804526613d2a8"}, @md5sig={0x13, 0x12, "c855f27ba6095218cb330364f749df1c"}]}}}}}}}}, 0x0) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x24, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, [@empty]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) (async) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 15.76754438s ago: executing program 6 (id=955): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = fanotify_init(0x16, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x4800) memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x2) r3 = dup(r2) fanotify_mark(r1, 0x1, 0x40000010, r3, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r4, 0x89e1, &(0x7f0000000040)=0x68ed) execveat(r3, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) 15.767202943s ago: executing program 7 (id=956): syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x9, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xffffffffffffff48, 0xf989, "bb653c93cf1b5dd85ce7fcfa766bb601"}]}}}}}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x1a92) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r3, &(0x7f0000000500)={{0xcc, 0x3, 0xd, 0x2d9, 0x200, 0x3ff, 0x304, 0x4}, "01dfb949236259e7c4b2dfadd541c1c430871452934b3bdb870381d7845457bf795c23b939ff788b269cffddec3ba805d659df110b4ec767334eb4d761c02860bb7c174100dfab76156d", ['\x00', '\x00', '\x00']}, 0x36a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'erspan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0xc, r4, 0x1, 0xed, 0x6, @remote}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 15.764498419s ago: executing program 8 (id=957): io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) socket$inet_udp(0x2, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x8008af26, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x40, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8080) 15.560386244s ago: executing program 6 (id=958): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in6=@remote, @in=@empty}, {@in=@empty, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x6, 0x9}, {0xe, 0x6}, {0x391a, 0x0, 0x4}, 0x0, 0x0, 0xa, 0x0, 0xfe, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2d, 0x0, 0x2}}]}, 0x154}}, 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0xffffff95}) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 15.559959808s ago: executing program 7 (id=959): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES8=0x0, @ANYRES64, @ANYBLOB, @ANYRES16=0x0], &(0x7f0000000080)='GPL\x00', 0x2, 0xd2, &(0x7f0000000140)=""/210, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 15.554652907s ago: executing program 6 (id=960): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x20, 0x2, 0x2, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 15.541417552s ago: executing program 7 (id=961): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0xffffffffffffffff, 0x100000007, 0x5, 0x0, 0x5, 0x1d, 0xfffffffffffffffc, 0x800000]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f23742e3b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x46}], 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x100}]}}]}, 0x38}}, 0x20040054) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xa}}, './file0\x00'}) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000002100)={0x0, 0x8, 0x0, 0x4f, @vifc_lcl_ifindex, @broadcast}, 0x10) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x200502, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r7, &(0x7f0000000080)={0x2020}, 0x2020) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000380)='%pi6 \x00'}, 0x20) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$eventfd(r9, 0x0, 0x3f00) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xf, &(0x7f0000000040)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc0b12beacd0bd15c, 0x3, 0x0, 0x5}], &(0x7f00000000c0)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x0, 0x40, '\x00', r4, @fallback=0x31, r5, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xa, 0x3, 0x6}, 0x10, 0x0, r6, 0x2, &(0x7f0000000440)=[r7, r8, 0xffffffffffffffff, r9], &(0x7f0000000480)=[{0x3, 0x3, 0x9, 0x5}, {0x3, 0x1, 0xe, 0x8}], 0x10, 0x932, @void, @value}, 0x94) ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f00000020c0)={0x4}) 15.458097991s ago: executing program 6 (id=962): symlink(&(0x7f0000000bc0)='./file0/file0/..\x00', &(0x7f0000000000)='./file0\x00') (async, rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) creat(&(0x7f00000001c0)='./file0\x00', 0x8) r1 = socket$inet6(0xa, 0x5, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0xc0, 0x11cfa, 0x0, 0x8000008, 0x2, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x4, 0xff}) (async) sendto$inet6(r2, &(0x7f0000000080)="e433a14e", 0x4, 0x20000800, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 15.457519111s ago: executing program 8 (id=963): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80042, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5, r5}, &(0x7f0000000300), &(0x7f00000011c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r5, r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x38, &(0x7f0000001640)=""/170, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCGFLAGS1(r7, 0x8004745a, &(0x7f0000000140)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$pptp(r0, &(0x7f00000001c0)={0x18, 0x2, {0x1, @remote}}, 0x1e) 15.268394012s ago: executing program 6 (id=964): setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="32b414c70f58edf6c22e03f2d6df5f6005f69b3e2cb951bdd0738020d8af7f4aeb85eaf82cc7a7d9a7dbed362c5d8bea899f7e4fd8c804fc62b40002a6cdb0a37500cf19bbc0309a691411d91916436407be4d91521d3cc32cbb69b6698a38d66630420913197daeb1aebc5e8ded337f38"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x80, 0x2, {{0xa, 0x4, 0x0, 0x37, 0x28, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @local, {[@cipso={0x86, 0x6, 0x3}, @generic={0x94, 0x2}, @lsrr={0x83, 0x3, 0xc3}, @cipso={0x86, 0x6, 0x1}]}}}}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x12, "32bdc324e1599219f50804526613d2a8"}, @md5sig={0x13, 0x12, "c855f27ba6095218cb330364f749df1c"}]}}}}}}}}, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xc0145b0e, &(0x7f0000000040)) 15.267939228s ago: executing program 8 (id=965): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) (async) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d07, &(0x7f0000000040)) (async) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d07, &(0x7f0000000040)) mkdir(&(0x7f00000002c0)='./bus\x00', 0x4) (async) mkdir(&(0x7f00000002c0)='./bus\x00', 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000180)='./file1\x00') (async) rmdir(&(0x7f0000000180)='./file1\x00') chdir(&(0x7f00000001c0)='./bus\x00') r2 = syz_io_uring_setup(0x24fd, &(0x7f00000004c0)={0x0, 0x0, 0x10100, 0x0, 0x201}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_emit_ethernet(0xfffffffffffffd37, &(0x7f0000000680)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @multicast, @val={@val={0x88a8, 0x3, 0x1, 0x2}, {0x8100, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0xeb, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x8, 0x3, "040fda5bd7724636773e47ded2e7d2abb4e6bb01cbb990957ec4a4a69170dd6e51c0642ca49c7c3524ac0b780e19ea43acdddbaca4d22ff4db400776897aeba89bc26759e8ac38dce0b4252811d5da7e020f4c04433a93aebea7eca3e93b83b15f141eaa28662b28eb7a971341df5188926bc185adce14dec3e6d390f2c1eba60f2cbc2321a7c0074c4d8a9cad1b69614b284a093ee2e4b7142953c371ea83ca6a11cb1e3181ed741372a06f945ef0167c2dc2b2f9d2d6142dbf1bf6ad87da75fca8c9b4d7acaabd829b3eb4dd42e5e2c799d437f2299e7d0b0b1675bc8ae83510e652"}}}}}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000100000000000000000000009500000000000000dd4512000091f9d56a2f1c99ee"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) (async) r7 = fsmount(r6, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r5, r7, 0x3, 0x0, @val=@perf_event={0x3}}, 0x18) getsockname(r7, &(0x7f0000000240)=@phonet, &(0x7f0000000100)=0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x14, &(0x7f0000000840)=@ringbuf={{}, {}, {}, [@cb_func, @cb_func, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) preadv(r9, &(0x7f0000000140)=[{&(0x7f0000000300)=""/70, 0x46}], 0x1, 0x8, 0x0) 15.155481374s ago: executing program 8 (id=966): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x0, 0x4, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) sendmmsg$sock(r0, &(0x7f0000000840)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x0) 95.346722ms ago: executing program 38 (id=966): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x0, 0x4, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) sendmmsg$sock(r0, &(0x7f0000000840)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x0) 57.910137ms ago: executing program 39 (id=950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000000000000000004000000000060000000000000006010040"]) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r7 = syz_open_pts(0xffffffffffffffff, 0x20002) ioctl$TIOCMBIS(r7, 0x5416, &(0x7f0000000000)=0x7d18) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r8 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r8, &(0x7f00000002c0)='./file1\x00', 0x100, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r8, &(0x7f0000000100)='./file1\x00', r8, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file1\x00') r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r11 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r11, 0xc0405665, &(0x7f0000000280)={0x0, 0x2}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="010000001184f9bb1c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r10], 0x44}}, 0x0) 14.21537ms ago: executing program 40 (id=964): setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="32b414c70f58edf6c22e03f2d6df5f6005f69b3e2cb951bdd0738020d8af7f4aeb85eaf82cc7a7d9a7dbed362c5d8bea899f7e4fd8c804fc62b40002a6cdb0a37500cf19bbc0309a691411d91916436407be4d91521d3cc32cbb69b6698a38d66630420913197daeb1aebc5e8ded337f38"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x80, 0x2, {{0xa, 0x4, 0x0, 0x37, 0x28, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @local, {[@cipso={0x86, 0x6, 0x3}, @generic={0x94, 0x2}, @lsrr={0x83, 0x3, 0xc3}, @cipso={0x86, 0x6, 0x1}]}}}}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x12, "32bdc324e1599219f50804526613d2a8"}, @md5sig={0x13, 0x12, "c855f27ba6095218cb330364f749df1c"}]}}}}}}}}, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xc0145b0e, &(0x7f0000000040)) 0s ago: executing program 41 (id=961): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0xffffffffffffffff, 0x100000007, 0x5, 0x0, 0x5, 0x1d, 0xfffffffffffffffc, 0x800000]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f23742e3b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x46}], 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x100}]}}]}, 0x38}}, 0x20040054) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xa}}, './file0\x00'}) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000002100)={0x0, 0x8, 0x0, 0x4f, @vifc_lcl_ifindex, @broadcast}, 0x10) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x200502, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r7, &(0x7f0000000080)={0x2020}, 0x2020) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000380)='%pi6 \x00'}, 0x20) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$eventfd(r9, 0x0, 0x3f00) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xf, &(0x7f0000000040)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc0b12beacd0bd15c, 0x3, 0x0, 0x5}], &(0x7f00000000c0)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x0, 0x40, '\x00', r4, @fallback=0x31, r5, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xa, 0x3, 0x6}, 0x10, 0x0, r6, 0x2, &(0x7f0000000440)=[r7, r8, 0xffffffffffffffff, r9], &(0x7f0000000480)=[{0x3, 0x3, 0x9, 0x5}, {0x3, 0x1, 0xe, 0x8}], 0x10, 0x932, @void, @value}, 0x94) ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f00000020c0)={0x4}) kernel console output (not intermixed with test programs): BSS network, BSSID 50:50:50:50:50:50 [ 124.357062][ T1142] hsr_slave_0: left promiscuous mode [ 124.377503][ T1142] hsr_slave_1: left promiscuous mode [ 124.379685][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.382266][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.408027][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.413355][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.442182][ T7304] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 124.444601][ T7304] vivid-001: disconnect [ 124.447143][ T40] audit: type=1400 audit(1748058157.597:423): avc: denied { name_bind } for pid=7303 comm="syz.5.339" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 124.486706][ T1142] hsr_slave_0: left promiscuous mode [ 124.498186][ T1142] hsr_slave_1: left promiscuous mode [ 124.501081][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.504877][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.516912][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.520188][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.586485][ T1142] veth1_macvtap: left promiscuous mode [ 124.588346][ T1142] veth0_macvtap: left promiscuous mode [ 124.590929][ T1142] veth1_vlan: left promiscuous mode [ 124.592713][ T1142] veth0_vlan: left promiscuous mode [ 124.636288][ T1142] veth1_macvtap: left promiscuous mode [ 124.643633][ T1142] veth0_macvtap: left promiscuous mode [ 124.652843][ T1142] veth1_vlan: left promiscuous mode [ 124.655219][ T1142] veth0_vlan: left promiscuous mode [ 124.688208][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.6.342'. [ 125.254669][ T7303] vivid-001: reconnect [ 125.298910][ T7316] netlink: 'syz.5.343': attribute type 4 has an invalid length. [ 126.118113][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 126.280039][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 127.513998][ C3] net_ratelimit: 101960 callbacks suppressed [ 127.514012][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.514102][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 127.516193][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.519487][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.524261][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.527714][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.532436][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.535676][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.540596][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.544145][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 128.299749][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 128.443647][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 129.924893][ T7323] xt_hashlimit: size too large, truncated to 1048576 [ 130.011395][ T40] audit: type=1400 audit(1748058163.157:424): avc: denied { name_bind } for pid=7327 comm="syz.6.345" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 130.030678][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.033079][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.070076][ T40] audit: type=1400 audit(1748058163.217:425): avc: denied { module_request } for pid=7318 comm="syz.5.344" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 130.138372][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.7.335'. [ 130.148950][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.151543][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.299309][ T40] audit: type=1400 audit(1748058163.447:426): avc: denied { lock } for pid=7342 comm="syz.4.332" path="socket:[18738]" dev="sockfs" ino=18738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 130.489958][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.7.350'. [ 130.597548][ T7355] QAT: failed to copy from user. [ 130.602843][ T7355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.349'. [ 130.633989][ T5977] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 