last executing test programs: 3m28.54962524s ago: executing program 0 (id=276): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000140)={{[0x8001, 0x1, 0x3ff, 0x8]}, 0x0, 0x3, 0x8, 0x0, &(0x7f00000000c0)=[{{@align=0x1, {0xb2f5, 0x8, 0xfffffffe}}, 0x67, 0x0, '\x00'}, {{@_ha_fsid={[0xc807, 0x4d7f]}, {0x3dc, 0x0, 0x9, 0xf2fa}}, 0x0, 0x0, '/dev/video2\x00'}, {{@align=0x6, {0x4, 0xb, 0xe, 0xc47}}, 0x5, 0x0, '!(/}\xed/*^^%\x97Y/(]\x00'}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x132, 0x6}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0xa10000, 0x6, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980923, 0x400, '\x00', @ptr=0x8}}) 3m28.416464254s ago: executing program 0 (id=279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "7f6b0000008000", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "230100"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "7f6b0000008000", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "230100"}, 0x28) writev(r1, &(0x7f00000040c0)=[{&(0x7f0000000000)="8ad2a457d9e385b9951d6276ef7c763e04339b979576c0c43d8bdf6d292fca6efd98", 0x22}, {&(0x7f0000000040)="006b48d26a60ee51f16d1446de7f34c8a643c53d", 0x14}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000000180)="3da024e3a6093822b222643bfdc9d741f47a94e64e8b3f9b9bdcd984b5e54e12734f97c1730a28552a4c747ece768fe49007f9ab498f1b738415590297ebbc0d475572af8bf976392aed04b16f26b1891a19392c8bd7781252b950af4a67eb699650a6e72374", 0x66}, {&(0x7f00000020c0)="1b66b8c4092b63b4eaaaee43a39968e9bea8a245a97c16704c951c36e2b285472eda0668a2b55d3b85f3b55fae2ea8be01b9f6823c1eb206938b4e1f66209f8f4e87774368494baa3b8e0db6f34967773324bb2192b26fab5fbc9a0857de7149288567a3d651344fbe466a8d3c14f24f0212e4e52228b62a3b288f5c269a436520925e2dbca678ac23f207b93ee0485cdbc391de10bd02b6d0aaa9c61c2f1e43241d9781a498ed097c5b82d09eee7cdd5189d830e02f039762a74380fdafc41baad6d56c3770d55357fc9b2436bc08fa84f2b034de459df43e3e8f8f6712eb01df9af9041142c9de4b646ed5c75534f8199d758f67b3fa40b0af3d090171e089a10d846918dbf97d539c7f4f9127dc364dc8be7e49fa6fd0c64d2142ea5581a9575c5a75be2e3d9238558756c9fdd75076a20fcc560e278586f595b7e0f9005cee5e6926126142b707a49db37a2fb3c2acfc619119d1f3d4be6c6dcc792abfdb47e1ca2a12911f5979cf559704bd0ab50af8d08c881f7b414b4e2636e5fbb95c89373eb7e08ef72e7c6a8e42214040c772627debc507d25c04cb487dde80c1c632445bdeae60b4dab2886d7068a63e5101015ac5f234dfd1611372b1549e38e201a8e2290ac6d809f970bf907934f81753a73f0ae8857787adf817918f0f5a90fd8c296d8d87dede70494e7a7a582046995c9a26b178806a032e0a770de908575c559b3f66a8a875d597fdc9489c0cbc6225c269b72b4e4914150f8a78e65228aacc97350e2e8b77ca7296b05e5eda960359f44532cb769304e7e181cd0328c4552812357ddf2941bfb2816c30f24cb9ac9da8d0127cf8935eeec812e12e91cf2965c06bbc7c86de7facb01166e2137e83e92674a729026bef960537498905388f11607342e55b013500add4658eb9ba1680b97ad692948bbaca8af462c1cf8e4feaa5e53510b20dea11813cc646f7f4ebee66ed911d0b14964c90c44fdaf066d669a4311727849d18cca1afc647ee3bf5e58d0552c0f1133188cde62bbc9918aab1d5fbb161319a7ab5b15572d76c36538e6b392a903dae891a0f6aaa999c446330de3ebe9f81fdc685fea96589c75ae035857b6e69400a1d1917fb780cb8b7933791f9d98d7ea645af3a464680e1d61a5b00757aab23cab65901fdc2495fba30fd5d0588fcaac1f772bca9d601fb4262cab77ae97820daf0fdbc82de107bedc63007c1ab0bf94c2fde3e5939be64df97e7e30a662c4d4d2ba0ef9a66e78c6adbde5fe4a3e5bb3ac177eccf3421da7bdb9fdeb782696be1f7cab88ece65eba8187fa6cbdc194a9c30587d042416847c8ab17bbeb729e5707957defa6686213fd5b619797fb07785e3ebe39581598ffa5ea7f52d509368cfec3e0386aa7fa37772339d6d9449ef6e7dbfcbee266b840c7a279d9a0383bd3665c23290d5339e9e7baf6d199adf6bef37f68b7710e8ea9d45bdf6d1739e71e311383753479e6cc802c35f8f424672397bddaa902f70240b5fd3427a7f50142b9e5d41ca56a111de6344c88efc588a941304d47c56e28ff917ca230f7d0967adf002eaca92df585897fe091d2392edf671eec6041febcdde138999beecfa550e623f69b6408ce60eab2e1df138f1a417bfc2504df9417d8fc4cf2392b01978c021a2f8b9d25de62fa4edd45b96abab2a947837e9801a1e9746c050b948d5ada88bf86b5f33b5e5ade24a1c383b3d07641c296845dd7905a529fc2ac0a2811c671be9222c1e86921f0cbf1a3713ac959ed09a1368156339b9f82bae74ff28d5aa3808b42db0f6fad3f6200dd2abb591a748e6fef9d6cd278a8de19dfe36a6f3013cc8bada51004fc106eaee0ef8f73b89b0b2e8fd9a35d962ae8fc9b1503459a4c248c3d54dc989cebd34cff3dcb0eb8ee04fb2b3a2c2d8646dce7df31f390713ae226e7e15f227f22af609e2aeff062d33eeab50545939398d1d797887639c0a0f88e93e11d7a26116a583734c6aa09bbd9d86af372162016aaba3979d5cbb5a70c1c0129759fcae8d22d4ac8f5adb7033dd4bcfbbce9f48fa5b67bed3b7859b2750fb15fafc08e5c74d82fbc44122dd87c952a41d97947d95c5558265888b33040cc4cf2c69e4e08389e1cda65ebbdddf08b8574df9026dbeea769da17e8d8c698828e1cd000c51389ff78a8e49c50502b60dd9433473848472dfc4fb90250bff27e16480f80cfd40a65a1cafae2cd6ed1f5d3c34e1fbae68fc173fa161c728c8b339927c3dad4b964cfc5dfb40a2d7648d37ea41d1d504f65aced27699e7505113df88e740615313dae718d38a293f0a399a7f6700906daf20c87c811fe317666b42f3eec1223cfcecacbcbefa9d18e7b91919af35e30135581f02c360963ff8ff67dc514800c645323aa0f028f0ce5f443d17f526521378b13152b5f607cb721da7deae1326374703798a50c0adf68aee541a00c8da1b6e610c6ef61a4f841df080923004a63facb2b78e74099f4af6555abe11aaf8a9afa71b91e71e1edc80d7c18bb53328a65a93460d484da92205a071a8fcec98521288583f5f3bf250fe6e15408e29e155cfa1ab1a0203f44235686cbede859e36fa6a67fd9dcc1548bf104c7cc3c600086d83342aeb36ff97c2db1c4ff6b6f7a67745c1fc86d0eadbdf18bbe7e03ba5cc24032c798808412f37500cb6560fcbee35b0d91ebfc68c6507c414ec80b6c197579e2ec074bca994ca4f69dc28c723d0cbc59efdf0189e5f60ab8f67e23904a035044bfbb2aeef778eabb3099e29ad6d94c32659d9f83b9ef1cec353091c197c0a8194df52bc243bba1e6efb38e84cb354c17c01eeedcbbd7f742c65f2a329f0c0f1d458d997b50d21a3a0b8b4930610eb504955ea3063100cb667f1170e5886cb8454abebc38e52bacca77d59557c2302c25119c4cee8d17200b66ba505d260a094841d8181197a1a501233d723a6761a252410a28d37f94ef9389927c36522bfdb380d5c59a9f45078679a76c533bff3e320d6a979c3681febbce94f030830466ecf4f464bd5ed91edf2fe1c53bf2a3f04c82809ae13415618b48caf630c0b9590cd89cdeb9d7985650048cd7c6429936fddd0223ce5714803e1e51ad613ba1dc823993d93f003ec9895d039b83dfafa04d7c2959aff418a6e349a4aff7dc1487cdcf9e4033745d88c4e2a539a89c89dd2fe15ff35d48ba6fc115dbc5b2449a0017d3bfc8b05b376998ddc9bd6a45f49e0f498b970d6ae0d897ff101b4594c4325f03a7ddafec3544acd5d176922d137fcd609a1f38e017062ab55907f8cc3277c4da1da72c572bfc71bb7337f2141c1ad037b38d106366a9be343387d635329d2b3991942d82d4ea9b84a43206c15cada6c202c7b352acc12031dce9e6c8e5239f06823529bc8099194b9d6e8551ab99eae2f8b399cd35ba72d8028fda88fccea1ecb2bfef048aac3d793124d990676fc8d6a55e2335d8ad2e2c40ece85d2acc89ac80722d3a74c6453d89c127c8affdec5a969276ed01ba780760bde8562fe277d5fcad6c9369197258aa915eeb272229b9bbf70693f0aec78cee11531e167cc9373d2a8c99eda0fd93924e02cef0f3efe6e549bea665f060070159f76da6394dca747a9e76559c0931e1bae21ee0f697fca32b979f091189dd77930e62c53cbdc28c6c62f491fde5ee33ddd33e085a37d3b8ea62f44e6ec2d0d5a5d70e2339605dc13eddf28d90b5397d73e8d4fa373279dc97d52e4e4b69acf589ca637991e8558e3bacdf0f7748f5c724bc26f50a453b5370c240ec9c0fd39bea848f6af3dbc30b1a4b3b7246edb04a4cf74c3b4f1fbc15862f73f42e25cff57776f58e2af09e9c3ffd784d5f16c588a428d78b5cd9f4342cb8bf393094ea2dba442c2f9cf2d0bf53f15ffbd0ea69ccacb09c467c74f870dde18204f4524d4edb62183423fab68875deaeea40b35464b463ec550449db5afb71a11a2bbf5f40f389b49b832d83b01449ed7fef4d63929539a71de3b57724146ea72d48d5ade1d98706a6bec6363cd69ff527cdf42f17103f984fe52e0db5e9a51d546303b1b3e6127d3e102de7ac79359a6dd74c8c8e4ffbcb9c2272ebf4de99cecb259fc544b318ad17493ada478c840a72fb113b2387a6ddd347028274c72bb3d52a2c91fdcfe0fe9eb9d452d27fc7fe3d6e47731b9dfe909a3b2b9f401b8da1e5207b2138207229d95678a1504319046e8fb2da01fc38d3a334fcf3664f929a496d80e3bf7f6d0e0b2a635c296de93958527c2248b31befb61a7ffb845911370a7ea8ecf9a725bd5ae85927a85fe27c2e326d9362286bd977fd0a9004bbbba74c087cf4314d018eb8deb0da4d8835f6676f59491068cc29b277ddc42637014ba7f7e6be217aeb699985b9b22480a7c7b0afa1804f40b4ae28c068723d437a8093ef5ae2406a3e4615092c5b28428382be51f6960fb6a513612e0713215b2f9b8acdde4de685ad9204e9fce7568344ff5ac457718036d1f9a3af45ddf5df2b8d2bfcc898ce21fa7c1a91098eeed7bbbdb1cb08507fd0fdf948c69d9d4d4574065cf03f2d28e29c11c9fa98fcce2e1e1b429a59e89521056c511bd055392571674fc82ca863cc6fb2658b9a7b3f132ea201825358186b9662184055c6ccebaec5d55826081cdd3276e391dd7b05cf84837de82ef339e0e360fc6aa47ebdd7d3d6aa5402630ad92df9f4689b96d00233f8f662de05986a248cdb92c2e4f6f6377f270c4986f35484ebc6a5589d1817870d2c8261a35ad21721d60e7e2a900612bccc12ece05ba158f8d21386f0f80be254d14733bf96a456835a5ed4875699f3adbe7da14799897b40a69eb1c7277b38af8ad83160d3203ccb75ca5110fbb52a72483072395b074d78b869e572b495d4435b102befb8fdca3a61389ecf7883f51010b58cbc46924e3c1976be3a1682efd1eda98ccd6d24be38443ce68dcb67ecd930d26fae9bbdde1cb58be627d1bd3fe452510340200aaa42f9680e0f425ac6f3cc2e245117f96a252bfc93383694e9ec341cdb31961b7dccb20f212d96937169b3e9196713ac0accc7751bf4b1c6dc32665d2e046f43bcc12ee16bf1e6629c7d6687569d7505682fb74eeefc52d03f8fc1933e923a1f444af63690ece6394e917bc57f5b4a708f721a3f36268a828230ff39a64f18c77ac0e5dcb38bbcb3a33e6d5e4b750c98231f620b29220f9c805b0d07c6c1a055b32dc87462d7fe38c6d097618652ebbe89d6413f7c75a1a38cdb11e9b0b17a1fb5664920ec12c62f266832a5f26c59e743df338d93b701fc16a362175b8c72fbb5bf6a1089ef85362e7aafcbf773531ab6c32241244d01105747ad9843efe57db781bbfb69ec070d3a5bd11af9c1721a86b4d402f6fce6fe1888ced48ea42215f2a2fbc999e08dba9b36dc734a0424323d47c74b0bff5ba4aeb4041dc1ae8819186bd897ca451a232e1c0a82f581d0cef6124cb96c9b050514adffb9ef6ef91b6780601d05bbe7f1a604e7f79b4b7f6c9627dcd3b1a6bc7accbc89aac8a94c3de18becbeade40e5e592c84f19cb12836b16f398173938de0bca9a14b53d3df2124fea224f02028470bb767569eba26354179d311117aff8535e3530914d12502e05fd4cf6a1c8bb45048edfeda1c62d3088789c011e42eb88407bf66559900a06a9e3e1804ea50f599d521035ee515fe3c5c5e1bd7a15acde5a942d13cca939fd63c8d73521ff22b929f882fc19ef722f66feba17e1e71db40957bfd0aa2cf4c54e7fd72c26f80dc0e393e4b90d54670420c1", 0x1000}, {&(0x7f00000030c0)="0636d8c88e06940a728d27a7184bdc8c757388ddf8663bc6d6c6625cde7cebfabf25a17707d0dd3259c8b11ff8a5ac8aee5dc08d0dc141b07686340937d03454c40c1ddea21b3293166ed3948370e01583a2de470a59301dc55570aa8f0f8a36fbaea90cf89b2f5fbf4d4f7e05095835a062a5e1330f7d8c8d94740dc4d9121430057d6dd4a95e8c8d97a7047b063fe07b44e16a1b8d2646f51b474fa9f1af5f49f0de54f72943de2e3dda3fe544d5bde97c1e6e155faeb522123bfcc99674a0476e15096ece7d50f4ad91bf4d0c0f3d5da219e7d1ad92418891d66277c09f8f3b38ef6a47948e14baeac993f80d7b4343d9833733b7e69548a132b88658129d45ba78f704089d813c0fc3fbc2c939988e681d83c44d7dc93c1efa59cb2a8fad9e7be803b67da43a1db13e7e1c941aab6a93cb5f89b66df5540134fe6027147afad0e54d7b56ab83d1d5b063c5d06e3c2f6ec08ba5d6bc75d639425009332fd5d0ce8d1e88e674199f56db2e340cb3dcd92e8f69b527f44d6cafae744a9bd20986f1ad85dcd1066d1e440c7a0e9435d0944a66cbec4e5e158356fa25d1b621aaa72710a904c717ba0ad433051b93d0f0452f82a7a410f456619a54cdd7fc7d0e9bf447b883cb9deca83562261f19987624b8298c7ed7ba1fb449c52ef15f24bf35b1014f1862faa592b797d4af6d61674b813d7e4a34355442ea734230fa2bbd2ecb19ff2e991076a04f4a159a06a6b8ad9e57ca083af7efe020d588dc7f444f446cc2b1b0d71a27023981c331014c8fcf57a4e186b39793ad4d173d38337601c91e9c221f5a609ae91950b3d58c4d0d87bab37931356300ebd6f672ff650b747308364e9239e12e03fde15b9be6c0a44959ab8684c4ac4adf01b3baaa200673027ba6973a925a4e151dcea619f625c166477fbb471d817df3524e444a43e8fadcb12908e71fe1758456ea7d95b1cca54d866e1a0235e5dc0f7a7ec315a5cacc9eee3b7b43d470b3a3b11859d730321d7141d67ac801582b801c4226ff312dc87ba226fd35dd6347b65c4d4035303f9f03161b1cdc3ea8f0c0d90640c55eccab582ad634a78e1363921c2a588605b7153a4d3a2f5fdc4f3288dc4b14ab0ea7ee27c3a8c599858bec9d71e02394ecbca2f25e54945f4319a2b9d99cf983d09187c7bfc2ec7514c8517d76e0104ab476b9db4d56d0d905efa93b1bd2d60be82993c700b2b781cfb6a00faed1b83c39fd99dc908bfb9b0f031d4cfd57ad852a935f1f315c620429fecafb1d80cf4fc5cc7107cdda2f4ea787ae4f491c2ece2e701f914c94fa11f3a15253a4b61315b88018689c3dcedfa394b8aec6a6f4b1c5879c73dba4f700764e8433eba8b3cfc882a4fa2e58f0a33721dc62522562f4a939b80e1ec6b24ccf6e76708d9751bb3402c113e26d134b94f2e69eb1811ff757dbe7c613bf20e4f4f9b2c4f4df21d4964f11dadbd17a459be474fde6e901550313530a8206bdfafdc8f767ea026b2d4484cca7504f279c53a53f3562a0d182b8abf253f3ae6cf65ae8ab5a51ad4b67e538dc09043d0c21aa690a3cf1b9100a7671a584f54c8469e97b90f886316cddb2a1d7321ecabaf279bf96c0e537ad38818942059f423bd2b5360657cec088afd1b963b6c412e3169bbcac17125ab803c5c69590a4eff98aaf4171c8a0fcf2bb1c3bf8da44c6c62f75f38d284917b578202df3209febcf08c0d297b5902242da726ad0f51f6229bbadc02d86e7a553d3d63c841fa0c59283fd8536f931f93f591a6ba0008dd90dd0cd4c62c8bed2e295a32edf733ceb55322d09763d882f17d1c4fc296d352dc256cad1082d43b7f4c79f62ed001556154fb54f87251640c03188218494e0fccebe52284914aa11019d5b0d006ecd4e8505009b5c9c83a3d602c158ae086f108aab9f4aa985619173aa34909006e039e59a340efb2766493f16c28bacf2bf24ac61b91c036c449bdc7b85a1c89adbe4633f7d655c08a008cc9af5237ba05a33a17eec58f0dff3c844584059812279b188f7dfed3a23f822a56c7a7ea2e2e675c9fe7a587d8c9a7708dbe5af03f88cfc4795e615023cf90253ee76ba0a84ab9a86df0cdd1e950c3ea76c6dd2890252826652ba78bb4b06b7f418a0474451f9d0133a0aacd5801660c76dc93afced9488eb0072209f067fd2e79b15bc977cb00bcaf8c7e5b83de37ce0dc58606f04122d2e39a44f05f3d6f686bd49435c1b5906f94c7092b2d94b79356a6b412fa35a92489d2dc899d7acfccc369f1c20e2dce09a19f7e6390d1ea39b2ddea91fc2c890f57ea4520f9d64826609f9466b6bd85b7e817ea90ce210689f432a15952ef87c1fa92ab084ee6eb0c821ff524819ea0280b7e4bc9bbea8728a8545e7776e4ec62afb6797b2418d3f2f29911c63856085d23261ea292bdc092d1bde1f03972f6bdeb3790a5103be0755ba7cbce121c346eec1547cd6e873a73ad578b8c0aac6e76d3b161235ed5595ed7926d0894e143598010f6690cea6bfbab9df35d7e941f25ac27c7c74757c081ce3a9c21441b35ab860f3ff49e91e344a08c809dc376780138aca5f9b485f2556534629558f663be9dbf9d1d5ec992aca5cface62fde1eb89f6d2a68ce3d38ad24fd50b41bd7d686316ea8f9157a98e9170657e905dcd3113c7236e23c23c35755f29071655ef8ae6bf50ad805254584a056be74681c2eeaa34d106cf2222d19a2764afaa752bc73b71d274c42f00704d242e00c116676f07805240591f627e744cddf4f0e77fd971ca46101d13d200e963ba212343bf461f07415c1190751b20efa68a12c2bbdbcd97d07d76959e9b82da5b4457bd0627866b26b08577f0404230f9f3591ade6866599406f228b599ed2dd3a7f202ff9d2d78ee4a8989f14b2b35388117be5e0af1d51bf9090fed85e30193acbba13dfbf09e75f63b43eb7223c0c2d38d87d2ed5f1f68e9f4a7860792c425d02ba711cd8ea354b51ddba38d426aa43e205ccdf42694a3a827a2449af89c89d2f8d5456868d5378a9610299029a72cfdfa4068982adbaddbac073f1d12cebf990b29821ec38a0e55a15649db169449c7029f87bb3a1ac683e01a9b573c0568945205087465693a6b4b712bcca6ec404fe39df70289ff678b4d77c2feac52f5fdb6b8777458161c56ae81963909e3a9258dfc9f3dc79eb14d3e22f8155f4a053cb90a3fda84f748546ce44567bc822ca45e41bf86de6a28c26f2ee97bc687177162a8e10864cdf146477f67e5c37f4a362d5387d2cf8e62187666921e660a553c1846293dbe6bdf6cfdc716423f60be74ce7ee82bbc451b4cdeafeb26479b79827d546f3f2975329dd74a3c7381b994af1f40dcaace9e0ae483c39a5e4722a07b28614f28b7a210171ea4ab607ea25e9e14ab30fec95cd58073b5457498f2b1083461c17c23f53a48240c2d957059f7152872646bfabd5ce3413a8014381062acc4e38b11b20dc15367b3a56ea61210a952d06d6c8a4ff8ccc2f4ffbd3d0b6bd0acb1ce0bcaac6e8b4d8aad385dd5590c52a6435e34a8c39ca803dae03f74caf0a64fea497298a4807061f3933dc3f9b0b2e4d17a4c566b0d846c54938bea82eebac5b0c70731ab81e1d2ad5ec7a47c0758e18153d3aade0e5a1a7f51487da06d7aec99a7da11ea74a9eb81b20e0d9567ffd422f7d58ee855029c62991c9ba41531d4a66e97e3f6a0c3cef02d56408fd29d5bbcd599bd7b24c68de42aa1556087b11fdd0923bde8946d740ec69380a3b839866c40fdd29c19270b298e61114f1a4051a6209c3e5210c35f2769345bc53e90064f209c8bdf2ff0ab14c05a962a22bc3a3ff30f4e7379bfe5c8c37fdc4f820892d8b1a555b6e8f5ab4e9d0a30e4097f9839d641c1d98fdcec852965690865111549f9e677881a938ca7bf061d6f6535d4c407e942fe64f3f2def075893bcd8f2e0b2564391b859b0bb82f98a5584cb5ba5836e487c2b77eb039fb7fcc3a668bb2c839c76fbdf9f9a4d059b0bda133c0d056da69ef018c90f0538835f2a32e6a192a61458b5e2996a101e0fc144a4e723eafa7ef1ee3553a48031e1c493f0257f15b85d9c0a565cfad49b6b46eb1f17a7e6420a38b04c3a42e72a7a9eb8b8eda38f1ad9785d65efa009375d1e9bcbbff63c42aabdd3f99e03e4d68ee20861e99297d6265b88b31c0ae856e05addd439200467896cf29b67a2d1f9579ee45496299e50e911a33f73d5a430fe51f5877e458bb9054b56dd48ca00bcc3f69cff9b4af96023316424c4422601e1c16723dc7d2926cee20bfac27c1221819fd3298d89a40bfc545263f9e73071701d73500b11b3fbd33258c833840795f42a94faa1c2327e386dd5384ab7e6e7706ea9de6175abd92e636fa0b83a6dc2e2f0ac9f3d9042e8a832c8caa8f6ad193fcffe24a7e54639cfaea0bce8a8a353ea4f6c4fc3343b9fbfd5a2b68c28edb8f099e37fac807b963b6854187387c0b115a30760ad3fcd137cb81995fdd2380bb254a59067a74dfcbbe82fa7f4a7cb3a1826650bb90215b99b99432413642d76a049336b8f33f9715465b594e00b0dbdcaf95807a9e4fd5e03612f4f0445e58c0eada76f6683fa308cc7aaea16c4b20d79088d892fe5098b962f0cf94dfb62f6ddd8f830f4a5bcf3241862705ab6c8b9579e154034416f32ef8cd50b0583b817dae4320efd2188d4f0d38bfe624673786f3505a3e938acde413e90e822e86dd849027b2ce4255f968a55f6c307131a7d3e00f50aefc6153a30a6e508e972a65e24b9e70ffc79e0c18cc8191809c6e5b461c38cd7278897ac7d6156fa6da43bacde4fd4279b78c7a9d82bf12aa18fc895a5b4305c3ac914181d2737e3a2c08d6bbcefb6337da29d73a27cc0e294f31acb5adc879c320a5d525571cac90214c5db0b5cdb5c3fa3fc84ab89de96c893961f3b443968da94ec471d5ecc128fb4a66904b6186fbf90370786b3bd5981fb60601ab7669512f5aec3a8ea2d9a9a1ffc0f2c04c44d7f6c27b4496a28aafd22d1f1d8e63ad1d39c8be35eaccb7e8b431db91435725e7038b8f89fd2283cadd77d1fb6bf48c8288b7261f69402ffc4068761ca64bc73e964e1a219a80bd9b223a531ded5f20677ed8582c7fe7acb152d14fc3e9534c17818ecd41c4ca1b784fba427ee07e364899085dd15df3c030f4a4865c1e51397e8db847aded6299a8e654a3fc7733a75f9dde70007ad544bd2886739045f82a1c1d6a2328b7cd7e01e1093605c698ee3d3b09b35a67b4769d9421c4a9b59012f7178342d00f62eb361b568a02a67ac9e907b33ac6a5e305acfb65c96a92ec3e5f9563b27bf61773f9a5075bc0c1c16b5af8ca3a3bfa059ab2bc9f722b4c047de4c50e26abbd8822242554a143581108d4f8515c35d8c8e3c0f2aa9723b1c41ba05dd0de0490431ab7988f0e8b26c3d2c437d96bc69cf213c8293537bbd6e2ebf5c22bc0f39a18e19c48613f06a47edec58f2f087d1269149d5151a830ad716f6bc34d0b99b2a7ed58", 0xf47}], 0x6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "190037d70600", "b7b6c5b29ca2b838d41ac3fc7ddf972d", '\x00', "3610000000000001"}, 0x28) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000f40)=""/250, 0xfa}], 0xb) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a98010000060a0b0400000000000000000200000064010480600101800a0001006d617463680000005001028008000240000000000b000100706f6c696379000038010300ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5af546f644c39bedd627181d27d9c185aa87f084d7c5daf6776fec60302779b9e812403a2ff826781b4c761bd14eb7515ae224260c9534891afdd05d18b2ffe91f4052766a0b9fe3955bfb1866142e7c1caceb88de7d6e8a5c08ce052bb461f0c7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b83560c014f50000000900010073797a30000000000900020073797a32"], 0x1c0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 3m28.415948974s ago: executing program 0 (id=280): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) (async) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x1, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc0000000}) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc0000000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) inotify_init() sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) 3m28.257776554s ago: executing program 0 (id=284): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x24, r2, 0xdac7a804b810efff, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}]}]}]}, 0x24}}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @empty, 0xffff}, 0x1c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0xe4ff, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x2, 0x2, 0x2}}, 0x26) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000200)="0f01c5200ec74424004b000000c74424028c4915aeff2c240f00d8260f788700800000f20f2b9f0000000066b819000f00d066b81b018ed866ba4000b80e1c0000ef66baf80cb87c1bf08eef66bafc0cb0dbee", 0x53}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0x1}]}, 0x24}}, 0x88c0) 3m28.096083735s ago: executing program 0 (id=286): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async, rerun: 64) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) (rerun: 64) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file0\x00', 0x42400, 0x8c) dup2(r2, r0) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 3m26.344676955s ago: executing program 0 (id=314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01010000000000000000010000090900010073797a3100000000380000000b0a03060000000000000000000000080900020073797a31000000000800044000000001040012800900010073797a300000000078000000160a01080000000000000000010000070900010073797a31000000000900020073797a31000000000900020073797a320000000040000380080002400000000608000140000000002c0003801400010070696d726567310000000000000000001400010070696d72656731"], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x8880) (rerun: 32) syz_emit_ethernet(0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f004a2f00fe8000000000000000000000000000bb00000000000000000000ffff000000002421880b00000000be7000000057000086dd07870000080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) 3m26.28280638s ago: executing program 32 (id=314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01010000000000000000010000090900010073797a3100000000380000000b0a03060000000000000000000000080900020073797a31000000000800044000000001040012800900010073797a300000000078000000160a01080000000000000000010000070900010073797a31000000000900020073797a31000000000900020073797a320000000040000380080002400000000608000140000000002c0003801400010070696d726567310000000000000000001400010070696d72656731"], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x8880) (rerun: 32) syz_emit_ethernet(0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f004a2f00fe8000000000000000000000000000bb00000000000000000000ffff000000002421880b00000000be7000000057000086dd07870000080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) 3m10.232585283s ago: executing program 2 (id=509): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r1, @ANYBLOB="0500060001000000050007000000000000", @ANYRES32=r1], 0x68}}, 0x0) 3m10.23168063s ago: executing program 2 (id=511): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x84, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x84}, 0x1, 0x0, 0x0, 0xd}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x74]}}]}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="280000002e0000001800028014000000fc0200000000000000000000000000008dc097344e5b57a7e9a2e914cd40157e397c66f6054b902376b38fb1b9172b03fd0d42a6c0cd4a885989f4964ea9a2a477a57de1d1c273848062dc6d5a042e23e2d5601121928c9335e556d4fb97b3d6cb383bf673a03a6354809967dc02d7fc0799a5bdbbe13e49b56adc0000000400"/153], 0x28}], 0x1}, 0x0) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f0000000340)='./file0\x00') (async) unlink(&(0x7f0000000340)='./file0\x00') r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}, {0x0}, {0x0}], 0x4, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}, 0x24008004) (async) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}, {0x0}, {0x0}], 0x4, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}, 0x24008004) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x20, 0x0) 3m10.130427825s ago: executing program 2 (id=513): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="16", 0x1}], 0x1) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="100027bd7000ffdbdff93868dba061481f001e0200006f0000001200cd00080000000700010008000800010100000a00cd04ffff0200d432000004008700ea5d643cb31e1ebd802e21390881ad8f16e1d202b2b8adccd6cc8b3fd1f20b637a9b6bc53f1feb630ccb26328daae1c4542fda02d5bdb36fd249317cf79d7942d36159c03a94cca927ea6be952ca303cc3677e94d591c9800f584fe1283c"], 0x44}, 0x1, 0x0, 0x0, 0x140000c0}, 0x880) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000080)) 3m9.64266916s ago: executing program 2 (id=529): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x103, &(0x7f0000000400)) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e06ff62204c"], 0x9) r0 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0xf, 0x4, @tid=r1}, &(0x7f0000000080)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r3 = gettid() r4 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8922, &(0x7f0000000280)={'pim6reg0\x00', 0x1000}) syz_usb_connect(0x1, 0x70, 0x0, 0x0) tkill(r3, 0x16) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r5 = syz_pidfd_open(r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000140)=0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r8, 0x40047457, 0x0) 3m9.082472849s ago: executing program 2 (id=540): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) sync_file_range(r0, 