130.690314][ T40] audit: type=1400 audit(1748058163.837:427): avc: denied { map } for pid=7361 comm="syz.4.351" path="socket:[18776]" dev="sockfs" ino=18776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 130.697810][ T40] audit: type=1400 audit(1748058163.837:428): avc: denied { read accept } for pid=7361 comm="syz.4.351" path="socket:[18776]" dev="sockfs" ino=18776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 130.708241][ T40] audit: type=1400 audit(1748058163.847:429): avc: denied { create } for pid=7361 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 130.812198][ T5977] usb 10-1: config index 0 descriptor too short (expected 31, got 27) [ 130.815136][ T5977] usb 10-1: config 1 interface 0 has no altsetting 0 [ 130.823443][ T5977] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 130.828201][ T5977] usb 10-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 130.830870][ T5977] usb 10-1: Product: syz [ 130.832290][ T5977] usb 10-1: Manufacturer: syz [ 130.833840][ T5977] usb 10-1: SerialNumber: syz [ 130.923541][ T40] audit: type=1400 audit(1748058164.067:430): avc: denied { ioctl } for pid=7361 comm="syz.4.351" path="socket:[18781]" dev="sockfs" ino=18781 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 131.113572][ T40] audit: type=1400 audit(1748058164.257:431): avc: denied { relabelfrom } for pid=7361 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 131.113609][ T7365] @: renamed from vlan0 (while UP) [ 131.119855][ T40] audit: type=1400 audit(1748058164.257:432): avc: denied { relabelto } for pid=7361 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 131.451481][ T5977] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 131.650366][ T40] audit: type=1400 audit(1748058164.797:433): avc: denied { read write } for pid=7350 comm="syz.5.348" name="lp0" dev="devtmpfs" ino=2868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 131.915034][ T7382] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 132.327075][ T7394] netlink: 44 bytes leftover after parsing attributes in process `syz.4.358'. [ 132.330655][ T7395] netlink: 44 bytes leftover after parsing attributes in process `syz.4.358'. [ 132.524021][ C3] net_ratelimit: 101006 callbacks suppressed [ 132.524034][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.524046][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.526140][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.529895][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.533593][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.537361][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.541093][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.544884][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 132.548993][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.552499][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 132.599172][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.601539][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.860561][ T7408] kvm: pic: non byte write [ 132.862453][ T7408] kvm: pic: non byte write [ 132.864481][ T7408] kvm: pic: non byte write [ 132.866311][ T7408] kvm: pic: non byte write [ 132.868112][ T7408] kvm: pic: non byte write [ 132.869905][ T7408] kvm: pic: non byte write [ 132.871712][ T7408] kvm: pic: non byte write [ 132.873495][ T7408] kvm: pic: non byte write [ 132.876806][ T7408] kvm: pic: non byte write [ 132.878621][ T7408] kvm: pic: non byte write [ 133.040917][ T7413] No such timeout policy "syz0" [ 133.296585][ T7422] erspan0: entered allmulticast mode [ 133.331998][ T7424] netlink: 'syz.6.368': attribute type 10 has an invalid length. [ 133.352835][ T7424] team0: Device ipvlan1 failed to register rx_handler [ 133.640944][ T7439] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 133.654908][ T7439] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 133.811134][ T7446] tls_set_device_offload_rx: netdev not found [ 134.751371][ T7471] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 134.824086][ T5941] Bluetooth: hci5: command tx timeout [ 135.719767][ T7492] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 135.763711][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 135.763723][ T40] audit: type=1400 audit(1748058168.907:447): avc: denied { create } for pid=7490 comm="syz.7.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 137.139312][ T7524] netlink: 32 bytes leftover after parsing attributes in process `syz.7.391'. [ 137.142673][ T7524] netlink: 32 bytes leftover after parsing attributes in process `syz.7.391'. [ 137.533964][ C2] net_ratelimit: 108492 callbacks suppressed [ 137.533978][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 137.534031][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.536649][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.539981][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.543645][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.547579][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.551196][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.555164][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.559036][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 137.563103][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.701082][ T40] audit: type=1400 audit(1748058170.847:448): avc: denied { read } for pid=7534 comm="syz.6.393" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 137.709764][ T7535] tmpfs: Bad value for 'huge' [ 137.713893][ T40] audit: type=1400 audit(1748058170.857:449): avc: denied { open } for pid=7534 comm="syz.6.393" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 137.747183][ T40] audit: type=1400 audit(1748058170.857:450): avc: denied { map } for pid=7534 comm="syz.6.393" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 138.298621][ T40] audit: type=1400 audit(1748058171.437:451): avc: denied { map } for pid=7550 comm="syz.6.396" path=2F70726F632F36362F6E65742F70666B6579202864656C6574656429 dev="proc" ino=4026534020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 138.308423][ T40] audit: type=1400 audit(1748058171.437:452): avc: denied { execute } for pid=7550 comm="syz.6.396" path=2F70726F632F36362F6E65742F70666B6579202864656C6574656429 dev="proc" ino=4026534020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 138.360041][ T7553] kernel read not supported for file /policy (pid: 7553 comm: syz.6.397) [ 138.362056][ T40] audit: type=1400 audit(1748058171.507:453): avc: denied { module_load } for pid=7552 comm="syz.6.397" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 138.374914][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.6.397'. [ 138.460619][ T7560] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.399'. [ 138.492156][ T7563] tmpfs: Bad value for 'mpol' [ 138.530392][ T7565] netlink: 24 bytes leftover after parsing attributes in process `syz.6.401'. [ 138.546027][ T7276] usb 10-1: USB disconnect, device number 2 [ 138.558109][ T7276] usblp0: removed [ 138.687950][ T40] audit: type=1400 audit(1748058171.837:454): avc: denied { append } for pid=7573 comm="syz.5.403" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 138.894196][ T9] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 138.912758][ T40] audit: type=1400 audit(1748058172.057:455): avc: denied { append } for pid=7581 comm="syz.5.405" name="pfkey" dev="proc" ino=4026533885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 138.927659][ T7586] netlink: 48 bytes leftover after parsing attributes in process `syz.7.406'. [ 139.057290][ T9] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 139.060341][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.062840][ T9] usb 11-1: Product: syz [ 139.067939][ T9] usb 11-1: Manufacturer: syz [ 139.069458][ T9] usb 11-1: SerialNumber: syz [ 139.084101][ T40] audit: type=1400 audit(1748058172.227:456): avc: denied { write } for pid=7590 comm="syz.7.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 139.093731][ T9] usb 11-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 139.191327][ T9] usb 11-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 139.266610][ T7602] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 139.457602][ T7565] netlink: 'syz.6.401': attribute type 21 has an invalid length. [ 139.460326][ T7565] netlink: 128 bytes leftover after parsing attributes in process `syz.6.401'. [ 139.463137][ T7565] netlink: 'syz.6.401': attribute type 5 has an invalid length. [ 139.474246][ T7565] netlink: 'syz.6.401': attribute type 6 has an invalid length. [ 139.476628][ T7565] netlink: 3 bytes leftover after parsing attributes in process `syz.6.401'. [ 139.489986][ T6195] usb 11-1: USB disconnect, device number 2 [ 139.929768][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.7.414'. [ 139.933598][ T7617] netlink: 12 bytes leftover after parsing attributes in process `syz.7.414'. [ 139.938004][ T7617] netlink: 'syz.7.414': attribute type 18 has an invalid length. [ 140.108919][ T7625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.266944][ T9] ath9k_htc 11-1:1.0: ath9k_htc: Target is unresponsive [ 140.269347][ T9] ath9k_htc: Failed to initialize the device [ 140.276588][ T6195] usb 11-1: ath9k_htc: USB layer deinitialized [ 140.329365][ T7625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.764299][ T7640] binder: BINDER_SET_CONTEXT_MGR already set [ 140.766592][ T7640] binder: 7638:7640 ioctl 4018620d 200000000100 returned -16 [ 140.772385][ T7640] binder: BINDER_SET_CONTEXT_MGR already set [ 140.779865][ T7640] binder: 7638:7640 ioctl 4018620d 2000000001c0 returned -16 [ 140.842631][ T7640] binder: 7638:7640 ioctl c0306201 200000000480 returned -22 [ 140.845665][ T7643] binder: 7638:7643 ioctl c0306201 200000000480 returned -22 [ 140.891595][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 140.891606][ T40] audit: type=1400 audit(1748058174.037:462): avc: denied { watch watch_reads } for pid=7642 comm="syz.6.420" path="/26/file0" dev="tmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 140.988754][ T40] audit: type=1400 audit(1748058174.137:463): avc: denied { accept } for pid=7646 comm="syz.7.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.285339][ T40] audit: type=1400 audit(1748058174.437:464): avc: denied { override_creds } for pid=7654 comm="syz.7.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 141.339541][ T40] audit: type=1400 audit(1748058174.487:465): avc: denied { connect } for pid=7657 comm="syz.5.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 141.463781][ T7661] No such timeout policy "syz0" [ 141.563394][ T40] audit: type=1400 audit(1748058174.707:466): avc: denied { append } for pid=7662 comm="syz.7.425" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.573836][ T7663] dlm: no locking on control device [ 142.295753][ T7695] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.391774][ T7699] netlink: 'syz.5.429': attribute type 12 has an invalid length. [ 142.491521][ T7710] netlink: 'syz.7.430': attribute type 1 has an invalid length. [ 142.543977][ C2] net_ratelimit: 96283 callbacks suppressed [ 142.543989][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 142.543996][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.546028][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 142.549789][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.553513][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.557578][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.561777][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.565394][ C3] bridge0: received packet on busb_generic_handle_packet: ctrl buffer too small (16384 > 4096) ridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.568990][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.572647][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.586054][ T40] audit: type=1400 audit(1748058175.737:467): avc: denied { bind } for pid=7689 comm="syz.6.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.937636][ T7707] syz.7.430 (7707) used greatest stack depth: 19736 bytes left [ 143.038372][ T40] audit: type=1400 audit(1748058176.187:468): avc: denied { write } for pid=7727 comm="syz.7.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 143.168115][ T40] audit: type=1400 audit(1748058176.317:469): avc: denied { ioctl } for pid=7734 comm="syz.7.433" path="socket:[21569]" dev="sockfs" ino=21569 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.181809][ T40] audit: type=1400 audit(1748058176.317:470): avc: denied { write } for pid=7734 comm="syz.7.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.188819][ T7741] __nla_validate_parse: 2 callbacks suppressed [ 143.188834][ T7741] netlink: 12 bytes leftover after parsing attributes in process `syz.5.435'. [ 143.193757][ T7741] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 143.249743][ T40] audit: type=1400 audit(1748058176.397:471): avc: denied { read } for pid=7742 comm="syz.5.436" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 143.278543][ T7744] binder: BC_ACQUIRE_RESULT not supported [ 143.280642][ T7743] binder: BC_ACQUIRE_RESULT not supported [ 143.282501][ T7744] binder: 7742:7744 ioctl c0306201 200000000100 returned -22 [ 143.285074][ T7743] binder: 7742:7743 ioctl c0306201 200000000100 returned -22 [ 143.981655][ T7761] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 144.067492][ T7767] SELinux: policydb string 3E Linux does not match my string SE Linux [ 144.070266][ T7767] SELinux: failed to load policy [ 144.112287][ T7761] cramfs: wrong magic [ 144.282876][ T7770] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 144.394697][ T7774] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.475766][ T7774] bond1 (unregistering): Released all slaves [ 145.675527][ T7781] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 145.976979][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 145.976995][ T40] audit: type=1400 audit(1748058179.127:478): avc: denied { accept } for pid=7788 comm="syz.6.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 146.138775][ T40] audit: type=1400 audit(1748058179.277:479): avc: denied { setopt } for pid=7797 comm="syz.6.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 146.309188][ T40] audit: type=1400 audit(1748058179.457:480): avc: denied { write } for pid=7805 comm="syz.7.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 146.333628][ T40] audit: type=1400 audit(1748058179.457:481): avc: denied { nlmsg_write } for pid=7805 comm="syz.7.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 146.351590][ T7804] netlink: 'syz.5.454': attribute type 4 has an invalid length. [ 146.461584][ T40] audit: type=1400 audit(1748058179.607:482): avc: denied { read write } for pid=7810 comm="syz.5.456" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 146.469414][ T40] audit: type=1400 audit(1748058179.607:483): avc: denied { open } for pid=7810 comm="syz.5.456" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 146.562401][ T7812] loop3: detected capacity change from 0 to 524287999 [ 146.567896][ T7322] buffer_io_error: 7 callbacks suppressed [ 146.567905][ T7322] Buffer I/O error on dev loop3, logical block 0, async page read [ 146.573221][ T7322] Buffer I/O error on dev loop3, logical block 0, async page read [ 146.577093][ T7322] Buffer I/O error on dev loop3, logical block 0, async page read [ 146.580206][ T7322] Buffer I/O error on dev loop3, logical block 0, async page read [ 146.584030][ T9] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 146.593403][ T7322] Buffer I/O error on dev loop3, logical block 0, async page read [ 146.602552][ T7322] Buffer I/O error on dev loop3, logical block 0, async page read [ 146.608790][ T7322] Buffer I/O error on dev loop3, logical block 0, async page read [ 146.611521][ T7322] Buffer I/O error on dev loop3, logical block 0, async page read [ 146.615900][ T7322] ldm_validate_partition_table(): Disk read failed. [ 146.618596][ T7322] Buffer I/O error on dev loop3, logical block 0, async page read [ 146.621311][ T7322] Buffer I/O error on dev loop3, logical block 0, async page read [ 146.623900][ T7322] Dev loop3: unable to read RDB block 0 [ 146.630174][ T7322] loop3: unable to read partition table [ 146.746118][ T9] usb 12-1: Using ep0 maxpacket: 32 [ 146.750843][ T9] usb 12-1: unable to get BOS descriptor or descriptor too short [ 146.755485][ T9] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 146.757885][ T9] usb 12-1: can't read configurations, error -71 [ 146.857757][ T40] audit: type=1400 audit(1748058180.007:484): avc: denied { ioctl } for pid=7823 comm="syz.5.459" path="socket:[12151]" dev="sockfs" ino=12151 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.887088][ T7824] netlink: 48 bytes leftover after parsing attributes in process `syz.5.459'. [ 146.899397][ T40] audit: type=1400 audit(1748058180.047:485): avc: denied { block_suspend } for pid=7835 comm="syz.6.463" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 147.326990][ T40] audit: type=1400 audit(1748058180.477:486): avc: denied { read } for pid=7849 comm="syz.7.