0x0, 0x10000, 0x5) 3m8.922049849s ago: executing program 2 (id=545): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r2], 0x40}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)="b073c5a263fca0e78eeebb2344350ef83d6a4432abedf0300b335b6ab9922c600d30053f73c069223c3ccd4b3ac304af75d564343ad21e3d821568ba6aa9f9082cd2d6c6b7534b280855e45825e716817cb5b11025e97ab1115c2c5739ae9d59f18b9479b42466bf63184feb11ccd291e7", 0x71}, {&(0x7f0000000180)="b9f3db5ce1afe65323e842628e7989e2a6e3ce3a4aa542be", 0x18}, {&(0x7f0000000340)="62321cac5de35d4df5c7bf5353e20287bad5550689b2c6a3221fcec838287062f5982f626b2b295987d5971735ec4cb337fca542fce3c6375027a375bee6e6f3b036c80428920d17ec4bea7a5917e12d0963d95f527bdd0a6fb50c118e41944ae6ac8db3162122d470e1c5c543fd900136f90e493463a2711ff3646778927bb5d97389981a42df709219f023114665fb86035cc692bbd3485339606d47b40837660a15ac4b987bba7a7843d8073f1ea43527b036f8e143ad1f71d025836b30231f9a866773e4d7ecd1529cdc6cbef5691e5d", 0xd2}, {&(0x7f0000000440)="ef5407a296df5bd96d4cee6de9726eedd2ac0d39f58a6869ea2cbd173f7d8ec74d", 0x21}, {&(0x7f0000000480)="093f248a67585d1daa495c59a70145e604667d364d389df671cd6239740b8fe1c9baeed951340bfecdec8ecb0222fe0ceaa6deaef9d4726e4e7bdda45956a8a418b79c6d7c185cb643478034fc6f6f5a0b30573e017d18b44154644379caa765a36cbe748898a79ba8612ebf3825f8d76065b34b75ffbe6be10f4f6f7ec17135db11e5e7b85cca027770649224608b6b34b20d95e15b781262e0d084f571c33268e6b260cd2b992192d4fcafad05c2ab7d3e92bce1", 0xb5}, {&(0x7f0000000540)="e50c675707e062158424c42cc7ffa3969a275a82d09f2dc93ffdea142b63a1d4935f29cb6f84be7abf0ec021a1cdeea688a1244a0fdf8412d5f149156b9aadfb9deeb2e1ae3bce4a75c3d6a22ceedc33eda4b1c8996bae37cb72fa8e3461608aef811014adf22a4d3ce9bea31d63b91aab22de8822eebca13ef612", 0x7b}, {&(0x7f00000005c0)="8efd89626642f068e161253991f07bcb655afeb094969835b28a54fe0bc056bf7beb30cc2a2618caaabaff4defe2b2d4df4bd1eeb148a1c7bf6f25f6c0a17610537df0aeeae086dc4717a5299ddcbbd7f5569a437a7b99d74846ccf247d2346b93c6a7b96c47585cb0b30fa970f37cd50caeda660962910c5e0e1de33fca42fa35fcfbf127778cb77577b78ecdd3512b32c0099923897adb5143da4967c1bdc9359da4e45bbd2441bf212da6767c8fe13d155d2b7a6babe017d86ae31f07869c54f1034e34e01e5733be734338fd1da301b7104a3a4b5d68b6478e4dcb15c1d12304e3239c920b478a2008f0f565bf", 0xef}, {&(0x7f00000007c0)="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", 0xfb}, {&(0x7f00000008c0)="67be2b3da66d313910ca1df30421c9612b145b3a236479aa13838aab39f64a872e0ab8309554ac603d6644caaf3b1a2172fa6622dafe73be47179ac231cf6af86cd0498855114cb785b62ec307bdd3793ecca745a0d4c452abed98de20a1a1d46a7673f7", 0x64}], 0x9}, 0x0) preadv(r3, &(0x7f0000002840)=[{&(0x7f0000000240)=""/214, 0xd6}], 0x1, 0x1860, 0xffffffff) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, 0x0, 0x2, 0x0) write$cgroup_type(r6, 0x0, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000780)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r2], 0x40}}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)="b073c5a263fca0e78eeebb2344350ef83d6a4432abedf0300b335b6ab9922c600d30053f73c069223c3ccd4b3ac304af75d564343ad21e3d821568ba6aa9f9082cd2d6c6b7534b280855e45825e716817cb5b11025e97ab1115c2c5739ae9d59f18b9479b42466bf63184feb11ccd291e7", 0x71}, {&(0x7f0000000180)="b9f3db5ce1afe65323e842628e7989e2a6e3ce3a4aa542be", 0x18}, {&(0x7f0000000340)="62321cac5de35d4df5c7bf5353e20287bad5550689b2c6a3221fcec838287062f5982f626b2b295987d5971735ec4cb337fca542fce3c6375027a375bee6e6f3b036c80428920d17ec4bea7a5917e12d0963d95f527bdd0a6fb50c118e41944ae6ac8db3162122d470e1c5c543fd900136f90e493463a2711ff3646778927bb5d97389981a42df709219f023114665fb86035cc692bbd3485339606d47b40837660a15ac4b987bba7a7843d8073f1ea43527b036f8e143ad1f71d025836b30231f9a866773e4d7ecd1529cdc6cbef5691e5d", 0xd2}, {&(0x7f0000000440)="ef5407a296df5bd96d4cee6de9726eedd2ac0d39f58a6869ea2cbd173f7d8ec74d", 0x21}, {&(0x7f0000000480)="093f248a67585d1daa495c59a70145e604667d364d389df671cd6239740b8fe1c9baeed951340bfecdec8ecb0222fe0ceaa6deaef9d4726e4e7bdda45956a8a418b79c6d7c185cb643478034fc6f6f5a0b30573e017d18b44154644379caa765a36cbe748898a79ba8612ebf3825f8d76065b34b75ffbe6be10f4f6f7ec17135db11e5e7b85cca027770649224608b6b34b20d95e15b781262e0d084f571c33268e6b260cd2b992192d4fcafad05c2ab7d3e92bce1", 0xb5}, {&(0x7f0000000540)="e50c675707e062158424c42cc7ffa3969a275a82d09f2dc93ffdea142b63a1d4935f29cb6f84be7abf0ec021a1cdeea688a1244a0fdf8412d5f149156b9aadfb9deeb2e1ae3bce4a75c3d6a22ceedc33eda4b1c8996bae37cb72fa8e3461608aef811014adf22a4d3ce9bea31d63b91aab22de8822eebca13ef612", 0x7b}, {&(0x7f00000005c0)="8efd89626642f068e161253991f07bcb655afeb094969835b28a54fe0bc056bf7beb30cc2a2618caaabaff4defe2b2d4df4bd1eeb148a1c7bf6f25f6c0a17610537df0aeeae086dc4717a5299ddcbbd7f5569a437a7b99d74846ccf247d2346b93c6a7b96c47585cb0b30fa970f37cd50caeda660962910c5e0e1de33fca42fa35fcfbf127778cb77577b78ecdd3512b32c0099923897adb5143da4967c1bdc9359da4e45bbd2441bf212da6767c8fe13d155d2b7a6babe017d86ae31f07869c54f1034e34e01e5733be734338fd1da301b7104a3a4b5d68b6478e4dcb15c1d12304e3239c920b478a2008f0f565bf", 0xef}, {&(0x7f00000007c0)="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", 0xfb}, {&(0x7f00000008c0)="67be2b3da66d313910ca1df30421c9612b145b3a236479aa13838aab39f64a872e0ab8309554ac603d6644caaf3b1a2172fa6622dafe73be47179ac231cf6af86cd0498855114cb785b62ec307bdd3793ecca745a0d4c452abed98de20a1a1d46a7673f7", 0x64}], 0x9}, 0x0) (async) preadv(r3, &(0x7f0000002840)=[{&(0x7f0000000240)=""/214, 0xd6}], 0x1, 0x1860, 0xffffffff) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_type(r5, 0x0, 0x2, 0x0) (async) write$cgroup_type(r6, 0x0, 0x0) (async) openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) (async) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000780)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}) (async) 3m8.880919619s ago: executing program 33 (id=545): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r2], 0x40}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)="b073c5a263fca0e78eeebb2344350ef83d6a4432abedf0300b335b6ab9922c600d30053f73c069223c3ccd4b3ac304af75d564343ad21e3d821568ba6aa9f9082cd2d6c6b7534b280855e45825e716817cb5b11025e97ab1115c2c5739ae9d59f18b9479b42466bf63184feb11ccd291e7", 0x71}, {&(0x7f0000000180)="b9f3db5ce1afe65323e842628e7989e2a6e3ce3a4aa542be", 0x18}, {&(0x7f0000000340)="62321cac5de35d4df5c7bf5353e20287bad5550689b2c6a3221fcec838287062f5982f626b2b295987d5971735ec4cb337fca542fce3c6375027a375bee6e6f3b036c80428920d17ec4bea7a5917e12d0963d95f527bdd0a6fb50c118e41944ae6ac8db3162122d470e1c5c543fd900136f90e493463a2711ff3646778927bb5d97389981a42df709219f023114665fb86035cc692bbd3485339606d47b40837660a15ac4b987bba7a7843d8073f1ea43527b036f8e143ad1f71d025836b30231f9a866773e4d7ecd1529cdc6cbef5691e5d", 0xd2}, {&(0x7f0000000440)="ef5407a296df5bd96d4cee6de9726eedd2ac0d39f58a6869ea2cbd173f7d8ec74d", 0x21}, {&(0x7f0000000480)="093f248a67585d1daa495c59a70145e604667d364d389df671cd6239740b8fe1c9baeed951340bfecdec8ecb0222fe0ceaa6deaef9d4726e4e7bdda45956a8a418b79c6d7c185cb643478034fc6f6f5a0b30573e017d18b44154644379caa765a36cbe748898a79ba8612ebf3825f8d76065b34b75ffbe6be10f4f6f7ec17135db11e5e7b85cca027770649224608b6b34b20d95e15b781262e0d084f571c33268e6b260cd2b992192d4fcafad05c2ab7d3e92bce1", 0xb5}, {&(0x7f0000000540)="e50c675707e062158424c42cc7ffa3969a275a82d09f2dc93ffdea142b63a1d4935f29cb6f84be7abf0ec021a1cdeea688a1244a0fdf8412d5f149156b9aadfb9deeb2e1ae3bce4a75c3d6a22ceedc33eda4b1c8996bae37cb72fa8e3461608aef811014adf22a4d3ce9bea31d63b91aab22de8822eebca13ef612", 0x7b}, {&(0x7f00000005c0)="8efd89626642f068e161253991f07bcb655afeb094969835b28a54fe0bc056bf7beb30cc2a2618caaabaff4defe2b2d4df4bd1eeb148a1c7bf6f25f6c0a17610537df0aeeae086dc4717a5299ddcbbd7f5569a437a7b99d74846ccf247d2346b93c6a7b96c47585cb0b30fa970f37cd50caeda660962910c5e0e1de33fca42fa35fcfbf127778cb77577b78ecdd3512b32c0099923897adb5143da4967c1bdc9359da4e45bbd2441bf212da6767c8fe13d155d2b7a6babe017d86ae31f07869c54f1034e34e01e5733be734338fd1da301b7104a3a4b5d68b6478e4dcb15c1d12304e3239c920b478a2008f0f565bf", 0xef}, {&(0x7f00000007c0)="1057f4f5eb99c47cea18557d988782160c4a44cddc2a90528099cf8074765c776ff85038effda1d7ec8ea27b1c39e3a5d78c78e1084debbcc978897218b3dc26348c26d2285db1af207d843d1a50ca50193327255331a8892914cf12d5820f216a7f7aed0284e932be84d896b12e4643d278e8d4d1427c61fd6960c4eb9021d60e28ee69b7c8b6bbe467e7727195894e023faa822c3972017bdb57c862ea96dd5e29b15f9c848fd5dd6bd942d20f9713cf5808a14aeb102d55c0301f1e87cbac0d0877801db0adf3d33b3c57d807f39ff62db06fdd6e127fbe1d44ed321fbee6c6fffde1e5e003b0fd05ff1a49311fe6c478a2412bc07d3a6b527a", 0xfb}, {&(0x7f00000008c0)="67be2b3da66d313910ca1df30421c9612b145b3a236479aa13838aab39f64a872e0ab8309554ac603d6644caaf3b1a2172fa6622dafe73be47179ac231cf6af86cd0498855114cb785b62ec307bdd3793ecca745a0d4c452abed98de20a1a1d46a7673f7", 0x64}], 0x9}, 0x0) preadv(r3, &(0x7f0000002840)=[{&(0x7f0000000240)=""/214, 0xd6}], 0x1, 0x1860, 0xffffffff) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, 0x0, 0x2, 0x0) write$cgroup_type(r6, 0x0, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000780)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r2], 0x40}}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)="b073c5a263fca0e78eeebb2344350ef83d6a4432abedf0300b335b6ab9922c600d30053f73c069223c3ccd4b3ac304af75d564343ad21e3d821568ba6aa9f9082cd2d6c6b7534b280855e45825e716817cb5b11025e97ab1115c2c5739ae9d59f18b9479b42466bf63184feb11ccd291e7", 0x71}, {&(0x7f0000000180)="b9f3db5ce1afe65323e842628e7989e2a6e3ce3a4aa542be", 0x18}, {&(0x7f0000000340)="62321cac5de35d4df5c7bf5353e20287bad5550689b2c6a3221fcec838287062f5982f626b2b295987d5971735ec4cb337fca542fce3c6375027a375bee6e6f3b036c80428920d17ec4bea7a5917e12d0963d95f527bdd0a6fb50c118e41944ae6ac8db3162122d470e1c5c543fd900136f90e493463a2711ff3646778927bb5d97389981a42df709219f023114665fb86035cc692bbd3485339606d47b40837660a15ac4b987bba7a7843d8073f1ea43527b036f8e143ad1f71d025836b30231f9a866773e4d7ecd1529cdc6cbef5691e5d", 0xd2}, {&(0x7f0000000440)="ef5407a296df5bd96d4cee6de9726eedd2ac0d39f58a6869ea2cbd173f7d8ec74d", 0x21}, {&(0x7f0000000480)="093f248a67585d1daa495c59a70145e604667d364d389df671cd6239740b8fe1c9baeed951340bfecdec8ecb0222fe0ceaa6deaef9d4726e4e7bdda45956a8a418b79c6d7c185cb643478034fc6f6f5a0b30573e017d18b44154644379caa765a36cbe748898a79ba8612ebf3825f8d76065b34b75ffbe6be10f4f6f7ec17135db11e5e7b85cca027770649224608b6b34b20d95e15b781262e0d084f571c33268e6b260cd2b992192d4fcafad05c2ab7d3e92bce1", 0xb5}, {&(0x7f0000000540)="e50c675707e062158424c42cc7ffa3969a275a82d09f2dc93ffdea142b63a1d4935f29cb6f84be7abf0ec021a1cdeea688a1244a0fdf8412d5f149156b9aadfb9deeb2e1ae3bce4a75c3d6a22ceedc33eda4b1c8996bae37cb72fa8e3461608aef811014adf22a4d3ce9bea31d63b91aab22de8822eebca13ef612", 0x7b}, {&(0x7f00000005c0)="8efd89626642f068e161253991f07bcb655afeb094969835b28a54fe0bc056bf7beb30cc2a2618caaabaff4defe2b2d4df4bd1eeb148a1c7bf6f25f6c0a17610537df0aeeae086dc4717a5299ddcbbd7f5569a437a7b99d74846ccf247d2346b93c6a7b96c47585cb0b30fa970f37cd50caeda660962910c5e0e1de33fca42fa35fcfbf127778cb77577b78ecdd3512b32c0099923897adb5143da4967c1bdc9359da4e45bbd2441bf212da6767c8fe13d155d2b7a6babe017d86ae31f07869c54f1034e34e01e5733be734338fd1da301b7104a3a4b5d68b6478e4dcb15c1d12304e3239c920b478a2008f0f565bf", 0xef}, {&(0x7f00000007c0)="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", 0xfb}, {&(0x7f00000008c0)="67be2b3da66d313910ca1df30421c9612b145b3a236479aa13838aab39f64a872e0ab8309554ac603d6644caaf3b1a2172fa6622dafe73be47179ac231cf6af86cd0498855114cb785b62ec307bdd3793ecca745a0d4c452abed98de20a1a1d46a7673f7", 0x64}], 0x9}, 0x0) (async) preadv(r3, &(0x7f0000002840)=[{&(0x7f0000000240)=""/214, 0xd6}], 0x1, 0x1860, 0xffffffff) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_type(r5, 0x0, 0x2, 0x0) (async) write$cgroup_type(r6, 0x0, 0x0) (async) openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) (async) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000780)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}) (async) 3m5.698663496s ago: executing program 3 (id=584): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f00000021c0)='./file0/file0\x00', 0x2900, 0x88c, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002040), 0x200000, 0x0) ioctl$CDROMPAUSE(r3, 0x5301) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1ffffffffffff, 0xe5, 0xc, {0x1, 0x9, 0x1, 0x1, 0x5, 0x4, 0x8, 0x123, 0x3, 0xa000, 0x0, 0x0, r2, 0x5, 0x2000ffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r4}, 0x10) 3m4.848505084s ago: executing program 3 (id=599): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8003, 0x25f}, &(0x7f0000000240), &(0x7f0000000200), &(0x7f0000000000)) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="e000000015000000000000000000000070636263286663727970742d67656e6572696329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500"/224], 0xe0}}, 0x0) sendmsg$nl_crypto(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000800)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000680)) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r8) sendmsg$NFC_CMD_FW_DOWNLOAD(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r9, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000007c0)) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r9, 0x10, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x44040) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[r1], 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x800, 0x0) connect$bt_sco(r0, &(0x7f0000001280), 0x8) r10 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x300080, 0xc9) read$watch_queue(r10, &(0x7f0000000600)=""/93, 0x5d) 3m1.79359597s ago: executing program 3 (id=606): socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') 3m1.716238197s ago: executing program 3 (id=608): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chown(&(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, 0xee01) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x82042, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/86, 0x56}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000280)=""/162, 0xa2}, {&(0x7f0000000340)=""/57, 0x39}], 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x50, r2, 0x1, 0x0, 0x25dfdbfb, {0x27}, [{@nsim={{0xff03}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}}, 0x0) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000200)={"d1ed39d8de344002b9e500", r5}) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000540)={@any, 0x851}) setsockopt$inet_mtu(0xffffffffffffffff, 0x111, 0xa, 0x0, 0x0) memfd_create(0x0, 0x6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="ed58beb5805637d44fc70000000000140012800b00010069703667726500000400028008000400faffffff8e95b925836b7205d59d2bc1029c2c2ccbf85fb9d868fba7398d87bf9659c8"], 0x3c}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c00)}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f00000004c0)={0x100801000, &(0x7f0000000180), 0x0, 0x0, {0x1d}, &(0x7f0000000240)=""/118, 0x76, 0x0, 0x0}, 0x58) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 3m1.534925881s ago: executing program 3 (id=612): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x2}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x3}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xa320, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x8000000, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0xfffffffc, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x400, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x58000000}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000}, {0x0, 0xe3, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800, 0x7fff}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x801}, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080045000024000000000488907800000000000000000000000000089078129434c2f52068d4"], 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0xfff, 0x1fd, 0xfffffffd, 0xfffffffb}, 0x1c) (async) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0xfff, 0x1fd, 0xfffffffd, 0xfffffffb}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x10000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4ea5, 0x7f, @loopback, 0xb}}}, 0x30) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r1, 0xc0106450, &(0x7f0000000540)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000004c0)={0x0, 0x1fc, 0x1e00, 0xe, 0x2, [0x2, 0x0, r4], [0x7fc, 0x0, 0x0, 0x2], [0x1, 0x2, 0x1], [0x400000000000001]}) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f00000003c0)=0x6) (async) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f00000003c0)=0x6) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000005c0)={0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000600)=r6) (async) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000600)=r6) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000640)={r2}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000480)={0x28, 0x7, r7, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffb}) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000)="eaa1fed4fc681d9ecc0d02051bd6b03962ebc700d40f3abbc06752512274377b6b95f12e1a1153ffd6225dec516ee78e2b18038d94995487f11b", 0x3a}, {&(0x7f0000000080)="5904ac6355c40be5af278f88d4b85c9f8f0cca4e3ccbddc08ed2c4dd56522dcb44ea4a5f900ce21459a165a4afe54b85ff8ad3736c2d89df3019988a565743f168cfa5460431dac97774da3c4724cbc6b3434ab6db033d69737ac8d46b6d2d9b25fa9c4ffb827b6d18e49061c161d44f12c14c3c0c7e400f138e79093e6077baa78555afe794816951274a72f8d35601b2a462d65db56cee99e944af1f7c75ba750835cf4f7b569194a5ac11a2fe4d3090779ec50aae0b2e1056a5ad79ce0733cf33e203a28000dfc1656eb0c6798b1f4205b6e524", 0xd5}, {&(0x7f0000000180)="bb21d70f55fe389e8e6caef3b4ece87058d5d64a90055b437c5154118e9f3b419cf95e5ec6b5ee7ff4a5d4394d3d54fd8fbe84ec5087675f950f4c35d5e83abc99ae4d7811da01897038f3309060131ab08e6a8ee4d5a59addd8eac637efeb4c659e0e164269b80412031a9ad5f6ad07d76613d7303aad8b3461e5f70d63672c7ec80c09f8c12ce5a27d0071e13c8454e0c6102d5fafbbb6c0dbf5da8164768c40172f7d8b7a3e62208f7fee758a6ce67d6c7cbe5a5172dc72c7e576cc8435e9d6707ea630cbff6f2d69e278", 0xcc}, {&(0x7f0000000280)='B', 0x1}, {&(0x7f00000002c0)="4a06611fb48fd5dd3481102c2801bbbb1abaeacc504ccae63ada0c3501a9757a2a4b69792945498ed70d6c4fca849635489f6cc825b3de29358c3cb96ed08d9d50bee4d18e1f08c809c5a8b81ccdc8d7e315f287b329a47c506261a4f38facc06e9288af646d73086d7b90463c2d5d", 0x6f}], 0x5) (async) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000)="eaa1fed4fc681d9ecc0d02051bd6b03962ebc700d40f3abbc06752512274377b6b95f12e1a1153ffd6225dec516ee78e2b18038d94995487f11b", 0x3a}, {&(0x7f0000000080)="5904ac6355c40be5af278f88d4b85c9f8f0cca4e3ccbddc08ed2c4dd56522dcb44ea4a5f900ce21459a165a4afe54b85ff8ad3736c2d89df3019988a565743f168cfa5460431dac97774da3c4724cbc6b3434ab6db033d69737ac8d46b6d2d9b25fa9c4ffb827b6d18e49061c161d44f12c14c3c0c7e400f138e79093e6077baa78555afe794816951274a72f8d35601b2a462d65db56cee99e944af1f7c75ba750835cf4f7b569194a5ac11a2fe4d3090779ec50aae0b2e1056a5ad79ce0733cf33e203a28000dfc1656eb0c6798b1f4205b6e524", 0xd5}, {&(0x7f0000000180)="bb21d70f55fe389e8e6caef3b4ece87058d5d64a90055b437c5154118e9f3b419cf95e5ec6b5ee7ff4a5d4394d3d54fd8fbe84ec5087675f950f4c35d5e83abc99ae4d7811da01897038f3309060131ab08e6a8ee4d5a59addd8eac637efeb4c659e0e164269b80412031a9ad5f6ad07d76613d7303aad8b3461e5f70d63672c7ec80c09f8c12ce5a27d0071e13c8454e0c6102d5fafbbb6c0dbf5da8164768c40172f7d8b7a3e62208f7fee758a6ce67d6c7cbe5a5172dc72c7e576cc8435e9d6707ea630cbff6f2d69e278", 0xcc}, {&(0x7f0000000280)='B', 0x1}, {&(0x7f00000002c0)="4a06611fb48fd5dd3481102c2801bbbb1abaeacc504ccae63ada0c3501a9757a2a4b69792945498ed70d6c4fca849635489f6cc825b3de29358c3cb96ed08d9d50bee4d18e1f08c809c5a8b81ccdc8d7e315f287b329a47c506261a4f38facc06e9288af646d73086d7b90463c2d5d", 0x6f}], 0x5) 3m1.276224789s ago: executing program 3 (id=614): r0 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x20000, 0x88) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close(0x3) r2 = openat(r0, &(0x7f0000000080)='./file0/file0\x00', 0x302801, 0x0) flock(r2, 0x2) socket$inet6(0xa, 0x80000, 0x10001) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x2) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x3, 0x0, 0x4, 0x2}, {0x0, 0x1, 0x6, 0xffff644b}, {0x1, 0x9, 0x63, 0x2}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3m1.239428913s ago: executing program 34 (id=614): r0 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x20000, 0x88) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close(0x3) r2 = openat(r0, &(0x7f0000000080)='./file0/file0\x00', 0x302801, 0x0) flock(r2, 0x2) socket$inet6(0xa, 0x80000, 0x10001) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x2) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x3, 0x0, 0x4, 0x2}, {0x0, 0x1, 0x6, 0xffff644b}, {0x1, 0x9, 0x63, 0x2}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m3.945790138s ago: executing program 6 (id=2323): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e1f, @rand_addr=0x64010102}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/157, 0x9d}], 0x1}, 0x0) shutdown(r1, 0x1) sendto$inet(r0, &(0x7f0000000240)="02a8f6190718b0847cc20f1c9ee04f37d45c6d55f1be84c8016098a29cd427485a2124fed576ba889b0c7a3b17ccc359d9416c6bbb6ed948a2931f6e6e6cafd3d2741d12597f5a0d75b034d98a8efaf641c2dd441bb990d015e0bafe85f80e3e40780e793b19a3eea5e18a05aa40362db40e6c211b82d07f661171661e724ec5a2b53f93b987", 0x86, 0x28000001, 0x0, 0x0) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 1m3.047035346s ago: executing program 6 (id=2334): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = socket$pptp(0x18, 0x1, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2e, 0xfffd}}}], []]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r5, 0x92b, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x60}, 0x4) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, &(0x7f00000000c0)) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(&(0x7f0000000500), 0xb, 0x0, &(0x7f0000000540), &(0x7f0000000580), 0x1) 1m3.043280047s ago: executing program 6 (id=2335): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x804, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc4, 0x9, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8e6}, @IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x69d9}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5c}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfe49}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xf31}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24004840}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x3, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) syz_emit_ethernet(0x32, &(0x7f0000000180)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x24, 0x65, 0x0, 0x3, 0x11, 0x0, @rand_addr=0x64010100, @empty=0xe0000001}, {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x100}}}}}}}, 0x0) 1m2.947801471s ago: executing program 6 (id=2337): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1004000010000104080000000400000000ff0000", @ANYRES32=0x0, @ANYBLOB="000000000340000008001f007f000000"], 0x28}, 0x1, 0x2000000000000000}, 0x0) 1m2.947248015s ago: executing program 6 (id=2338): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6a}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) close_range(r0, r1, 0x2) setxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:smartcard_device_t:s0\x00', 0x28, 0x2) utimensat(r1, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}, 0x100) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0], 0x2}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ppoll(&(0x7f0000000300)=[{r0, 0x2000}, {r4, 0x200}, {r0, 0x2}], 0x3, &(0x7f0000000380)={r5, r6+60000000}, &(0x7f00000003c0)={[0x9]}, 0x8) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r7, 0x8008f513, &(0x7f0000000440)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000700)={&(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[{}, {}, {}, {}], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x4, 0x8, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000980)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[{}, {}, {}], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x4, 0x5}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000a80)={&(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0], 