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 147.445561][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.470'. [ 147.452875][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.5.470'. [ 147.468342][ T40] audit: type=1400 audit(1748058180.617:487): avc: denied { add_name } for pid=7849 comm="syz.7.468" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.553948][ C3] net_ratelimit: 98418 callbacks suppressed [ 147.553960][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.554062][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 147.556003][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.561091][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 147.564691][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.569783][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 147.573316][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.578449][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 147.581915][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.587307][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 147.738820][ T7866] kAFS: Can only specify source 'none' with -o dyn [ 147.898423][ T6195] IPVS: starting estimator thread 0... [ 147.998742][ T7875] IPVS: using max 45 ests per chain, 108000 per kthread [ 148.149823][ T7887] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 148.382249][ T7899] netlink: 28 bytes leftover after parsing attributes in process `syz.6.479'. [ 148.468819][ T7904] Failed to get privilege flags for destination (handle=0x2:0xd) [ 148.508081][ T7901] overlay: ./file0 is not a directory [ 148.544324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 148.794168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 148.799160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 148.824457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 148.827831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 148.831225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 149.271493][ T5940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.276102][ T5940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.280949][ T5940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.285279][ T5940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.288724][ T5940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.468114][ T7928] netlink: 'syz.6.489': attribute type 10 has an invalid length. [ 149.605827][ T7928] macvlan0: entered promiscuous mode [ 149.610040][ T7928] macvlan0: entered allmulticast mode [ 149.616313][ T7928] veth1_vlan: entered allmulticast mode [ 149.619991][ T7928] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 149.826493][ T7922] chnl_net:caif_netlink_parms(): no params data found [ 149.961958][ T7956] netlink: 48 bytes leftover after parsing attributes in process `syz.7.496'. [ 150.072733][ T7959] netlink: 168 bytes leftover after parsing attributes in process `syz.7.496'. [ 150.251341][ T7922] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.253624][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.265094][ T7922] bridge_slave_0: entered allmulticast mode [ 150.268066][ T7922] bridge_slave_0: entered promiscuous mode [ 150.816004][ T7968] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 151.024465][ T7922] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.026839][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.029379][ T7922] bridge_slave_1: entered allmulticast mode [ 151.032423][ T7922] bridge_slave_1: entered promiscuous mode [ 151.131174][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 151.131217][ T40] audit: type=1400 audit(1748058184.277:503): avc: denied { listen } for pid=7978 comm="syz.7.501" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.186492][ T1142] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.201107][ T7922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.218442][ T7922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.304113][ T5940] Bluetooth: hci0: command tx timeout [ 151.397351][ T1142] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.397428][ T7988] tmpfs: Bad value for 'mpol' [ 151.413288][ T7922] team0: Port device team_slave_0 added [ 151.422219][ T7922] team0: Port device team_slave_1 added [ 151.539085][ T7922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.541309][ T7922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.550453][ T7922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.620727][ T8000] input: syz0 as /devices/virtual/input/input7 [ 151.620959][ T40] audit: type=1400 audit(1748058184.767:504): avc: denied { append } for pid=7999 comm="syz.6.509" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 151.675228][ T1142] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.684186][ T7922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.686575][ T7922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.698658][ T7922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.000697][ T8027] netlink: 12 bytes leftover after parsing attributes in process `syz.7.515'. [ 152.050700][ T1142] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.069671][ T7922] hsr_slave_0: entered promiscuous mode [ 152.072811][ T7922] hsr_slave_1: entered promiscuous mode [ 152.349637][ T8038] overlayfs: missing 'workdir' [ 152.563991][ C2] net_ratelimit: 100927 callbacks suppressed [ 152.564003][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 152.564222][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.566045][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 152.570946][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.574457][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.579605][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.583064][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.587914][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.591544][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.596310][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.709676][ T1142] bridge_slave_1: left allmulticast mode [ 152.712128][ T1142] bridge_slave_1: left promiscuous mode [ 152.718288][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.741733][ T1142] bridge_slave_0: left allmulticast mode [ 152.749202][ T1142] bridge_slave_0: left promiscuous mode [ 152.751155][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.842000][ T8056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=8056 comm=syz.6.523 [ 152.858786][ T8055] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8055 comm=syz.7.524 [ 152.919373][ T40] audit: type=1400 audit(1748058186.067:505): avc: denied { ioctl } for pid=8057 comm="syz.7.525" path="socket:[22269]" dev="sockfs" ino=22269 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 153.384114][ T5940] Bluetooth: hci0: command tx timeout [ 153.563414][ T8053] overlayfs: statfs failed on './file0' [ 154.853713][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.910231][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.967057][ T1142] bond0 (unregistering): Released all slaves [ 155.079361][ T8078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.083763][ T8078] batadv_slave_0: entered promiscuous mode [ 155.428522][ T40] audit: type=1400 audit(1748058188.577:506): avc: denied { setopt } for pid=8088 comm="syz.7.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 155.464151][ T5940] Bluetooth: hci0: command tx timeout [ 155.485864][ T8093] raw_sendmsg: syz.7.533 forgot to set AF_INET. Fix it! [ 155.553315][ T7922] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 155.570282][ T7922] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 155.579131][ T40] audit: type=1800 audit(1748058188.727:507): pid=8097 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.534" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 155.680445][ T7922] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 155.699207][ T7922] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 155.741092][ T40] audit: type=1400 audit(1748058188.887:508): avc: denied { create } for pid=8104 comm="syz.6.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 155.742654][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.537'. [ 155.747567][ T40] audit: type=1400 audit(1748058188.887:509): avc: denied { ioctl } for pid=8104 comm="syz.6.537" path="socket:[22427]" dev="sockfs" ino=22427 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 156.061684][ T40] audit: type=1400 audit(1748058189.207:510): avc: denied { mounton } for pid=8112 comm="syz.7.539" path="/81/file0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 156.089210][ T7922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.105261][ T7922] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.113634][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.116640][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.129333][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.131849][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.283573][ T1142] hsr_slave_0: left promiscuous mode [ 156.288768][ T1142] hsr_slave_1: left promiscuous mode [ 156.292839][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.303233][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.306128][ T40] audit: type=1400 audit(1748058189.447:511): avc: denied { unmount } for pid=7125 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 156.336835][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.339379][ T8118] gfs2: gfs2 mount does not exist [ 156.347447][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.411996][ T40] audit: type=1400 audit(1748058189.557:512): avc: denied { getopt } for pid=8122 comm="syz.7.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 156.412256][ T8126] dlm: no locking on control device [ 156.425390][ T1142] veth1_macvtap: left promiscuous mode [ 156.427704][ T1142] veth0_macvtap: left promiscuous mode [ 156.430074][ T1142] veth1_vlan: left promiscuous mode [ 156.432785][ T1142] veth0_vlan: left promiscuous mode [ 156.848313][ T8111] overlayfs: statfs failed on './file0' [ 157.091607][ T40] audit: type=1400 audit(1748058190.237:513): avc: denied { bind } for pid=8141 comm="syz.5.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 157.131948][ T40] audit: type=1400 audit(1748058190.277:514): avc: denied { connect } for pid=8141 comm="syz.5.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 157.544730][ T5940] Bluetooth: hci0: command tx timeout [ 157.573957][ C3] net_ratelimit: 109368 callbacks suppressed [ 157.573971][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.574042][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.576032][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.579726][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.583453][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.587115][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 157.590733][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.594418][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 157.598478][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.602118][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 158.016035][ T8157] slcan: can't register candev [ 158.025496][ T8157] Falling back ldisc for ptm0. [ 158.172964][ T13] Bluetooth: (null): Invalid header checksum [ 158.175747][ T13] Bluetooth: (null): Invalid header checksum [ 158.276431][ T713] Bluetooth: (null): Invalid header checksum [ 158.391422][ T47] Bluetooth: (null): Invalid header checksum [ 158.501247][ T713] Bluetooth: (null): Invalid header checksum [ 158.606393][ T713] Bluetooth: (null): Invalid header checksum [ 158.720571][ T47] Bluetooth: (null): Invalid header checksum [ 158.827524][ T713] Bluetooth: (null): Invalid header checksum [ 162.583982][ C2] net_ratelimit: 98858 callbacks suppressed [ 162.584004][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.584176][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.586514][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 162.590200][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.593764][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 162.597408][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.600992][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 162.604567][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.608312][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.611992][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.966621][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 164.795668][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 167.594003][ C2] net_ratelimit: 99088 callbacks suppressed [ 167.594018][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.594036][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.596142][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 167.599752][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.603431][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 167.607207][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.610840][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 167.614512][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.618450][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.622306][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.939164][ T40] audit: type=1400 audit(1748058204.087:515): avc: denied { mount } for pid=8173 comm="syz.7.549" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 170.949429][ T40] audit: type=1400 audit(1748058204.087:516): avc: denied { remount } for pid=8173 comm="syz.7.549" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 171.086682][ T40] audit: type=1400 audit(1748058204.237:517): avc: denied { unmount } for pid=7125 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 171.235743][ T8192] new mount options do not match the existing superblock, will be ignored [ 171.249683][ T7922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.250533][ T8192] cgroup: Unknown subsys name 'big_key' [ 171.252435][ T40] audit: type=1400 audit(1748058204.397:518): avc: denied { remount } for pid=8191 comm="syz.5.554" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 171.264452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 171.271361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 171.419923][ T8189] tmpfs: User quota inode hardlimit too large. [ 171.485068][ T8203] netlink: 'syz.7.556': attribute type 1 has an invalid length. [ 171.487806][ T8203] netlink: 224 bytes leftover after parsing attributes in process `syz.7.556'. [ 171.499715][ T7922] veth0_vlan: entered promiscuous mode [ 171.505677][ T7922] veth1_vlan: entered promiscuous mode [ 171.522636][ T7922] veth0_macvtap: entered promiscuous mode [ 171.527551][ T7922] veth1_macvtap: entered promiscuous mode [ 171.537801][ T7922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.543732][ T7922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.550292][ T7922] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.553004][ T7922] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.557738][ T7922] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.560584][ T7922] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.624612][ T40] audit: type=1400 audit(1748058204.777:519): avc: denied { sqpoll } for pid=8212 comm="syz.5.