0x4, r2, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000c80)={&(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[{}, {}, {}], &(0x7f0000000c00)=[0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000f80)={&(0x7f0000000d00)=[0x0, 0x0], &(0x7f0000000d40)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000f00)=[0x0], &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000001180)={&(0x7f0000001000)=[0x0], &(0x7f0000001040)=[{}, {}], &(0x7f0000001100)=[0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000001400)={&(0x7f0000001200)=[0x0, 0x0], &(0x7f0000001240)=[{}, {}, {}, {}], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0], 0x4, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000001500)={0x200, 0x3, &(0x7f0000000480)=[r3, r2, r2], &(0x7f00000004c0)=[0x473, 0xa4f8, 0xe17d, 0x8, 0x6, 0x4, 0x2, 0xfffffffc], &(0x7f0000001480)=[r8, r9, r10, r11, r12, r13, r14], &(0x7f00000014c0)=[0x80, 0x3ff, 0x8, 0xfffffffffffffffd, 0x10, 0x2, 0x5, 0x4], 0x0, 0xf3}) r15 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001540), 0x304, 0x0) tee(r15, r7, 0x8, 0x1) ioctl$FE_DISEQC_SEND_BURST(r15, 0x6f41, &(0x7f0000001580)=0x1) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000015c0)={0x0, 0x2a}) move_mount(r1, &(0x7f0000001600)='./file0\x00', r0, &(0x7f0000001640)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000016c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001680)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f00000017c0)={r16, 0x1, &(0x7f0000001700)=[0x3], &(0x7f0000001740)=[0x4, 0x0, 0x8, 0x7, 0x3, 0x2, 0x7], &(0x7f0000001780)=[0x7, 0x0, 0xc98a, 0xfffb, 0x3, 0x2]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000001800)={{0x1, 0x1, 0x18, r1, {0x4, 0xb53}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001900)={'pim6reg1\x00', 0x0}) sendto$packet(r17, &(0x7f0000001840)="5f047d5fe67bb88d256a134c4a8411456b90000d0ba0c25c098571db327014f748ce63308a6e09825c7d30c475d51b7ff55521c64d57106eeda7b9d222cee1a4072ffa443f9448d3372fd7724283e1597dfd5b2de1dfbe62ecd22dcade6e805025318d7bce65282bc44270fd5cad4e9cbab16e460c3cef434a5c622b0723b92b2c4e6c9652b432c53cc6c1cc71d8ee8e558471a2d9156cf924516c4375366b57231e01439addcb79358c3105", 0xac, 0x4004080, &(0x7f0000001940)={0x11, 0x15, r18, 0x1, 0xf0, 0x6, @multicast}, 0x14) 1m2.076412274s ago: executing program 6 (id=2353): mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async, rerun: 32) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x14, 0x23, 0x109, 0x70bd2c, 0xfffffff9, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="0b0000008988483309dce35b3a91c7b900c6ad0700000000000000006747be1f5f36cee551c4c53cd4f379e42e2f331ef00b6775d3f46a0f9df0607c5338117bad8d4a1b2636f179b585088f60902f9bf97b15dc0ab55c4e1b9b5c6cbc2f2fa02c478df66a744783b431ff97a8ff557234f89860987e3e9c79fd3a917001c6ba1d60bc48f32ce017c092747b436aeefd278158f478ddee9eed97a9ac0583f369bd31fafe3e0f4db5e0d16975b099eff70507c577e1b16510040034d90a039b5ef6e4fccbc83ed0d6822dcd10fb1465602ce4adba8494048e6e107b95dbbd225d354d1ac2feaff2b5acc05899ed932738bfb9bcd8a033d4c9ff95", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) write$P9_RLERRORu(r3, &(0x7f0000000100)=ANY=[], 0xe) r7 = syz_clone(0xb23e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r7, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (rerun: 32) write$P9_RREAD(r3, &(0x7f0000000140)={0xad, 0x75, 0x1, {0xa2, "68cb31cdf3872958e8cdfd05441efc6b57752b7ccd1133f932a8a55d175de4a10bdafd9582af04787b033e36ccfc3d6c22916e6ea5a4914ca81163d235f123489fe9f9f7637458efbdbcddcf896dd22caaf704e60e9efcff68a7eb3a63247726e69b6d48695369be224af3275513cb3dedb8ef61efe7ae0fb3791a571021d2fcd732cac4d4fcb400ca2028a3f0f81e804a559f7d7f20fe4839d85786321fe20f9047"}}, 0xad) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) fsmount(r8, 0x0, 0x80) (rerun: 64) 46.486464953s ago: executing program 35 (id=2353): mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async, rerun: 32) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x14, 0x23, 0x109, 0x70bd2c, 0xfffffff9, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="0b0000008988483309dce35b3a91c7b900c6ad0700000000000000006747be1f5f36cee551c4c53cd4f379e42e2f331ef00b6775d3f46a0f9df0607c5338117bad8d4a1b2636f179b585088f60902f9bf97b15dc0ab55c4e1b9b5c6cbc2f2fa02c478df66a744783b431ff97a8ff557234f89860987e3e9c79fd3a917001c6ba1d60bc48f32ce017c092747b436aeefd278158f478ddee9eed97a9ac0583f369bd31fafe3e0f4db5e0d16975b099eff70507c577e1b16510040034d90a039b5ef6e4fccbc83ed0d6822dcd10fb1465602ce4adba8494048e6e107b95dbbd225d354d1ac2feaff2b5acc05899ed932738bfb9bcd8a033d4c9ff95", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) write$P9_RLERRORu(r3, &(0x7f0000000100)=ANY=[], 0xe) r7 = syz_clone(0xb23e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r7, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (rerun: 32) write$P9_RREAD(r3, &(0x7f0000000140)={0xad, 0x75, 0x1, {0xa2, "68cb31cdf3872958e8cdfd05441efc6b57752b7ccd1133f932a8a55d175de4a10bdafd9582af04787b033e36ccfc3d6c22916e6ea5a4914ca81163d235f123489fe9f9f7637458efbdbcddcf896dd22caaf704e60e9efcff68a7eb3a63247726e69b6d48695369be224af3275513cb3dedb8ef61efe7ae0fb3791a571021d2fcd732cac4d4fcb400ca2028a3f0f81e804a559f7d7f20fe4839d85786321fe20f9047"}}, 0xad) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) fsmount(r8, 0x0, 0x80) (rerun: 64) 3.421933741s ago: executing program 4 (id=2825): ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000002c0)={0x31, &(0x7f0000000240)=[{0x2c, '\x00', @buffer={"5f2e0cc9559596872acaf35e6c939d91db656ec19f9a2a6016d142244dd8f099", 0x20}, 0x4}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00'}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="080000cd6c19a61a63569ba915b739ac", @ANYRES32=r0, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 3.421633212s ago: executing program 1 (id=2869): ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000000)=0x4) (async) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x444002, 0x0) close(r0) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0xf) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) (async) writev(r0, &(0x7f00000042c0)=[{&(0x7f0000004180)="d2289f3848f706c5a85a00f1ca98c57634109cad67479da8777edf79fc14440ea0d868d110f46c29292731330f645b29fb60575ccfe69f940491cee687f5a90b475b4ec46254e0d9896cba6e842062ef678a226d37c00109b98fdc32e54ba4e6778b7a7fc4e409caab2b020c28f9d17406600e5d0084457a8ceec60e56cdd3502b744c4d98e16cc52686d0cada3d7cc788f4f6aee386cb0b595ca3563ee16a557787f8abba6f9e2c420182132cefac962878907c18f40959271b42c2dbb741ed05414ead564da3facc925329a0f677ed6b516d1e5aa093b36d8fbdadd5", 0xdd}, {&(0x7f0000004280)="54a4d07da25603c85179cf35318940208f31bdfdd1ef3ea0a9bd279913fd7df794a0cda0a41fc06db31b1e693f4e6e5e3b367ada50a3b5a5652c1f0c", 0x3c}], 0x2) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000004300), 0x100, 0x0) fanotify_mark(r1, 0x0, 0x10, r3, &(0x7f0000004340)='./file0\x00') write$FUSE_DIRENT(r3, &(0x7f0000004380)={0x58, 0x0, r2, [{0x3, 0x6, 0x3, 0x3, '\'/\xeb'}, {0x4, 0x9, 0xa, 0x9, '/dev/cuse\x00'}]}, 0x58) (async) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000004b40)={&(0x7f0000004400)=0x6, 0x6, &(0x7f0000004440)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000004b00)}) (async) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000004c40)={&(0x7f0000004b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004c00)={&(0x7f0000004bc0)={0x1c, 0x1402, 0x110, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c854}, 0x24044051) ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000004c80)=0x5) (async) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000004cc0)={0x0, 0x2}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004d40), r3) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000004e40)={&(0x7f0000004d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004e00)={&(0x7f0000004d80)={0x78, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x36}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "56644cf017e5302ec179fac932634bda"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_PMKID={0x14, 0x55, "81e19fb8e9ccf83112a7a5b327c28aee"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x200}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x49}, @NL80211_ATTR_PMKID={0x14, 0x55, "11d8c90572264f0fae960b1be810c776"}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) getxattr(&(0x7f0000004e80)='./file0\x00', &(0x7f0000004ec0)=@known='trusted.overlay.redirect\x00', &(0x7f0000004f00)=""/135, 0x87) (async) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000900, 0xee00, &(0x7f0000004fc0)) (async, rerun: 64) getsockopt$inet_int(r3, 0x0, 0x21, &(0x7f0000005040), &(0x7f0000005080)=0x4) (rerun: 64) sendmsg$can_bcm(r3, &(0x7f0000005180)={0x0, 0x0, &(0x7f0000005140)={&(0x7f00000050c0)={0x6, 0x102, 0x6, {}, {0x0, 0xea60}, {0x3, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x0, 0x1}, 0x16, 0x3, 0x0, 0x0, "b697a9157891eb98e41334ea3b2b0b58166c45b7e988d4941a914cf3df13f64a8297684bbc42a76a9c37ab449af09e1bc7777f806608d59f76d1f78639401ba8"}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x4c010) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f00000052c0)={0x0, 0x80, 0xffffffff, 0xa, 0x0, 0x80, 0x80, 0x7, 0x2, 0x2, 0x4, 0x9, &(0x7f00000051c0)=[0x0, 0x9, 0x9, 0x4, 0x28, 0x1000, 0x7f, 0x9b0, 0xfffffffd], 0x9, &(0x7f0000005200)="8bcdb445c276719b69a597f63d442f95593d47f3a0a30722dffa649335de25f3d14b0713bd0f8c239488ef1e5071e86f6b4b0542b62c89b6ef9ad8e97d3371f32028ee3077304bdc7adeac2f601063c586c5d04b34da8d3baadc66cdac06eaac9579c2da5546dedabd67204da303afa50d76a52518df3c031163b7784bdd9d8c0bc0c8d43f299fa260349261328c24543fd161946a7ed1ef0561813dd36441a1894c70ab6efc8fe8ccf448b12a4b431f122e", 0xb2}) r5 = socket$nl_crypto(0x10, 0x3, 0x15) accept4(r5, &(0x7f0000005340)=@generic, &(0x7f00000053c0)=0x80, 0x80000) (async) mount$9p_fd(0x0, &(0x7f0000005400)='./file0\x00', &(0x7f0000005440), 0x2000020, &(0x7f0000005480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '/+:'}}, {@aname={'aname', 0x3d, '@$'}}, {@version_u}, {@noxattr}, {@access_user}], [{@subj_role={'subj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@appraise_type}, {@dont_measure}]}}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000005540)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000005600)={&(0x7f0000005580)=[0x0, r6, 0x0], &(0x7f00000055c0), 0x3}) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000005640)={'gretap0\x00'}) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000005680)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 3.351883783s ago: executing program 4 (id=2871): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x81) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x7, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x4c2}, {{0x2}, {0xf0ffff, 0x1, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840) write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) write$nci(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="50010101"], 0xe4) close(0x3) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@getchain={0x64, 0x66, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x2, 0x4}, {0xffff, 0xfff2}, {0xb, 0xb}}, [{0x8, 0xb, 0xffffffff}, {0x8}, {0x8, 0xb, 0x400}, {0x8, 0xb, 0x8427}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x8}]}, 0x64}}, 0x50) socket$kcm(0x10, 0x2, 0x0) r13 = socket(0x29, 0x5, 0x7fffffff) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r15}, @CGW_DST_IF={0x8, 0xa, r15}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_io_uring_complete(0x0, 0x0) 3.351541668s ago: executing program 1 (id=2872): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000180)={0x80, 0x0, 0x0, 0x0, 0x5e}) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000001c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000011c0)={0x0, r3, "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", "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"}) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x4002, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c) 3.202865564s ago: executing program 1 (id=2873): ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000000)={0x2, 0x0, 0xd, 0x5, 0x9, 0x9, 0x6a}) ioctl$BSG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000040)) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x100000001, 0x412000) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f00000000c0)={0xdd42, 0xf, [{0xf, 0x1}, {}, {0x3, 0x1}, {0xd}, {0xd, 0x1}, {0x3}, {0x8, 0x1}, {0xf}, {0xe, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5}, {0x5, 0x1}, {0x8, 0x1}, {0x7, 0x1}]}) fcntl$lock(r0, 0x24, &(0x7f0000000100)={0x1, 0x0, 0x7, 0x5}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000140)={0x8c1b, 0x0, "de878e8b93c548981ec7451a6d419106a10985de9396ef6e6a70a1c45d323a3154288739862d76e0201ef967bc6842c05ce5c26c4e172fa91f8965d39e78cea71fc6ac03e142ea4dc9dcefb911621041c2d70db93f6fd84ac7ec887e8c7943b983d5f8de3c5914c9a5f8e54f2acf4491ae5a6d4c4e07878dc870a3782f3dd830473d0686e60e217409ac2d5a75a9205409de72d1c428225620b2bed412c712115da14243573cec4e27ef1c656adbae00dd0d52f49547475cc14434662afddcbfc8bde7a9f00669631a0780d06b62de48c8b4834187af123fd4dbcadf6868ec00db51973bf82deeb8eec40a33dfac7475ea4e91aee29125f13c73d3f577f4aee6"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x29}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x200}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000800) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000500)={0xc, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x10080, 0x1) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, &(0x7f0000000580)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e20, 0xfff, @remote, 0x80}, 0x1c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x70, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wlan1\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40) socket$inet6(0xa, 0x4, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) pipe2$9p(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RAUTH(r6, &(0x7f0000000780)={0x14, 0x67, 0x2, {0x10, 0x1, 0x3}}, 0x14) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000007c0)='wg0\x00', 0x4) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r4, 0xc0305615, &(0x7f0000000800)={0x0, {0x10001}}) ioctl$BLKFINISHZONE(r4, 0x40101288, &(0x7f0000000840)={0x3, 0x40}) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000880)=""/95, &(0x7f0000000900)=0x5f) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000940)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000980)={0x7, r7, 0x7, 0x2, 0x8, 0x2c31, 0x6}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000dc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000a40)={0x310, r8, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x80, @remote, 0xffff8001}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x52e4, @empty, 0xa}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x3, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x401}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x274, @local, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x55b8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @remote, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc59}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x40000}, 0xcc80) 2.803298065s ago: executing program 5 (id=2877): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x4e24, 0xffffffc0, @mcast2, 0x22}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) r1 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xffa, 0x100, 0x0, 0x0, 0x0}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r5, 0x5411, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000a9cd1000017d0800000000f100752d00000000364e8dd283338ab9436afc8846aea85f7e49cc08f7dfc6a72306f1fe4081a37c2b1541f974cb2cdec667256c388a383897f7261a71e7524f37835ad14cd4f54189f574d5ffb0bdef97eb3b5c92970963b3406f11c61b21b740951267c70bf09cfdd29786c8f2189fa16151074bac4b7d977752844a54b41f5568761bacd754a78376b7c86cecbc88ec5f5dfbd2059ac41dff2175c098b8be", @ANYRES32=0x0, @ANYBLOB="8040010010250400050010000500000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 2.507696182s ago: executing program 7 (id=2883): syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0x200ffffe, 0x7, 0xfffffff7, 0x0, "05000801000000d510017b00000f3600", 0x0, 0x7ff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a98010000060a0b0400000000000000000200000064010480600101800a0001006d617463680000005001028008000240000000000b000100706f6c696379000038010300ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5af546f644c39bedd627181d27d9c185aa87f084d7c5daf6776fec60302779b9e812403a2ff826781b4c761bd14eb7515ae224260c9534891afdd05d18b2ffe91f4052766a0b9fe3955bfb1866142e7c1caceb88de7d6e8a5c08ce052bb461f0c7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b83560c014f50000000900010073797a30000000000900020073797a32"], 0x1c0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000a40)) 2.370789335s ago: executing program 7 (id=2884): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x181) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) (async, rerun: 32) r1 = userfaultfd(0x801) (rerun: 32) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 64) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x22023500, 0x0, 0xff4e, 0x0, 0x0, 0x0) 2.370495798s ago: executing program 7 (id=2885): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) 2.209891406s ago: executing program 5 (id=2886): sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x6, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x4091) fgetxattr(r0, &(0x7f0000000280)=@known='system.posix_acl_access\x00', &(0x7f00000002c0)=""/76, 0x4c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r3, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x46e, 0x79}}}}, [@NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40004) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x20040081) read(r2, &(0x7f0000000600)=""/247, 0xf7) recvmsg(r2, &(0x7f0000002c80)={&(0x7f0000000700)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000000780)=""/138, 0x8a}, {&(0x7f0000000840)=""/177, 0xb1}, {&(0x7f0000000900)=""/175, 0xaf}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/39, 0x27}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/247, 0xf7}, {&(0x7f0000002b00)=""/163, 0xa3}], 0x8, &(0x7f0000002c40)=""/57, 0x39}, 0x0) ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) r5 = syz_open_dev$sndpcmp(&(0x7f0000002cc0), 0x100, 0x9084c186be11a18d) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r5, 0x40184150, &(0x7f0000002d40)={0x0, &(0x7f0000002d00)="924be1b003e8854d3ac723", 0xb}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000002dc0), r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000030c0)={0xffffffffffffffff, 0xe0, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002e00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000002e40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f0000002ec0)=[{}], 0x8, 0x10, &(0x7f0000002f00), &(0x7f0000002f40), 0x8, 0x4d, 0x8, 0x8, &(0x7f0000002f80)}}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000003100)={0x0, @broadcast}, &(0x7f0000003140)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000003180)={@private, @private, 0x0}, &(0x7f00000031c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000003200)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000003300)={'syztnl0\x00', &(0x7f0000003240)={'gre0\x00', 0x0, 0x1, 0x20, 0x3, 0x21f9, {{0x1e, 0x4, 0x1, 0x8, 0x78, 0x66, 0x0, 0x8b, 0x29, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_prespec={0x44, 0x2c, 0x39, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x100}, {@remote, 0x5}, {@local, 0xbc5}, {@multicast2, 0x39}]}, @end, @cipso={0x86, 0x34, 0x3, [{0x6, 0x6, "0ba94411"}, {0x5, 0xc, "6e2380bc9e6bf811562b"}, {0x0, 0x11, "91cd75a021b001463efe134558f236"}, {0x7, 0xb, "8073e1c17f10b98a5e"}]}, @generic={0x44, 0x2}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000003340)={@empty, 0x0}, &(0x7f0000003380)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003440)={'syztnl0\x00', &(0x7f00000033c0)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x5, 0x96, 0x23, @private2, @loopback, 0x8, 0x40, 0x29d9f998, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000003580)={'syztnl1\x00', &(0x7f0000003480)={'sit0\x00', 0x0, 0x700, 0x10, 0x357, 0x2, {{0x36, 0x4, 0x0, 0x5, 0xd8, 0x68, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010101, @multicast1, {[@lsrr={0x83, 0xb, 0xb3, [@multicast1, @dev={0xac, 0x14, 0x14, 0xe}]}, @timestamp_addr={0x44, 0xc, 0x7f, 0x1, 0x8, [{@empty, 0xc}]}, @timestamp_addr={0x44, 0x2c, 0x25, 0x1, 0x8, [{@rand_addr=0x64010102, 0x97fe}, {@multicast1, 0x67}, {@multicast2, 0x6}, {@remote, 0x4}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x82, 0x9, "7a077c18df188f"}, @end, @ssrr={0x89, 0xf, 0xd4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @broadcast]}, @lsrr={0x83, 0x13, 0xbf, [@multicast2, @private=0xa010100, @local, @dev={0xac, 0x14, 0x14, 0x44}]}, @timestamp_addr={0x44, 0x44, 0xbd, 0x1, 0x6, [{@private=0xa010100, 0x7007}, {@empty, 0x1}, {@local, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x8}, {@loopback}, {@remote, 0xff}, {@rand_addr=0x64010101, 0x3c}, {@local}]}, @generic={0x86, 0xe, "426612eb1c9790335c52aa72"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000035c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'syztnl1\x00', 0x0, 0x2f, 0x9a, 0xb, 0x9, 0x42, @dev={0xfe, 0x80, '\x00', 0x23}, @private1, 0x1, 0x10, 0x4, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000036c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000003f40)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003f00)={&(0x7f0000003700)={0x7cc, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffe01}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x24c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x57c}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x1c0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa12d}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7, 0xff, 0x1, 0x2}, {0xfffd, 0x53, 0x4, 0x6}]}}}]}}]}, 0x7cc}, 0x1, 0x0, 0x0, 0x4000}, 0x840) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000004080)={&(0x7f0000003f80), 0xc, &(0x7f0000004040)={&(0x7f0000003fc0)={0x68, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x5e}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xe4}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000041c0)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x5}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xd00}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048001}, 0x8081) 877.679455ms ago: executing program 7 (id=2887): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x2200890, 0x0) open$dir(&(0x7f00000000c0)='./file2\x00', 0x6c40c0, 0x1a0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) mknodat(r2, &(0x7f0000000000)='./file2\x00', 0x99c9, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x268, 0x300, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x10000000}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) 710.116445ms ago: executing program 7 (id=2888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000100)=0xffffffff, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x2, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xd659}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x8004) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x2, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xd659}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x8004) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010027bd7000fddbdf256c00000008000300a5ce8af4", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24008041}, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r2) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1f0, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x11a6}, {0x6, 0x16, 0x200}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0xfff9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xb2be04e}, {0x6, 0x16, 0xfff7}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x401}, {0x8, 0xb, 0x40d}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20004040}, 0x801) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1f0, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x11a6}, {0x6, 