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 171.631382][ T8213] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 171.686596][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.6.560'. [ 171.689818][ T1246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.692232][ T1246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.711658][ T40] audit: type=1400 audit(1748058204.857:520): avc: denied { bind } for pid=8214 comm="syz.6.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.718491][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.721464][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.724572][ T40] audit: type=1400 audit(1748058204.857:521): avc: denied { name_bind } for pid=8214 comm="syz.6.560" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 171.733260][ T40] audit: type=1400 audit(1748058204.857:522): avc: denied { node_bind } for pid=8214 comm="syz.6.560" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 171.749336][ T8203] ip6gretap1: entered promiscuous mode [ 171.770661][ T40] audit: type=1400 audit(1748058204.907:523): avc: denied { mounton } for pid=7922 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 171.988881][ T40] audit: type=1400 audit(1748058205.137:524): avc: denied { setopt } for pid=8231 comm="syz.5.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 172.236876][ T8256] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 172.268038][ T8258] netlink: 'syz.8.570': attribute type 1 has an invalid length. [ 172.270481][ T8258] netlink: 224 bytes leftover after parsing attributes in process `syz.8.570'. [ 172.603987][ C2] net_ratelimit: 101535 callbacks suppressed [ 172.604006][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 172.604010][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.604199][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 172.605933][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.610899][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 172.614906][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.619830][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 172.623430][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.627982][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.632866][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.304711][ T8303] bond0: entered promiscuous mode [ 173.313505][ T8303] bond_slave_0: entered promiscuous mode [ 173.336473][ T8303] bond_slave_1: entered promiscuous mode [ 173.429351][ T8303] batadv0: entered promiscuous mode [ 173.478991][ T8303] hsr1: entered promiscuous mode [ 173.551688][ T8322] mmap: syz.7.589 (8322) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 173.560101][ T8303] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 173.764166][ T9] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 173.924057][ T9] usb 11-1: Using ep0 maxpacket: 8 [ 173.927056][ T9] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.930021][ T9] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 173.935554][ T9] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.938771][ T9] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.942888][ T9] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 173.947747][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.109386][ T8340] new mount options do not match the existing superblock, will be ignored [ 174.131681][ T8340] cgroup: Unknown subsys name 'big_key' [ 174.167938][ T9] usb 11-1: GET_CAPABILITIES returned 0 [ 174.169735][ T9] usbtmc 11-1:16.0: can't read capabilities [ 174.186402][ T8341] misc userio: Invalid payload size [ 174.329125][ T8345] netlink: 'syz.5.598': attribute type 10 has an invalid length. [ 174.347779][ T8345] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.357167][ T8345] bond0: (slave team0): Enslaving as an active interface with an up link [ 174.433279][ T8345] capability: warning: `syz.5.598' uses 32-bit capabilities (legacy support in use) [ 174.444508][ T836] usb 11-1: USB disconnect, device number 3 [ 174.626635][ T8362] fuse: Bad value for 'fd' [ 174.820897][ T8372] syz.7.608(8372): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 174.829938][ T8372] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 175.941693][ T8408] netlink: 36 bytes leftover after parsing attributes in process `syz.6.618'. [ 175.945146][ T8408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7006 sclass=netlink_route_socket pid=8408 comm=syz.6.618 [ 176.324014][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 176.456301][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 176.456312][ T40] audit: type=1400 audit(1748058209.607:534): avc: denied { setopt } for pid=8432 comm="syz.7.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.487016][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 176.492217][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 47056, setting to 1024 [ 176.497721][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 176.500986][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 26912, setting to 1024 [ 176.505127][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 176.508427][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.513153][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 176.518006][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.642908][ T8438] binder: 8437:8438 ioctl c0306201 2000000001c0 returned -22 [ 176.733871][ T9] usb 10-1: GET_CAPABILITIES returned 0 [ 176.736068][ T9] usbtmc 10-1:16.0: can't read capabilities [ 176.861450][ T40] audit: type=1400 audit(1748058210.007:535): avc: denied { write } for pid=8439 comm="syz.7.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 176.942785][ C0] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 176.946618][ T8416] usbtmc 10-1:16.0: Unable to send data, error -71 [ 176.954024][ T9] usb 10-1: USB disconnect, device number 3 [ 176.971965][ T40] audit: type=1400 audit(1748058210.117:536): avc: denied { create } for pid=8443 comm="syz.8.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 177.202640][ T8448] overlayfs: failed to resolve './file0': -2 [ 177.344000][ T6195] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 177.497551][ T6195] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.504782][ T6195] usb 12-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 177.508294][ T6195] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.523843][ T6195] usb 12-1: config 0 descriptor?? [ 177.609637][ T40] audit: type=1400 audit(1748058210.757:537): avc: denied { create } for pid=8466 comm="syz.8.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 177.614006][ C3] net_ratelimit: 97960 callbacks suppressed [ 177.614018][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.614060][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 177.614174][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 177.614279][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 177.614377][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 177.614482][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 177.614592][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 177.614690][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 177.614787][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 177.614884][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 177.623480][ T40] audit: type=1400 audit(1748058210.767:538): avc: denied { getopt } for pid=8466 comm="syz.8.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 177.677374][ T8468] pimreg: entered allmulticast mode [ 177.750660][ T8440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.754391][ T8440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.981696][ T8471] overlayfs: failed to resolve './file0': -2 [ 178.317705][ T6195] usbhid 12-1:0.0: can't add hid device: -71 [ 178.320163][ T6195] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 178.324682][ T6195] usb 12-1: USB disconnect, device number 4 [ 178.337747][ T8490] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 178.394433][ T8492] i2c i2c-1: Invalid block write size 34 [ 178.403672][ T40] audit: type=1326 audit(1748058211.547:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8491 comm="syz.5.642" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8aa78e969 code=0x7ffc0000 [ 178.422748][ T40] audit: type=1326 audit(1748058211.547:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8491 comm="syz.5.642" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8aa78e969 code=0x7ffc0000 [ 178.435411][ T40] audit: type=1326 audit(1748058211.547:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8491 comm="syz.5.642" exe="/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fd8aa78e969 code=0x7ffc0000 [ 178.442947][ T40] audit: type=1326 audit(1748058211.547:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8491 comm="syz.5.642" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8aa78e969 code=0x7ffc0000 [ 178.454382][ T40] audit: type=1326 audit(1748058211.547:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8491 comm="syz.5.642" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8aa78e969 code=0x7ffc0000 [ 178.711188][ T8510] overlayfs: failed to resolve './file0': -2 [ 178.771845][ T8514] netlink: 12 bytes leftover after parsing attributes in process `syz.5.648'. [ 178.827872][ T8517] netlink: 'syz.8.649': attribute type 10 has an invalid length. [ 178.834472][ T8517] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.838066][ T8517] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.871012][ T8517] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.874106][ T8517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.878431][ T8517] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.881531][ T8517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.894476][ T8517] bridge0: entered promiscuous mode [ 178.899936][ T8517] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 178.920350][ T8522] bridge_slave_1: left allmulticast mode [ 178.922801][ T8522] bridge_slave_1: left promiscuous mode [ 178.925889][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.939427][ T8522] bridge_slave_0: left allmulticast mode [ 178.941917][ T8522] bridge_slave_0: left promiscuous mode [ 178.945053][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.951139][ T8528] binder: Bad value for 'max' [ 178.972955][ T8527] 9pnet_fd: Insufficient options for proto=fd [ 179.015723][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.6.651'. [ 179.042746][ T8531] netlink: 'syz.5.653': attribute type 10 has an invalid length. [ 179.072618][ T8522] bond0: (slave bridge0): Releasing backup interface [ 179.140206][ T8536] netlink: 'syz.7.654': attribute type 11 has an invalid length. [ 179.142786][ T8536] netlink: 'syz.7.654': attribute type 11 has an invalid length. [ 179.145985][ T8536] netlink: 224 bytes leftover after parsing attributes in process `syz.7.654'. [ 179.151109][ T8538] netlink: 'syz.7.654': attribute type 11 has an invalid length. [ 179.153680][ T8538] netlink: 'syz.7.654': attribute type 11 has an invalid length. [ 179.157839][ T8538] netlink: 224 bytes leftover after parsing attributes in process `syz.7.654'. [ 179.189482][ T8542] ALSA: mixer_oss: invalid OSS volume '¥—8œÎùÇÄ–!Kd&¿]G‹' [ 179.192179][ T8542] ALSA: mixer_oss: invalid OSS volume 'Ï­æEÑÆ)©U%ÆØ“€²©i–IbòF‚QA!çD' [ 179.195336][ T8542] ALSA: mixer_oss: invalid OSS volume '' [ 179.197248][ T8542] ALSA: mixer_oss: invalid OSS volume '' [ 179.234689][ T8522] bridge0 (unregistering): left promiscuous mode [ 179.371430][ T8523] bridge_slave_1: left allmulticast mode [ 179.373655][ T8523] bridge_slave_1: left promiscuous mode [ 179.377886][ T8523] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.446745][ T8523] bridge_slave_0: left allmulticast mode [ 179.448644][ T8523] bridge_slave_0: left promiscuous mode [ 179.450143][ T8547] overlayfs: failed to resolve './file0': -2 [ 179.450598][ T8523] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.659907][ T8531] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.672945][ T8531] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.676179][ T8531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.682218][ T8531] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 179.686599][ T8534] bridge_slave_1: left allmulticast mode [ 179.690342][ T8534] bridge_slave_1: left promiscuous mode [ 179.692863][ T8534] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.713567][ T8534] bridge_slave_0: left allmulticast mode [ 179.716370][ T8534] bridge_slave_0: left promiscuous mode [ 179.718313][ T8534] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.781843][ T8569] netlink: 24 bytes leftover after parsing attributes in process `syz.6.660'. [ 179.782768][ T8570] netlink: 24 bytes leftover after parsing attributes in process `syz.6.660'. [ 179.817248][ T8534] bond0: (slave bridge0): Releasing backup interface [ 180.027683][ T8586] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 180.031132][ T8586] SELinux: failed to load policy [ 180.156624][ T8589] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 180.314084][ T836] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 180.373126][ T8609] batman_adv: batadv0: Adding interface: dummy0 [ 180.375397][ T8609] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.383167][ T8609] batman_adv: batadv0: Interface activated: dummy0 [ 180.468977][ T836] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 180.473099][ T836] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 180.477994][ T836] usb 12-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.485410][ T836] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 180.489092][ T836] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.492280][ T836] usb 12-1: Product: syz [ 180.516821][ T836] usb 12-1: Manufacturer: syz [ 180.518751][ T836] usb 12-1: SerialNumber: syz [ 180.610594][ T8618] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 180.685690][ T8616] netlink: 750 bytes leftover after parsing attributes in process `syz.5.673'. [ 180.734456][ T836] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 181.084950][ T8635] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 181.088263][ T8635] SELinux: failed to load policy [ 181.133765][ T8633] overlay: Unknown parameter 'uid>00000000000000000000' [ 181.171538][ T8638] fuse: Bad value for 'fd' [ 181.203664][ T8640] netlink: 'syz.5.679': attribute type 13 has an invalid length. [ 181.233354][ T8640] gretap0: refused to change device tx_queue_len [ 181.240558][ T8640] netlink: 'syz.5.679': attribute type 13 has an invalid length. [ 181.245145][ T8640] gretap0: refused to change device tx_queue_len [ 181.247401][ T8640] netlink: 'syz.5.679': attribute type 13 has an invalid length. [ 181.250796][ T8640] gretap0: refused to change device tx_queue_len [ 181.253106][ T8640] netlink: 'syz.5.679': attribute type 13 has an invalid length. [ 181.258404][ T8640] gretap0: refused to change device tx_queue_len [ 181.261424][ T8640] netlink: 'syz.5.679': attribute type 13 has an invalid length. [ 181.265072][ T8640] gretap0: refused to change device tx_queue_len [ 181.267667][ T8640] netlink: 