0x16, 0x200}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0xfff9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xb2be04e}, {0x6, 0x16, 0xfff7}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x401}, {0x8, 0xb, 0x40d}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20004040}, 0x801) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0xb1f, 0x6, 0x8, 0x0, 0xe5]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4040) 286.588917ms ago: executing program 5 (id=2889): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f00007d0000)) fcntl$setlease(r0, 0x400, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8004) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 282.143683ms ago: executing program 7 (id=2890): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x57, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r1, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44014) r3 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 281.756719ms ago: executing program 1 (id=2891): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0xa80000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x7}]}}}]}, 0x3c}}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000200)={'comedi_test\x00', [0x5, 0xb, 0x76, 0x4072c761, 0x2, 0x7, 0x7ff, 0x2b6c, 0x8, 0x80000001, 0x7, 0x9, 0xffff5f02, 0x3, 0x401, 0x200, 0x3, 0x9eeb, 0x7, 0x6, 0x5, 0x4, 0xfff, 0x5, 0x1, 0x2, 0xffff0001, 0x7, 0x222, 0x2, 0x3, 0x4]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x20, r3, 0x301, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x29}}}}}, 0x20}}, 0x40) r4 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000007c0)={0x4, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f80)={r5}, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x20, 0x80, 0x6, 0x5, {{0x10, 0x4, 0x3, 0x4, 0x40, 0x64, 0x0, 0x7, 0x29, 0x0, @broadcast, @empty, {[@lsrr={0x83, 0x3, 0xba}, @timestamp_addr={0x44, 0xc, 0xcd, 0x1, 0x9, [{@multicast1, 0x2}]}, @ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0xc, 0xf8, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x4}]}, @generic={0x16, 0xb, "0dc436ab9c3343f594"}]}}}}}) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000280)={0x4, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x1, &(0x7f0000000000)={{0x101, 0x8, 0x10000000, 0x9}}, 0x2, 0x0, 0x9}}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000068000100000000000000000002000027000000000c000880180005000000000008000600000a0000080005"], 0x34}}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=@gettaction={0xc8, 0x32, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6759}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40005}, 0x800) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r7, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x2, 0xff, 0xaed5, 0x9, 0xc90b08e, 0x3, 0x3, 0x4, 0x1ff, 0x80000000, 0x80, 0x80000000, 0x465, 0xad2, 0xe00000, 0x5a91, 0x5, 0xc0160000, 0xe82f, 0x7, 0xa, 0x9, 0x1, 0x6, 0x8]}) 280.99807ms ago: executing program 4 (id=2892): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r2, 0x102, 0x1) getdents64(r2, 0xfffffffffffffffe, 0x4a) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 208.406877ms ago: executing program 5 (id=2893): socket$kcm(0x2, 0x3, 0x106) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) (async) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$cgroup_subtree(r5, 0x0, 0x9) (async) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r5, 0x4068aea3, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtaction={0x118, 0x30, 0x20, 0xf0bd29, 0x25dfdbfb, {}, [{0x104, 0x1, [@m_skbmod={0x100, 0x1a, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x27}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x200, 0x6, 0x1, 0xc, 0x1ff}, 0xa}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xeda}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x1ff, 0x8, 0x274, 0x3}, 0x5}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfff}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x10, 0x20000000, 0x10000, 0xbf82}, 0x1}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xff00}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x4, 0x2, 0xb7, 0x1112}, 0xa}}]}, {0x12, 0x6, "a256064e014d097962cf18162a84"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) (async, rerun: 64) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d", 0x27, 0xfffffffffffffffe) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0xc99, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000280)="0b031260feffffff02005400f6a13bb1000000086086dd480300", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r9}, 0x50) (async, rerun: 64) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000001780)={0x0, @bcast, @bpq0, 0x7, 'syz1\x00', @bcast, 0x1, 0x6, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (rerun: 64) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x548, 0x2b8, 0x3a8, 0x1c0, 0x2b8, 0x0, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'wg0\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {0x0, 0x0, 0x3}, {0x3}, 0x68c7}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x2b8}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xffffffff, 0x7f7fff00, 0xffffffff], [0xff000000, 0xcf16d9bfdc28978c, 0x0, 0xffffffff], 'veth0\x00', 'dvmrp1\x00', {0xff}, {}, 0x2c, 0x0, 0x1, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) 207.337012ms ago: executing program 1 (id=2894): madvise(&(0x7f0000122000/0x4000)=nil, 0x4000, 0x66) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x1000009, 0x75, 0x0, 0x51, 0xa}) 206.859578ms ago: executing program 5 (id=2895): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) (async, rerun: 32) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000340), 0x8) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x732, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40081271, &(0x7f0000000980)=0x4000) (async) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, 0x0) (async) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000240)='\x00\x06\x00 \x00\x00\x00') (async) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 139.490297ms ago: executing program 4 (id=2896): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x2, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xfffffffa}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x6}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x2}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc0000) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x2, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xfffffffa}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x6}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x2}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc0000) 138.508842ms ago: executing program 1 (id=2897): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c40"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x4, 0x2, 0xf}) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="18b6d733"], 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ab00009c4effd68d472c24000000850000007600000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0xa8d4}}, './file0\x00'}) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) r2 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000500)="70ffff0000c8d84cd75d22cedf5084f7d81573deb728667412de36d209c80d81a2973cc2d1d2a4645ba613c6a3fa0fac314ab2ac3583ddeea1266db67a3fb9985aea7a9bd0ccd97b6a1668b4923389bc5d9d64bccf7669fe1706bbb392013e827b8d9cdb4ac67dc8ab6b8d05570eff040ce0060a0412b24e5b4c59239be64d33272f76098921d06f2509d4b4521c18fdccaed8592d73b65ae1c1241bd20288fb88fb9ceb86a1cc6bbb", 0xa9, r2) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r4, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffa) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0906, 0x2, '\x00', @p_u32=&(0x7f00000000c0)}}) dup(r7) r8 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 88.653492ms ago: executing program 4 (id=2898): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x6, r0, 'id0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) 2.01099ms ago: executing program 4 (id=2899): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, r2, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x67, 0xf}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="1100000052000108000000a2eab97053454fef078b11280d7ebbc5d5ebec7f2c23d2b45350ea2240b797faa4598e761d32c4f918d2359b47525bd2da84d2a429cd6996968048778f0bafe1f87b3c489caef588d7f514383f7d339e9530f45eef36dba8857f018d8f8484d393bfd0d1e6aaa93b9279acae51f60e07a29caae20dae8795d4c81547d32bcbd20dc05ef62ba180865a11dc9a37565e667fdba322d6d8867d13e275c86357446b5cd83ff5d249474c90e3ff737e44599310364ef2da91ec120a5fb39e9f67e704dd03e6d716c4d7a9d36291693bf75361daaa9e34932874d8"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40) socket(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, r2, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x67, 0xf}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="1100000052000108000000a2eab97053454fef078b11280d7ebbc5d5ebec7f2c23d2b45350ea2240b797faa4598e761d32c4f918d2359b47525bd2da84d2a429cd6996968048778f0bafe1f87b3c489caef588d7f514383f7d339e9530f45eef36dba8857f018d8f8484d393bfd0d1e6aaa93b9279acae51f60e07a29caae20dae8795d4c81547d32bcbd20dc05ef62ba180865a11dc9a37565e667fdba322d6d8867d13e275c86357446b5cd83ff5d249474c90e3ff737e44599310364ef2da91ec120a5fb39e9f67e704dd03e6d716c4d7a9d36291693bf75361daaa9e34932874d8"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40) (async) 0s ago: executing program 5 (id=2900): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="97eb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d0000fa8c99dc0000010000000000000000000000000000000000000009000000000000000100000003"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}}, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xff10, 0x8000c61) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 'id1\x00'}) sendmsg$802154_dgram(r2, &(0x7f0000000400)={&(0x7f0000000180), 0x14, &(0x7f00000003c0)={&(0x7f00000002c0)="2a221e17b79c4720c4a4fcdfd8667b2bdd67db1b9196495d99df49c313b4e358445afac7889ae734f6994559c03d50f1a793309b4346e5b46b83890714cffab69cf78ea7eaddc64f4dfbd6bba25a7347e7be19d21754ad1b205203828836b017db1f6d4c7212c5b6bb5063882b7442cbdeddecc8338076d9830958b194ada1067e180db7dcd4779eb7ad98ed5e89d59c36842f5c171d80713ea109405313883ccb57214c26a650e9073823e52cc5f680c32fe55faae2f2afe3f3df0b1af158a00926351e2dcaa1f36ed07e06817eda159aae8b9aecfc5c749493f1dfb64b7bb7d57dff3c1915", 0xe6}, 0x1, 0x0, 0x0, 0x40008000}, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d00000000140002800400030004000000080002"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): 4901][T12837] bond0: (slave bond_slave_1): Releasing backup interface [ 219.246238][T12863] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1910'. [ 219.435986][ T59] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 219.438224][ T59] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 219.440433][ T59] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 219.442615][ T59] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 219.446316][ T59] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 219.448987][ T59] mcp2221 0003:04D8:00DD.000D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 219.582060][T12876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.655519][ T10] usb 6-1: USB disconnect, device number 31 [ 219.782837][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1916'. [ 219.786611][T12883] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1916'. [ 219.790730][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1916'. [ 219.793701][T12883] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1916'. [ 220.052427][ T40] audit: type=1400 audit(219.462:791): avc: denied { create } for pid=12889 comm="syz.5.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 220.059097][ T40] audit: type=1400 audit(219.472:792): avc: denied { connect } for pid=12889 comm="syz.5.