'syz.5.679': attribute type 13 has an invalid length. [ 181.271102][ T8640] gretap0: refused to change device tx_queue_len [ 181.275377][ T8640] netlink: 'syz.5.679': attribute type 13 has an invalid length. [ 181.279102][ T8640] gretap0: refused to change device tx_queue_len [ 181.295884][ T8640] netlink: 'syz.5.679': attribute type 13 has an invalid length. [ 181.305247][ T8640] gretap0: refused to change device tx_queue_len [ 181.310723][ T8640] gretap0: refused to change device tx_queue_len [ 181.313683][ T8640] gretap0: refused to change device tx_queue_len [ 181.320798][ T8640] gretap0: refused to change device tx_queue_len [ 181.324117][ T8640] gretap0: refused to change device tx_queue_len [ 181.327537][ T8640] gretap0: refused to change device tx_queue_len [ 181.330627][ T8640] gretap0: refused to change device tx_queue_len [ 181.333731][ T8640] gretap0: refused to change device tx_queue_len [ 181.338062][ T8640] gretap0: refused to change device tx_queue_len [ 181.341263][ T8640] gretap0: refused to change device tx_queue_len [ 181.346431][ T8640] gretap0: refused to change device tx_queue_len [ 181.349757][ T8640] gretap0: refused to change device tx_queue_len [ 181.352915][ T8640] gretap0: refused to change device tx_queue_len [ 181.356904][ T8640] gretap0: refused to change device tx_queue_len [ 181.359832][ T8640] gretap0: refused to change device tx_queue_len [ 181.362685][ T8640] gretap0: refused to change device tx_queue_len [ 181.366467][ T8640] gretap0: refused to change device tx_queue_len [ 181.369409][ T8640] gretap0: refused to change device tx_queue_len [ 181.372424][ T8640] gretap0: refused to change device tx_queue_len [ 181.377861][ T8640] gretap0: refused to change device tx_queue_len [ 181.380791][ T8640] gretap0: refused to change device tx_queue_len [ 181.383687][ T8640] gretap0: refused to change device tx_queue_len [ 181.387688][ T8640] gretap0: refused to change device tx_queue_len [ 181.390557][ T8640] gretap0: refused to change device tx_queue_len [ 181.393150][ T8640] gretap0: refused to change device tx_queue_len [ 181.395518][ T8640] gretap0: refused to change device tx_queue_len [ 181.573389][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 181.573411][ T40] audit: type=1326 audit(1748058214.717:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.6.676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1d78e969 code=0x7fc00000 [ 181.607739][ T40] audit: type=1326 audit(1748058214.717:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.6.676" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d1d78e969 code=0x7fc00000 [ 181.617762][ T40] audit: type=1326 audit(1748058214.717:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.6.676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1d78e969 code=0x7fc00000 [ 181.627550][ T40] audit: type=1326 audit(1748058214.717:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.6.676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1d78e969 code=0x7fc00000 [ 181.637426][ T40] audit: type=1326 audit(1748058214.717:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.6.676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1d78e969 code=0x7fc00000 [ 181.648243][ T40] audit: type=1326 audit(1748058214.717:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.6.676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1d78e969 code=0x7fc00000 [ 181.669868][ T40] audit: type=1326 audit(1748058214.717:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.6.676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1d78e969 code=0x7fc00000 [ 181.686621][ T40] audit: type=1326 audit(1748058214.717:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.6.676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1d78e969 code=0x7fc00000 [ 181.696990][ T40] audit: type=1326 audit(1748058214.717:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.6.676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1d78e969 code=0x7fc00000 [ 181.709776][ T40] audit: type=1326 audit(1748058214.717:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.6.676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1d78e969 code=0x7fc00000 [ 181.715109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 181.727446][ T8659] netlink: 32 bytes leftover after parsing attributes in process `syz.5.684'. [ 181.730053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 181.774325][ T8661] netlink: 76 bytes leftover after parsing attributes in process `syz.5.685'. [ 181.778272][ T8662] netlink: 76 bytes leftover after parsing attributes in process `syz.5.685'. [ 181.865577][ T5941] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 181.868357][ T5941] Bluetooth: hci7: Injecting HCI hardware error event [ 181.873487][ T5941] Bluetooth: hci7: hardware error 0x00 [ 181.889504][ T8667] syz.5.687: attempt to access beyond end of device [ 181.889504][ T8667] loop5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 181.898851][ T8667] syz.5.687: attempt to access beyond end of device [ 181.898851][ T8667] loop5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 181.900028][ T8670] fuse: Bad value for 'fd' [ 181.903023][ T8667] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 181.908046][ T8667] syz.5.687: attempt to access beyond end of device [ 181.908046][ T8667] loop5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 181.912082][ T8667] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 181.918347][ T8667] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 181.923380][ T8667] UDF-fs: Scanning with blocksize 512 failed [ 181.926119][ T8667] syz.5.687: attempt to access beyond end of device [ 181.926119][ T8667] loop5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 181.930289][ T8667] syz.5.687: attempt to access beyond end of device [ 181.930289][ T8667] loop5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 181.934437][ T8667] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 181.937479][ T8667] syz.5.687: attempt to access beyond end of device [ 181.937479][ T8667] loop5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 181.941554][ T8667] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 181.944641][ T8667] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 181.947011][ T8667] UDF-fs: Scanning with blocksize 1024 failed [ 181.949213][ T8667] syz.5.687: attempt to access beyond end of device [ 181.949213][ T8667] loop5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 181.953322][ T8667] syz.5.687: attempt to access beyond end of device [ 181.953322][ T8667] loop5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 181.957541][ T8667] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 181.961007][ T8667] syz.5.687: attempt to access beyond end of device [ 181.961007][ T8667] loop5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 181.965123][ T8667] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 181.968589][ T8667] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 181.972378][ T8667] UDF-fs: Scanning with blocksize 2048 failed [ 181.975785][ T8667] syz.5.687: attempt to access beyond end of device [ 181.975785][ T8667] loop5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 181.980058][ T8667] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 181.983199][ T8667] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 181.989217][ T8667] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 181.991805][ T8667] UDF-fs: Scanning with blocksize 4096 failed [ 181.993804][ T8667] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 182.009584][ T8674] ubi31: attaching mtd0 [ 182.011026][ T8674] ubi31 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 182.623977][ C3] net_ratelimit: 96628 callbacks suppressed [ 182.623996][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.625189][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 182.626380][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.630632][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 182.633897][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.637690][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 182.641135][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.644841][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 182.648197][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.652802][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 183.161988][ T8713] /dev/sg0: Can't lookup blockdev [ 183.266784][ T8707] bond0: Error: Cannot enslave bond to itself. [ 183.270277][ T8717] veth1_to_bond: entered promiscuous mode [ 183.273220][ T8716] veth1_to_bond: left promiscuous mode [ 183.652304][ T8723] input: syz1 as /devices/virtual/input/input8 [ 183.914177][ T10] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 184.068842][ T10] usb 10-1: config 1 interface 0 altsetting 251 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.072961][ T10] usb 10-1: config 1 interface 0 has no altsetting 0 [ 184.077337][ T10] usb 10-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.40 [ 184.080269][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.082823][ T10] usb 10-1: Product: 鹇಻༢ì–è“¡è¢åš¹âƒ¥ê“¶ç³Ÿá‡¦éŸ…렴譺麦홓ᒱ匘놫ì¥çˆ§æˆšç㫚￳é¿à±”é–¦î¶ç´ç¼”箇䑰⿽￢ᗊ钨饟篞綶㻑刵鳒êˆã­„ [ 184.091889][ T10] usb 10-1: Manufacturer: ည [ 184.093453][ T10] usb 10-1: SerialNumber: Ñ— [ 184.096760][ T10] usb 10-1: rejected 1 configuration due to insufficient available bus power [ 184.099636][ T10] usb 10-1: no configuration chosen from 1 choice [ 184.194162][ T5941] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 184.296294][ T8746] ptrace attach of "/syz-executor exec"[7922] was attempted by " [ 185.093306][ T8756] proc: Unknown parameter 'netdevsim0' [ 185.123755][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.131108][ T8756] __nla_validate_parse: 1 callbacks suppressed [ 185.131123][ T8756] netlink: 8 bytes leftover after parsing attributes in process `syz.6.717'. [ 185.137146][ T8756] netlink: 24 bytes leftover after parsing attributes in process `syz.6.717'. [ 185.189973][ T78] Bluetooth: Error in BCSP hdr checksum [ 185.946714][ T8574] usblp0:failed reading printer status (-110) [ 186.190996][ T836] usb 12-1: USB disconnect, device number 5 [ 186.202955][ T836] usblp0: removed [ 186.662915][ T836] usb 10-1: USB disconnect, device number 4 [ 186.938698][ T40] kauditd_printk_skb: 63 callbacks suppressed [ 186.938709][ T40] audit: type=1400 audit(2000000000.220:644): avc: denied { setattr } for pid=8785 comm="syz.7.726" path="/dev/nvme-fabrics" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 186.960121][ T40] audit: type=1400 audit(2000000000.220:645): avc: denied { ioctl } for pid=8785 comm="syz.7.726" path="socket:[27228]" dev="sockfs" ino=27228 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.050255][ T8791] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 187.056143][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.7.727'. [ 187.153610][ T8797] team0: No ports can be present during mode change [ 187.224627][ T5941] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 187.226102][ T5940] Bluetooth: hci1: command 0x1003 tx timeout [ 187.287641][ T8799] macvlan0: Device is already in use. [ 187.489732][ T8804] tmpfs: Cannot enable quota on remount [ 187.633959][ C2] net_ratelimit: 105215 callbacks suppressed [ 187.633970][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.634000][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.636007][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 187.639652][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.643337][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 187.647086][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.650785][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 187.654523][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.658105][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.661906][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.790878][ T8831] vivid-002: disconnect [ 187.792858][ T8831] random: crng reseeded on system resumption [ 187.799239][ T40] audit: type=1400 audit(2000000001.079:646): avc: denied { firmware_load } for pid=1142 comm="kworker/u32:6" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 187.942738][ T8825] vivid-002: reconnect [ 187.950709][ T8827] cgroup: Name too long [ 187.955845][ T40] audit: type=1800 audit(2000000001.239:647): pid=8827 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.739" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 188.002146][ T8836] netlink: 12 bytes leftover after parsing attributes in process `syz.7.743'. [ 188.203206][ T8847] netlink: 256 bytes leftover after parsing attributes in process `syz.7.747'. [ 188.580553][ T8867] binder: 8866:8867 ioctl c0306201 0 returned -14 [ 188.634954][ T8870] binder: 8866:8870 ioctl 5411 200000000000 returned -22 [ 188.647168][ T40] audit: type=1400 audit(2000000001.929:648): avc: denied { accept } for pid=8856 comm="syz.8.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 188.889223][ T1246] Bluetooth: hci1: Frame reassembly failed (-84) [ 188.897661][ T78] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 188.901203][ T8879] misc userio: Can't change port type on an already running userio instance [ 189.498963][ T8886] usb usb8: usbfs: process 8886 (syz.7.759) did not claim interface 0 before use [ 189.593726][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.8.760'. [ 189.597568][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.8.760'. [ 189.597874][ T8886] qnx4: no qnx4 filesystem (no root dir). [ 189.607653][ T8889] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.610519][ T8889] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.613458][ T8889] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.616779][ T8889] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.737029][ T40] audit: type=1400 audit(2000000003.019:649): avc: denied { execute } for pid=8892 comm="syz.8.762" path="/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs" dev="sysfs" ino=1322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 189.739993][ T40] audit: type=1400 audit(2000000003.019:650): avc: denied { map } for pid=8892 comm="syz.8.762" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 189.894077][ T7276] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 190.044974][ T7276] usb 12-1: too many configurations: 9, using maximum allowed: 8 [ 190.048266][ T7276] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.051676][ T7276] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.055356][ T7276] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 190.058352][ T7276] usb 12-1: config 0 interface 0 has no altsetting 0 [ 190.061213][ T7276] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.064191][ T7276] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.067543][ T7276] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 190.070538][ T7276] usb 12-1: config 0 interface 0 has no altsetting 0 [ 190.075322][ T7276] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.078111][ T7276] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.081479][ T7276] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 190.084817][ T7276] usb 12-1: config 0 interface 0 has no altsetting 0 [ 190.087686][ T7276] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.090485][ T7276] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.093872][ T7276] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 190.097047][ T7276] usb 12-1: config 0 interface 0 has no altsetting 0 [ 190.099904][ T7276] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.102676][ T7276] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.107161][ T7276] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 190.110215][ T7276] usb 12-1: config 0 interface 0 has no altsetting 0 [ 190.113046][ T7276] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.116148][ T7276] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.119557][ T7276] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 190.128450][ T7276] usb 12-1: config 0 interface 0 has no altsetting 0 [ 190.133351][ T7276] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.138572][ T7276] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.142035][ T7276] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 190.145838][ T7276] usb 12-1: config 0 interface 0 has no altsetting 0 [ 190.149282][ T7276] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.152706][ T7276] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.156693][ T7276] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 190.159672][ T7276] usb 12-1: config 0 interface 0 has no altsetting 0 [ 190.163287][ T7276] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 190.166720][ T7276] usb 12-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 190.169356][ T7276] usb 12-1: Product: syz [ 190.170698][ T7276] usb 12-1: Manufacturer: syz [ 190.172190][ T7276] usb 12-1: SerialNumber: syz [ 190.177297][ T7276] usb 12-1: config 0 descriptor?? [ 190.181554][ T7276] yurex 12-1:0.0: Could not submitting URB [ 190.186442][ T7276] yurex 12-1:0.0: probe with driver yurex failed with error -5 [ 190.269618][ T8906] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 190.270974][ T8902] netlink: 16 bytes leftover after parsing attributes in process `syz.5.765'. [ 190.276805][ T8902] netlink: 92 bytes leftover after parsing attributes in process `syz.5.765'. [ 190.381281][ T7276] usb 12-1: USB disconnect, device number 6 [ 190.393815][ T8910] hpfs: Bad magic ... probably not HPFS [ 190.430422][ T8916] bio_check_eod: 2 callbacks suppressed [ 190.430433][ T8916] syz.8.768: attempt to access beyond end of device [ 190.430433][ T8916] nbd8: rw=0, sector=2, nr_sectors = 2 limit=0 [ 190.438538][ T8916] MINIX-fs: unable to read superblock [ 190.515866][ T40] audit: type=1400 audit(2000000003.789:651): avc: denied { append } for pid=8917 comm="syz.8.769" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 190.526122][ T8920] input: syz0 as /devices/virtual/input/input10 [ 190.739729][ T8931] netlink: 12 bytes leftover after parsing attributes in process `syz.5.774'. [ 190.743832][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.774'. [ 190.842171][ T8938] validate_nla: 25 callbacks suppressed [ 190.842183][ T8938] netlink: 'syz.5.777': attribute type 10 has an invalid length. [ 190.858415][ T8938] team0: Device ipvlan1 failed to register rx_handler [ 190.904111][ T5941] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 190.948122][ T8930] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.996001][ T40] audit: type=1400 audit(2000000004.279:652): avc: denied { setopt } for pid=8943 comm="syz.6.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 191.027434][ T40] audit: type=1400 audit(2000000004.299:653): avc: denied { connect } for pid=8943 comm="syz.6.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 191.040721][ T8947] netlink: 24 bytes leftover after parsing attributes in process `syz.5.778'. [ 191.098738][ T8948] No such timeout policy "syz0" [ 191.504731][ T1112] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 191.506857][ T1112] ata1: failed to read log page 10h (errno=-5) [ 191.508774][ T1112] ata1.00: exception Emask 0x1 SAct 0x10000000 SErr 0x0 action 0x0 [ 191.511761][ T1112] ata1.00: irq_stat 0x40000000 [ 191.513333][ T1112] ata1.00: failed command: WRITE FPDMA QUEUED [ 191.515343][ T1112] ata1.00: cmd 61/68:e0:a6:09:10/00:00:00:00:00/40 tag 28 ncq dma 53248 out [ 191.515343][ T1112] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 191.520717][ T1112] ata1.00: status: { DRDY } [ 191.523765][ T1112] ata1.00: configured for UDMA/100 [ 191.525904][ T1112] ata1: EH complete [ 191.647255][ T8968] tmpfs: Invalid gid '0x00000000ffffffff' [ 192.167415][ T8994] netlink: 28 bytes leftover after parsing attributes in process `syz.5.796'. [ 192.213249][ T8995] dns_resolver: Unsupported content type (234) [ 192.234107][ T10] usb 11-1: new low-speed USB device number 4 using dummy_hcd [ 192.267307][ T8999] fuse: Bad value for 'group_id' [ 192.268963][ T8999] fuse: Bad value for 'group_id' [ 192.320305][ T9001] netlink: 24 bytes leftover after parsing attributes in process `syz.5.798'. [ 192.364058][ T10] usb 11-1: device descriptor read/64, error -71 [ 192.604321][ T10] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 192.643973][ C3] net_ratelimit: 107399 callbacks suppressed [ 192.643986][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.644103][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 192.646184][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.649842][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.653519][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.657387][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.660987][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.664708][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.668663][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.672351][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 192.689998][ T9013] netlink: 'syz.5.802': attribute type 10 has an invalid length. [ 192.693366][ T9013] netlink: 40 bytes leftover after parsing attributes in process `syz.5.802'. [ 192.746994][ T10] usb 11-1: device descriptor read/64, error -71 [ 192.841396][ T9013] team0: Port device geneve0 added [ 192.854390][ T10] usb usb11-port1: attempt power cycle [ 193.072973][ T9020] netlink: 32 bytes leftover after parsing attributes in process `syz.5.805'. [ 193.082730][ T9020] netlink: 32 bytes leftover after parsing attributes in process `syz.5.805'. [ 193.128349][ T9018] syz.8.804: attempt to access beyond end of device [ 193.128349][ T9018] loop8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 193.132324][ T9018] efs: cannot read volume header [ 193.204372][ T10] usb 11-1: new low-speed USB device number 6 using dummy_hcd [ 193.228054][ T10] usb 11-1: device descriptor read/8, error -71 [ 193.234274][ T9029] 9pnet_virtio: no channels available for device /dev/sr0 [ 193.298755][ T9037] batadv_slave_1: entered promiscuous mode [ 193.311040][ T9039] batadv_slave_1: left promiscuous mode [ 193.476941][ T10] usb 11-1: new low-speed USB device number 7 using dummy_hcd [ 193.495395][ T10] usb 11-1: device descriptor read/8, error -71 [ 193.589282][ T9048] No buffer was provided with the request [ 193.604268][ T10] usb usb11-port1: unable to enumerate USB device [ 193.761207][ T9050] nbd: must specify a device to reconfigure [ 193.766731][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 193.766745][ T40] audit: type=1400 audit(2000000007.049:655): avc: denied { map } for pid=9049 comm="syz.8.810" path="socket:[28919]" dev="sockfs" ino=28919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 194.030328][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.032344][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.112273][ T9081] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 194.216835][ T9089] fuse: Bad value for 'group_id' [ 194.218518][ T9089] fuse: Bad value for 'group_id' [ 194.318092][ T40] audit: type=1400 audit(2000000007.599:656): avc: denied { ioctl } for pid=9092 comm="syz.8.824" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x460f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 194.577761][ T9117] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 194.609413][ T9120] fuse: Bad value for 'group_id' [ 194.611448][ T9120] fuse: Bad value for 'group_id' [ 194.803705][ T40] audit: type=1400 audit(2000000008.069:657): avc: denied { listen } for pid=9126 comm="syz.5.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 194.810337][ T40] audit: type=1400 audit(2000000008.069:658): avc: denied { accept } for pid=9126 comm="syz.5.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 194.865819][ T9141] kvm: user requested TSC rate below hardware speed [ 194.874996][ T9137] xt_hashlimit: size too large, truncated to 1048576 [ 194.967397][ T9150] Bluetooth: hci1: Frame reassembly failed (-84) [ 195.185364][ T9160] syz.5.841: attempt to access beyond end of device [ 195.185364][ T9160] loop5: rw=0, sector=1, nr_sectors = 1 limit=0 [ 195.189433][ T9160] qnx4: unable to read the superblock [ 195.246818][ T40] audit: type=1400 audit(2000000008.529:659): avc: denied { map } for pid=9161 comm="syz.5.842" path="socket:[29208]" dev="sockfs" ino=29208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 195.279051][ T9166] __nla_validate_parse: 2 callbacks suppressed [ 195.279063][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.843'. [ 195.641408][ T40] audit: type=1400 audit(2000000008.919:660): avc: denied { create } for pid=9172 comm="syz.5.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 195.648026][ T40] audit: type=1400 audit(2000000008.919:661): avc: denied { write } for pid=9172 comm="syz.5.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 195.659998][ T40] audit: type=1400 audit(2000000008.939:662): avc: denied { append } for pid=9175 comm="syz.7.846" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 195.676099][ T40] audit: type=1400 audit(2000000008.949:663): avc: denied { accept } for pid=9175 comm="syz.7.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 195.709212][ T40] audit: type=1400 audit(2000000008.989:664): avc: denied { ioctl } for pid=9177 comm="syz.7.847" path="socket:[29277]" dev="sockfs" ino=29277 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 195.910514][ T9189] use of bytesused == 0 is deprecated and will be removed in the future, [ 195.913434][ T9189] use the actual size instead. [ 195.918325][ T9182] "syz.7.849" (9182) uses obsolete ecb(arc4) skcipher [ 196.028354][ T9195] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 196.032356][ T9195] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 196.334994][ T9213] netlink: 'syz.5.858': attribute type 1 has an invalid length. [ 196.387407][ T9213] veth5: entered promiscuous mode [ 196.392610][ T9213] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 196.547459][ T9228] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 196.552067][ T9228] ptrace attach of "/syz-executor exec"[7125] was attempted by "/syz-executor exec"[9228] [ 196.984682][ T5940] Bluetooth: hci1: command 0xfc11 tx timeout [ 196.987638][ T5941] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 197.508204][ T9261] syz.7.874: attempt to access beyond end of device [ 197.508204][ T9261] nbd7: rw=0, sector=2, nr_sectors = 2 limit=0 [ 197.512849][ T9261] vxfs: unable to read disk superblock at 1 [ 197.519250][ T9261] syz.7.874: attempt to access beyond end of device [ 197.519250][ T9261] nbd7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 197.524142][ T9261] vxfs: unable to read disk superblock at 8 [ 197.526100][ T9261] vxfs: can't find superblock. [ 197.654001][ C3] net_ratelimit: 106823 callbacks suppressed [ 197.654014][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.654026][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.656096][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.659739][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.663369][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.667099][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 197.670701][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.674404][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 197.678207][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.681788][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 197.683438][ T9271] overlay: Unknown parameter 'subj_role' [ 197.764186][ T9272] netlink: 'syz.8.877': attribute type 1 has an invalid length. [ 197.766782][ T9272] netlink: 208 bytes leftover after parsing attributes in process `syz.8.877'. [ 197.769681][ T9272] netlink: 'syz.8.877': attribute type 1 has an invalid length. [ 197.772136][ T9272] netlink: 'syz.8.877': attribute type 2 has an invalid length. [ 197.954469][ T10] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 198.175676][ T9283] netlink: 96 bytes leftover after parsing attributes in process `syz.5.881'. [ 198.219160][ T9291] trusted_key: syz.6.883 sent an empty control message without MSG_MORE. [ 198.247608][ T9293] netlink: 12 bytes leftover after parsing attributes in process `syz.6.885'. [ 198.525327][ T6195] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 198.654363][ T6195] usb 11-1: device descriptor read/64, error -71 [ 198.727633][ T9304] syz.5.888 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 198.914062][ T6195] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 199.045176][ T6195] usb 11-1: device descriptor read/64, error -71 [ 199.156025][ T6195] usb usb11-port1: attempt power cycle [ 199.337169][ T9314] netlink: 'syz.7.892': attribute type 1 has an invalid length. [ 199.347928][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 199.347940][ T40] audit: type=1400 audit(2000000012.619:670): avc: denied { write } for pid=9313 comm="syz.7.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 199.494248][ T6195] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 199.519002][ T6195] usb 11-1: device descriptor read/8, error -71 [ 199.731992][ T5940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 199.737195][ T5940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 199.741580][ T5940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 199.744932][ T5940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 199.748588][ T5940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 199.764002][ T6195] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 199.786607][ T6195] usb 11-1: device descriptor read/8, error -71 [ 199.898878][ T6195] usb usb11-port1: unable to enumerate USB device [ 199.952005][ T1142] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.107689][ T1142] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.278372][ T1142] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.482628][ T1142] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.536734][ T9320] chnl_net:caif_netlink_parms(): no params data found [ 200.664757][ T9338] netlink: 72 bytes leftover after parsing attributes in process `syz.7.899'. [ 200.704931][ T9320] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.711120][ T9320] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.714601][ T9320] bridge_slave_0: entered allmulticast mode [ 200.717459][ T9320] bridge_slave_0: entered promiscuous mode [ 200.720989][ T9320] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.723341][ T9320] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.726390][ T9320] bridge_slave_1: entered allmulticast mode [ 200.729083][ T9320] bridge_slave_1: entered promiscuous mode [ 201.784223][ T5940] Bluetooth: hci1: command tx timeout [ 201.998800][ T9347] syzkaller1: entered promiscuous mode [ 202.001321][ T9347] syzkaller1: entered allmulticast mode [ 202.015246][ T9320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.020431][ T9320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.083715][ T9354] fuse: Unknown parameter 'grou00000000000000000000' [ 202.165483][ T40] audit: type=1400 audit(2000000015.449:671): avc: denied { ioctl } for pid=9355 comm="syz.7.905" path="socket:[30091]" dev="sockfs" ino=30091 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 202.406785][ T9320] team0: Port device team_slave_0 added [ 202.473111][ T9363] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 202.663962][ C2] net_ratelimit: 105934 callbacks suppressed [ 202.663977][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 202.663991][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.666033][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.669692][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.673357][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 202.677100][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.680751][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.684443][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.688151][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.691788][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.711388][ T40] audit: type=1400 audit(2000000015.989:672): avc: denied { write } for pid=9364 comm="syz.8.908" path="socket:[30861]" dev="sockfs" ino=30861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 203.112461][ T9371] Bluetooth: MGMT ver 1.23 [ 203.546561][ T1142] team0: Port device geneve0 removed [ 203.864097][ T5940] Bluetooth: hci1: command tx timeout [ 204.406931][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.481427][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.528410][ T1142] bond0 (unregistering): (slave team0): Releasing backup interface [ 204.579823][ T1142] bond0 (unregistering): Released all slaves [ 204.594838][ T1142] bond1 (unregistering): (slave veth5): Releasing backup interface [ 204.678982][ T1142] bond1 (unregistering): Released all slaves [ 204.698518][ T9320] team0: Port device team_slave_1 added [ 204.902093][ T9320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.908486][ T9381] fuse: Unknown parameter 'group_i00000000000000000000' [ 204.916935][ T9320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.925367][ T9320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.929585][ T9320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.955230][ T9320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.964838][ T9384] picdev_write: 42 callbacks suppressed [ 204.964851][ T9384] kvm: pic: non byte write [ 204.965180][ T9320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.047610][ T9320] hsr_slave_0: entered promiscuous mode [ 205.052510][ T9320] hsr_slave_1: entered promiscuous mode [ 205.057831][ T9320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.060323][ T9320] Cannot create hsr debugfs directory [ 205.300211][ T9320] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 205.310419][ T9320] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 205.316367][ T9320] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 205.322710][ T9320] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 205.377779][ T9320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.388870][ T9320] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.477725][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.480492][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.487617][ T1246] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.489913][ T1246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.656824][ T9320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.814254][ T9400] QAT: failed to copy from user. [ 205.944214][ T5940] Bluetooth: hci1: command tx timeout [ 206.014758][ T9320] veth0_vlan: entered promiscuous mode [ 206.016708][ T9414] Mount JFS Failure: -22 [ 206.042346][ T9320] veth1_vlan: entered promiscuous mode [ 206.099878][ T837] IPVS: starting estimator thread 0... [ 206.149150][ T9320] veth0_macvtap: entered promiscuous mode [ 206.155974][ T9320] veth1_macvtap: entered promiscuous mode [ 206.195977][ T9415] IPVS: using max 46 ests per chain, 110400 per kthread [ 206.328507][ T9320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.356794][ T9320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.360536][ T9320] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.363240][ T9320] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.366144][ T9320] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.368891][ T9320] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.377100][ T9422] fuse: Unknown parameter 'group_i00000000000000000000' [ 206.448388][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.464475][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.500897][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.503420][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.541450][ T40] audit: type=1400 audit(2000000019.819:673): avc: denied { mounton } for pid=9320 comm="syz-executor" path="/syzkaller.Ju0XvQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=31567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 206.574062][ T9430] dlm: Unknown command passed to DLM device : 255 [ 206.574062][ T9430] [ 206.574252][ T40] audit: type=1400 audit(2000000019.839:674): avc: denied { mount } for pid=9320 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 207.070948][ T40] audit: type=1326 audit(2000000020.349:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.6.928" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d1d78e969 code=0x0 [ 207.144104][ T6195] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 207.189088][ T9452] fuse: Unknown parameter 'group_i00000000000000000000' [ 207.304147][ T6195] usb 14-1: Using ep0 maxpacket: 16 [ 207.307607][ T6195] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.311235][ T6195] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.314706][ T6195] usb 14-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 207.318154][ T6195] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.323184][ T6195] usb 14-1: config 0 descriptor?? [ 207.673970][ C2] net_ratelimit: 112087 callbacks suppressed [ 207.673984][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.674083][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.676014][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 207.679598][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.683253][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.686944][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.690450][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.694119][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.697787][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.701387][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.737831][ T6195] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 207.748591][ T6195] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 207.750948][ T6195] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 207.754138][ T6195] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 207.756390][ T6195] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 207.759305][ T6195] appleir 0003:05AC:8241.0004: No inputs registered, leaving [ 207.795147][ T6195] appleir 0003:05AC:8241.0004: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.9-1/input0 [ 208.007629][ T9437] RDS: rds_bind could not find a transport for ::ffff:172.30.1.10, load rds_tcp or rds_rdma? [ 208.016311][ T9478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.021125][ T9478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.024148][ T5940] Bluetooth: hci1: command tx timeout [ 208.048030][ T9] usb 14-1: USB disconnect, device number 2 [ 208.342235][ T9490] fuse: Unknown parameter 'group_id00000000000000000000' [ 209.940948][ T40] audit: type=1400 audit(2000000023.219:676): avc: denied { accept } for pid=9494 comm="syz.8.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 210.788413][ T40] audit: type=1400 audit(2000000024.069:677): avc: denied { map } for pid=9529 comm="syz.8.952" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 210.788833][ T9536] No memory to map [ 210.800664][ T40] audit: type=1400 audit(2000000024.069:678): avc: denied { execute } for pid=9529 comm="syz.8.952" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 210.918693][ T40] audit: type=1400 audit(2000000024.199:679): avc: denied { name_bind 0x1000000 } for pid=9545 comm="syz.6.955" path="socket:[31911]" dev="sockfs" ino=31911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 210.943235][ T40] audit: type=1400 audit(2000000024.209:680): avc: denied { ioctl } for pid=9545 comm="syz.6.955" path="socket:[31914]" dev="sockfs" ino=31914 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 211.036597][ T9551] program syz.6.958 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.040250][ T9551] ata1.00: invalid service action 31 [ 211.042898][ T1142] hsr_slave_0: left promiscuous mode [ 211.069150][ T9531] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 211.073225][ T1142] hsr_slave_1: left promiscuous mode [ 211.077132][ T1142] batman_adv: batadv0: Interface deactivated: dummy0 [ 211.080711][ T1142] batman_adv: batadv0: Removing interface: dummy0 [ 211.100130][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.103096][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.136167][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.145925][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.261364][ T1142] veth1_macvtap: left promiscuous mode [ 211.263770][ T1142] veth0_macvtap: left promiscuous mode [ 211.271524][ T1142] veth1_vlan: left promiscuous mode [ 211.273256][ T1142] veth0_vlan: left promiscuous mode [ 211.866019][ T6195] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 212.034054][ T6195] usb 11-1: Using ep0 maxpacket: 8 [ 212.037352][ T6195] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 212.040540][ T6195] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 212.044009][ T6195] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 212.047984][ T6195] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.053347][ T6195] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.057380][ T6195] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.269932][ T6195] usb 11-1: GET_CAPABILITIES returned 0 [ 212.272416][ T6195] usbtmc 11-1:16.0: can't read capabilities [ 212.683980][ C2] net_ratelimit: 95705 callbacks suppressed [ 212.683992][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 212.684022][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.686082][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 212.689743][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.693408][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 212.697125][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.700954][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 212.704584][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.708293][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 212.711915][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.693983][ C3] net_ratelimit: 111611 callbacks suppressed [ 217.693996][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.694045][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 217.696002][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.699610][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 217.703249][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.706985][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 217.710975][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.714639][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 217.718430][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.722127][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 222.180551][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 222.703982][ C3] net_ratelimit: 109209 callbacks suppressed [ 222.703997][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.704019][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 222.706036][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.709702][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 222.713307][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.717057][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 222.720657][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.724361][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 222.727995][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.731624][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 222.955716][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 226.764243][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 226.770918][ T5941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 226.787041][ T5942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 226.790394][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 226.790518][ T5942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 226.794006][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 226.797193][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 226.802722][ T5940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 226.807586][ T5940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 226.810347][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 226.853032][ T5941] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 226.864969][ T5941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 226.867908][ T5941] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 226.871506][ T5941] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 226.874304][ T5941] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 226.932726][ T5942] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 226.942765][ T5942] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 226.945785][ T5942] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 226.948738][ T5942] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 226.951209][ T5942] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 227.713974][ C2] net_ratelimit: 114101 callbacks suppressed [ 227.713987][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 227.714068][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.716076][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.719770][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.723403][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.727078][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.730747][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.734486][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.738085][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:b0:c4:a1:8a:e1, vlan:0) [ 227.741812][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.824427][ T5941] Bluetooth: hci3: command tx timeout [ 228.828049][ T5942] Bluetooth: hci2: command tx timeout [ 228.904166][ T5941] Bluetooth: hci5: command tx timeout [ 228.984463][ T5941] Bluetooth: hci6: command tx timeout [ 230.904140][ T5941] Bluetooth: hci3: command tx timeout [ 230.904612][ T5942] Bluetooth: hci2: command tx timeout [ 230.984103][ T5942] Bluetooth: hci5: command tx timeout [ 231.064463][ T5942] Bluetooth: hci6: command tx timeout [ 232.140413][ T9531] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 232.394944][ T9522] ================================================================== [ 232.397407][ T9522] BUG: KASAN: global-out-of-bounds in fib6_ifdown+0x7f5/0x8f0 SYZFAIL: failed to recv rpc [ 232.399787][ T9522] Read of size 8 at addr ffffffff9af9f5b0 by task syz.9.950/9522 [ 232.402831][ T9522] fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 232.403890][ T9522] CPU: 3 UID: 0 PID: 9522 Comm: syz.9.950 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 232.403916][ T9522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 232.403924][ T9522] Call Trace: [ 232.403928][ T9522] [ 232.403933][ T9522] dump_stack_lvl+0x116/0x1f0 [ 232.403953][ T9522] print_report+0xc3/0x670 [ 232.403967][ T9522] ? __virt_addr_valid+0x5e/0x590 [ 232.403982][ T9522] ? __phys_addr+0xc6/0x150 [ 232.403998][ T9522] ? fib6_ifdown+0x7f5/0x8f0 [ 232.404010][ T9522] kasan_report+0xe0/0x110 [ 232.404021][ T9522] ? fib6_ifdown+0x7f5/0x8f0 [ 232.404034][ T9522] fib6_ifdown+0x7f5/0x8f0 [ 232.404046][ T9522] ? __pfx_fib6_ifdown+0x10/0x10 [ 232.404058][ T9522] fib6_clean_node+0x2a4/0x5b0 [ 232.404071][ T9522] ? __pfx_fib6_clean_node+0x10/0x10 [ 232.404086][ T9522] fib6_walk_continue+0x44f/0x8d0 [ 232.404105][ T9522] fib6_walk+0x182/0x370 [ 232.404114][ T9522] ? __pfx_fib6_ifdown+0x10/0x10 [ 232.404126][ T9522] fib6_clean_tree+0xd4/0x110 [ 232.404139][ T9522] ? __pfx_fib6_clean_tree+0x10/0x10 [ 232.404150][ T9522] ? __pfx_fib6_clean_node+0x10/0x10 [ 232.404162][ T9522] ? __pfx_fib6_ifdown+0x10/0x10 [ 232.404175][ T9522] ? __pfx_fib6_ifdown+0x10/0x10 [ 232.404187][ T9522] __fib6_clean_all+0x107/0x2d0 [ 232.404199][ T9522] rt6_disable_ip+0x2ec/0x990 [ 232.404215][ T9522] ? __mutex_trylock_common+0xe9/0x250 [ 232.404233][ T9522] ? __pfx___mutex_trylock_common+0x10/0x10 [ 232.404250][ T9522] ? __pfx_rt6_disable_ip+0x10/0x10 [ 232.404267][ T9522] ? rcu_is_watching+0x12/0xc0 [ 232.404280][ T9522] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 232.404295][ T9522] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 232.404312][ T9522] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 232.404325][ T9522] ? tls_dev_event+0xfd/0x10b0 [ 232.404339][ T9522] addrconf_notify+0x220/0x19e0 [ 232.404353][ T9522] ? ip6mr_device_event+0x1bc/0x230 [ 232.404369][ T9522] notifier_call_chain+0xbc/0x410 [ 232.404384][ T9522] ? __pfx_addrconf_notify+0x10/0x10 [ 232.404400][ T9522] call_netdevice_notifiers_info+0xbe/0x140 [ 232.404418][ T9522] unregister_netdevice_many_notify+0xf9a/0x26f0 [ 232.404434][ T9522] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 232.404448][ T9522] ? __pfx___mod_timer+0x10/0x10 [ 232.404465][ T9522] ? do_raw_spin_unlock+0x172/0x230 [ 232.404477][ T9522] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 232.404492][ T9522] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 232.404513][ T9522] ? clear_pending_if_disabled+0xa8/0x210 [ 232.404531][ T9522] unregister_netdevice_queue+0x305/0x3f0 [ 232.404545][ T9522] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 232.404559][ T9522] ? linkwatch_schedule_work+0x181/0x1c0 [ 232.404575][ T9522] ? linkwatch_fire_event+0x6f/0x270 [ 232.404591][ T9522] __tun_detach+0x1249/0x1540 [ 232.404610][ T9522] ? __pfx_tun_chr_close+0x10/0x10 [ 232.404632][ T9522] tun_chr_close+0xc2/0x230 [ 232.404648][ T9522] __fput+0x3ff/0xb70 [ 232.404661][ T9522] task_work_run+0x150/0x240 [ 232.404673][ T9522] ? __pfx_task_work_run+0x10/0x10 [ 232.404685][ T9522] ? __pfx___do_sys_close_range+0x10/0x10 [ 232.404696][ T9522] ? rcu_is_watching+0x12/0xc0 [ 232.404709][ T9522] syscall_exit_to_user_mode+0x27b/0x2a0 [ 232.404725][ T9522] do_syscall_64+0xda/0x260 [ 232.404742][ T9522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.404753][ T9522] RIP: 0033:0x7fc96fd8e969 [ 232.404762][ T9522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.404773][ T9522] RSP: 002b:00007ffeb5b3d3e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 232.404784][ T9522] RAX: 0000000000000000 RBX: 00007fc96ffb7ba0 RCX: 00007fc96fd8e969 [ 232.404791][ T9522] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 232.404797][ T9522] RBP: 00007fc96ffb7ba0 R08: 00000000000001e8 R09: 0000001db5b3d6df [ 232.404804][ T9522] R10: 00007fc96ffb7ac0 R11: 0000000000000246 R12: 00000000000339ab [ 232.404811][ T9522] R13: 00007ffeb5b3d4e0 R14: ffffffffffffffff R15: 00007ffeb5b3d500 [ 232.404821][ T9522] [ 232.404826][ T9522] [ 232.524681][ T9522] The buggy address belongs to the variable: [ 232.526486][ T9522] __key.0+0x30/0x40 [ 232.527717][ T9522] [ 232.528472][ T9522] The buggy address belongs to the physical page: [ 232.530388][ T9522] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1af9f [ 232.532954][ T9522] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 232.535359][ T9522] raw: 00fff00000002000 ffffea00006be7c8 ffffea00006be7c8 0000000000000000 [ 232.537910][ T9522] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 232.540427][ T9522] page dumped because: kasan: bad access detected [ 232.542302][ T9522] page_owner info is not present (never set?) [ 232.544151][ T9522] [ 232.544916][ T9522] Memory state around the buggy address: [ 232.546661][ T9522] ffffffff9af9f480: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 232.549041][ T9522] ffffffff9af9f500: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 232.551515][ T9522] >ffffffff9af9f580: 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 232.553969][ T9522] ^ [ 232.555684][ T9522] ffffffff9af9f600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f9 [ 232.558053][ T9522] ffffffff9af9f680: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 232.560447][ T9522] ================================================================== [ 232.562935][ T9522] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 232.565084][ T9522] CPU: 3 UID: 0 PID: 9522 Comm: syz.9.950 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 232.568599][ T9522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 232.571720][ T9522] Call Trace: [ 232.572740][ T9522] [ 232.573776][ T9522] dump_stack_lvl+0x3d/0x1f0 [ 232.575189][ T9522] panic+0x71c/0x800 [ 232.576394][ T9522] ? __pfx_panic+0x10/0x10 [ 232.577733][ T9522] ? mark_held_locks+0x49/0x80 [ 232.579177][ T9522] ? fib6_ifdown+0x7f5/0x8f0 [ 232.580599][ T9522] ? check_panic_on_warn+0x1f/0xb0 [ 232.582171][ T9522] ? fib6_ifdown+0x7f5/0x8f0 [ 232.583560][ T9522] check_panic_on_warn+0xab/0xb0 [ 232.585057][ T9522] end_report+0x107/0x170 [ 232.586332][ T9522] kasan_report+0xee/0x110 [ 232.587720][ T9522] ? fib6_ifdown+0x7f5/0x8f0 [ 232.589150][ T9522] fib6_ifdown+0x7f5/0x8f0 [ 232.590519][ T9522] ? __pfx_fib6_ifdown+0x10/0x10 [ 232.591993][ T9522] fib6_clean_node+0x2a4/0x5b0 [ 232.593425][ T9522] ? __pfx_fib6_clean_node+0x10/0x10 [ 232.595057][ T9522] fib6_walk_continue+0x44f/0x8d0 [ 232.596597][ T9522] fib6_walk+0x182/0x370 [ 232.597915][ T9522] ? __pfx_fib6_ifdown+0x10/0x10 [ 232.599484][ T9522] fib6_clean_tree+0xd4/0x110 [ 232.600964][ T9522] ? __pfx_fib6_clean_tree+0x10/0x10 [ 232.602571][ T9522] ? __pfx_fib6_clean_node+0x10/0x10 [ 232.604172][ T9522] ? __pfx_fib6_ifdown+0x10/0x10 [ 232.605710][ T9522] ? __pfx_fib6_ifdown+0x10/0x10 [ 232.607351][ T9522] __fib6_clean_all+0x107/0x2d0 [ 232.608892][ T9522] rt6_disable_ip+0x2ec/0x990 [ 232.610300][ T9522] ? __mutex_trylock_common+0xe9/0x250 [ 232.611922][ T9522] ? __pfx___mutex_trylock_common+0x10/0x10 [ 232.613763][ T9522] ? __pfx_rt6_disable_ip+0x10/0x10 [ 232.615431][ T9522] ? rcu_is_watching+0x12/0xc0 [ 232.616918][ T9522] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 232.618621][ T9522] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 232.620404][ T9522] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 232.622341][ T9522] ? tls_dev_event+0xfd/0x10b0 [ 232.623925][ T9522] addrconf_notify+0x220/0x19e0 [ 232.625495][ T9522] ? ip6mr_device_event+0x1bc/0x230 [ 232.627126][ T9522] notifier_call_chain+0xbc/0x410 [ 232.628734][ T9522] ? __pfx_addrconf_notify+0x10/0x10 [ 232.630322][ T9522] call_netdevice_notifiers_info+0xbe/0x140 [ 232.632098][ T9522] unregister_netdevice_many_notify+0xf9a/0x26f0 [ 232.634011][ T9522] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 232.636078][ T9522] ? __pfx___mod_timer+0x10/0x10 [ 232.637599][ T9522] ? do_raw_spin_unlock+0x172/0x230 [ 232.639176][ T9522] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 232.641214][ T9522] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 232.642933][ T9522] ? clear_pending_if_disabled+0xa8/0x210 [ 232.644681][ T9522] unregister_netdevice_queue+0x305/0x3f0 [ 232.646430][ T9522] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 232.648380][ T9522] ? linkwatch_schedule_work+0x181/0x1c0 [ 232.650033][ T9522] ? linkwatch_fire_event+0x6f/0x270 [ 232.651644][ T9522] __tun_detach+0x1249/0x1540 [ 232.653105][ T9522] ? __pfx_tun_chr_close+0x10/0x10 [ 232.654723][ T9522] tun_chr_close+0xc2/0x230 [ 232.656144][ T9522] __fput+0x3ff/0xb70 [ 232.657363][ T9522] task_work_run+0x150/0x240 [ 232.658830][ T9522] ? __pfx_task_work_run+0x10/0x10 [ 232.660442][ T9522] ? __pfx___do_sys_close_range+0x10/0x10 [ 232.662213][ T9522] ? rcu_is_watching+0x12/0xc0 [ 232.663706][ T9522] syscall_exit_to_user_mode+0x27b/0x2a0 [ 232.665399][ T9522] do_syscall_64+0xda/0x260 [ 232.666794][ T9522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.668564][ T9522] RIP: 0033:0x7fc96fd8e969 [ 232.669941][ T9522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.675756][ T9522] RSP: 002b:00007ffeb5b3d3e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 232.678175][ T9522] RAX: 0000000000000000 RBX: 00007fc96ffb7ba0 RCX: 00007fc96fd8e969 [ 232.680592][ T9522] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 232.682967][ T9522] RBP: 00007fc96ffb7ba0 R08: 00000000000001e8 R09: 0000001db5b3d6df [ 232.685410][ T9522] R10: 00007fc96ffb7ac0 R11: 0000000000000246 R12: 00000000000339ab [ 232.687767][ T9522] R13: 00007ffeb5b3d4e0 R14: ffffffffffffffff R15: 00007ffeb5b3d500 [ 232.690166][ T9522] [ 232.691812][ T9522] Kernel Offset: disabled [ 232.693159][ T9522] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:44:25 Registers: info registers vcpu 0 CPU#0 RAX=0000000000201a4b RBX=0000000000000000 RCX=ffffffff8b6d4419 RDX=0000000000000000 RSI=ffffffff8dbe4455 RDI=ffffffff8bf4a4e0 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000001 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90853010 R15=0000000000000000 RIP=ffffffff8b6d2caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69da000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056187e649bb8 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc0d0 Opmask01=0000000000000000 Opmask02=000000007fffffff Opmask03=0000000001041000 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056187e64d680 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056187e641f80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3eebf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5738aa4f19b07a17 7373256e6c90dd57 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373a2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00376963682f6874 6f6f7465756c622f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00376963682f6874 6f6f7465756c622f 6c6175747269762f 736563697665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 244bd93c6ac30964 0000561d1fe2c45d 0000000000000211 0000302e36313a31 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000002d1 726f702d6f697472 000056187e63db00 317761726469682f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=ffffc90004007be8 RCX=ffffc90004008001 RDX=ffffc90004007bf0 RSI=ffffc90004007bb8 RDI=ffffc90004007120 RBP=0000000000000001 RSP=ffffc90004007098 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000010713 R12=ffffc90004007160 R13=ffffc90004007110 R14=ffffc90004007be8 R15=ffffc90004007144 RIP=ffffffff8b6d369a RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ada000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f809e6e7d60 CR3=0000000029185000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f809db836a3 00007f809db836a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff3820bb60 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555624936f0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000007 0000000400000017 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000011 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555562487ad2 0000555562487900 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8003248000000034 0608000700000000 000780030fffffff ffffff041a80040b ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffdf08 07e00310080007d8 0320c48000000037 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030fffff00000000 0407c00300080007 b80300080007b003 004c504700000036 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 800301800407a003 ee991c2f6ad5f991 0000124500000035 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01000000184a0824 8003248000000034 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8a4ba55c RDX=ffff88801de88000 RSI=ffffffff8942284a RDI=ffff888037611540 RBP=ffff888037611540 RSP=ffffc9000061ef80 R8 =0000000000000003 R9 =0000000000006488 R10=000000000000dd86 R11=0000000000002bb0 R12=ffffc9000061f0e8 R13=ffff888031a2f510 R14=ffff8880376115b0 R15=000000000000000a RIP=ffffffff8942284a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056187e64fcb0 CR3=0000000029185000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fc00ffff Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 654e4134a049f81e 35a3e5e2ca4ee772 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 226a63418ac4e29b 48b3e87f183a92a4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 98483b883d6e8537 fb3aa41f6d99cf24 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 db9994b5edf656f8 6608014813729d6e ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000f00 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 37fc352bf6d60080 008d8f959bd40080 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 067b7aa001000000 01000000e8a00080 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 008d8dd101000000 3a00ef3929fc527d ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01000000008d9ac8 008d992598c524d1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b6f2d62ddcfa77a1 e504fee12e64f752 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ba0a85084d9d37e0 a8e881b42de5d6f7 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0026030002002403 010ca40000030004 000000000000000b 0000000500000001 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03004c504701ffff fffffffffffff708 0000000100000019 0300040000000001 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bc000a0000000032 0352e61000000000 75160b0b7d9e29f2 37d499c7e2e542dd ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9110000600000033 d61afc0000000000 808002081db08080 8002201adc00201a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8003248000000034 0608000700000000 000780030fffffff ffffff041a80040b ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffdf08 07e00310080007d8 0320c48000000037 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030fffff00000000 0407c00300080007 b80300080007b003 004c504700000036 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 800301800407a003 ee991c2f6ad5f991 0000124500000035 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01000000184a0824 8003248000000034 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff854fab70 RDI=ffffffff9adfe5a0 RBP=ffffffff9adfe560 RSP=ffffc90005aaeec8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff35bfd06 R15=dffffc0000000000 RIP=ffffffff854fab97 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555557710500 ffffffff 00c00000 GS =0000 ffff8880d6cda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056187e64fcb0 CR3=0000000029dd2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=0000000000000007 Opmask02=00000000f7f7df7f Opmask03=0000000001041000 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 aa05e3374a2d0bca 1f36ade415bdf4b6 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bdaaf8eb26091fd9 8343c89130268d3a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 03d15f0c8a1b7037 12e1d51afd4924e1 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c422cbc8ef67f343 629fe44911d190be ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000060 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ae8054be3e91e844 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c5c0edde00000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c541c04ce8f34f31 898c5940d35f8229 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000008bf51659 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f47343e4582e400b 504fb3de5392f7be ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c494f2982170adee c54cb16639e9be69 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000a6b6e696c 3d45505954564544 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000061646366 3745505354564544 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000002d1 726f702d6f697472 000056187e63db00 317761726469682f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000