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 220.066834][ T40] audit: type=1400 audit(219.482:793): avc: denied { write } for pid=12889 comm="syz.5.1919" path="socket:[45994]" dev="sockfs" ino=45994 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 220.122397][T12893] overlayfs: failed to clone upperpath [ 220.190467][T12895] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 220.266840][T12899] binder_alloc: binder_alloc_mmap_handler: 12898 200000ffd000-200001000000 already mapped failed -16 [ 220.268009][T12900] binder: BINDER_SET_CONTEXT_MGR already set [ 220.270171][T12899] binder_alloc: binder_alloc_mmap_handler: 12898 200000ffd000-200001000000 already mapped failed -16 [ 220.273577][T12900] binder: 12898:12900 ioctl 4018620d 200000004a80 returned -16 [ 220.273726][T12900] binder: BINDER_SET_CONTEXT_MGR already set [ 220.277484][T12899] binder_alloc: binder_alloc_mmap_handler: 12898 200000ffd000-200001000000 already mapped failed -16 [ 220.277554][T12899] binder_alloc: binder_alloc_mmap_handler: 12898 200000ffd000-200001000000 already mapped failed -16 [ 220.288404][T12899] binder_alloc: binder_alloc_mmap_handler: 12898 200000ffd000-200001000000 already mapped failed -16 [ 220.291798][T12899] binder_alloc: binder_alloc_mmap_handler: 12898 200000ffd000-200001000000 already mapped failed -16 [ 220.295609][T12899] binder_alloc: binder_alloc_mmap_handler: 12898 200000ffd000-200001000000 already mapped failed -16 [ 220.298850][T12900] binder: 12898:12900 ioctl 4018620d 200000004a80 returned -16 [ 220.299388][T12899] binder_alloc: binder_alloc_mmap_handler: 12898 200000ffd000-200001000000 already mapped failed -16 [ 220.301480][T12900] binder: BINDER_SET_CONTEXT_MGR already set [ 220.305997][T12899] binder_alloc: binder_alloc_mmap_handler: 12898 200000ffd000-200001000000 already mapped failed -16 [ 220.311043][T12899] binder_alloc: binder_alloc_mmap_handler: 12898 200000ffd000-200001000000 already mapped failed -16 [ 220.314820][T12900] binder: 12898:12900 ioctl 4018620d 200000004a80 returned -16 [ 220.327547][T12904] netlink: 1708 bytes leftover after parsing attributes in process `syz.5.1925'. [ 220.364781][T12913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1927'. [ 220.423201][T12922] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 220.455338][T12924] netlink: 'syz.6.1930': attribute type 20 has an invalid length. [ 220.483378][T12926] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 220.516824][T12929] netlink: 'syz.6.1932': attribute type 10 has an invalid length. [ 220.520852][T12929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.525590][T12929] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 220.530161][T12929] netlink: 'syz.6.1932': attribute type 10 has an invalid length. [ 220.532822][T12929] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1932'. [ 220.537604][T12929] batadv0: entered promiscuous mode [ 220.539487][T12929] batadv0: entered allmulticast mode [ 220.549829][T12929] bond0: (slave batadv0): Releasing backup interface [ 220.563804][T12929] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 220.655352][T12866] macvtap0: entered promiscuous mode [ 220.657586][T12866] macvtap0: entered allmulticast mode [ 220.659657][T12866] veth1_vlan: entered allmulticast mode [ 220.856899][T12944] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1938'. [ 220.856949][ T40] audit: type=1400 audit(220.272:794): avc: denied { create } for pid=12951 comm="syz.4.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 220.890350][T12956] usb usb7: usbfs: process 12956 (syz.1.1941) did not claim interface 0 before use [ 220.921778][T12959] netlink: 'syz.1.1942': attribute type 10 has an invalid length. [ 220.924305][T12959] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1942'. [ 221.083545][T12969] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 221.088966][T12969] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 221.092194][T12969] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 221.096069][T12969] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 221.181670][T12977] pim6reg: entered allmulticast mode [ 221.338001][T13001] 9pnet_virtio: no channels available for device syz [ 221.397873][T13005] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 221.410851][T13005] gfs2: not a GFS2 filesystem [ 222.388171][T13014] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1958'. [ 222.393800][T13014] Unknown options in mask b7f2 [ 222.530113][T13018] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 222.582490][T13018] netem: incorrect ge model size [ 222.594396][T13018] netem: change failed [ 222.689392][T13024] overlayfs: invalid origin (0000) [ 222.951571][ T40] audit: type=1804 audit(222.362:795): pid=13028 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1964" name="/newroot/414/file1" dev="tmpfs" ino=2240 res=1 errno=0 [ 223.016509][T13046] loop5: detected capacity change from 0 to 7 [ 223.020572][T13046] Dev loop5: unable to read RDB block 7 [ 223.022337][T13046] loop5: unable to read partition table [ 223.029269][T13046] loop5: partition table beyond EOD, truncated [ 223.034253][T13046] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 223.217644][T13060] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 224.241162][T13084] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1982'. [ 224.292026][ T7972] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.298282][ T7972] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.301869][ T7972] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.351176][ T7972] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.484286][ T1468] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 224.504795][T13094] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 224.509446][T13094] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 224.634308][ T1468] usb 6-1: Using ep0 maxpacket: 16 [ 224.639207][ T1468] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 224.642812][ T1468] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 224.646210][ T1468] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.654307][ T1468] usb 6-1: config 1 interface 0 has no altsetting 0 [ 224.678989][ T1468] usb 6-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 224.682273][ T1468] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.685671][ T1468] usb 6-1: Product: syz [ 224.687072][ T1468] usb 6-1: Manufacturer: syz [ 224.689007][ T1468] usb 6-1: SerialNumber: syz [ 224.778040][T13108] netlink: 'syz.4.1988': attribute type 13 has an invalid length. [ 224.832591][T13108] gretap0: refused to change device tx_queue_len [ 224.840912][T13108] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 224.910939][ T1468] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 225.110653][ T40] audit: type=1400 audit(224.522:796): avc: denied { read write } for pid=13080 comm="syz.1.1981" name="lp0" dev="devtmpfs" ino=3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 225.120933][T13122] netlink: 'syz.4.1993': attribute type 1 has an invalid length. [ 225.121500][ T59] usb 6-1: USB disconnect, device number 32 [ 225.123896][T13122] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1993'. [ 225.132104][ T40] audit: type=1400 audit(224.532:797): avc: denied { open } for pid=13080 comm="syz.1.1981" path="/dev/usb/lp0" dev="devtmpfs" ino=3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 225.142207][ T40] audit: type=1400 audit(224.552:798): avc: denied { write } for pid=13121 comm="syz.4.1993" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 225.454155][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1997'. [ 225.584604][ T59] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 225.733565][T13147] netlink: 'syz.6.2001': attribute type 1 has an invalid length. [ 225.759232][ T59] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 225.762635][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.765727][ T59] usb 6-1: Product: syz [ 225.767376][T13147] 8021q: adding VLAN 0 to HW filter on device bond4 [ 225.770282][ T59] usb 6-1: Manufacturer: syz [ 225.772380][ T59] usb 6-1: SerialNumber: syz [ 225.780870][ T59] usb 6-1: config 0 descriptor?? [ 225.987444][ T1468] usb 6-1: USB disconnect, device number 33 [ 226.841117][T13175] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 227.053023][ T40] audit: type=1400 audit(226.462:799): avc: denied { mounton } for pid=13194 comm="syz.4.2014" path="/436/bus" dev="tmpfs" ino=2364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 227.053129][T13195] gfs2: not a GFS2 filesystem [ 227.190230][ T40] audit: type=1400 audit(226.602:800): avc: denied { append } for pid=13198 comm="syz.4.2015" name="file0" dev="9p" ino=79691909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 227.259877][T13086] usblp0: removed [ 227.327569][T13210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2019'. [ 227.331266][T13210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2019'. [ 227.337788][T13210] __vm_enough_memory: pid: 13210, comm: syz.5.2019, bytes: 4503599627366400 not enough memory for the allocation [ 227.377217][T13212] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2016'. [ 227.379191][T13214] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 227.434315][T13220] binder: 13217:13220 ioctl c018620c 200000000240 returned -22 [ 227.530007][ T40] audit: type=1326 audit(226.942:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13224 comm="syz.1.2024" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064d99c819 code=0x7ffc0000 [ 227.543951][ T40] audit: type=1326 audit(226.952:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13224 comm="syz.1.2024" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f064d99c4ab code=0x7ffc0000 [ 227.560362][ T40] audit: type=1326 audit(226.952:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13224 comm="syz.1.2024" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f064d99c4ab code=0x7ffc0000 [ 227.584003][ T40] audit: type=1326 audit(226.952:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13224 comm="syz.1.2024" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f064d99c4ab code=0x7ffc0000 [ 227.595698][ T40] audit: type=1326 audit(226.952:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13224 comm="syz.1.2024" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f064d99c4ab code=0x7ffc0000 [ 227.603842][ T40] audit: type=1326 audit(226.952:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13224 comm="syz.1.2024" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f064d99c4ab code=0x7ffc0000 [ 227.636925][ T40] audit: type=1326 audit(226.952:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13224 comm="syz.1.2024" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f064d99c4ab code=0x7ffc0000 [ 227.648863][ T40] audit: type=1326 audit(226.952:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13224 comm="syz.1.2024" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f064d99c4ab code=0x7ffc0000 [ 227.806772][T13253] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 227.829642][T13255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2032'. [ 228.043743][T13271] overlayfs: failed to clone upperpath [ 228.324513][T13287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2040'. [ 228.330388][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2041'. [ 228.345171][T13286] hsr_slave_0: left promiscuous mode [ 228.360280][T13286] hsr_slave_1: left promiscuous mode [ 228.392797][T13287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2040'. [ 229.222324][T13363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2043'. [ 229.384766][T13383] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2068'. [ 229.449522][T13390] 9p: Bad value for 'rfdno' [ 229.605605][T13405] netlink: 'syz.1.2073': attribute type 9 has an invalid length. [ 229.608346][T13405] netlink: 'syz.1.2073': attribute type 11 has an invalid length. [ 229.611020][T13405] netlink: 'syz.1.2073': attribute type 12 has an invalid length. [ 229.740855][T13414] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 229.743604][T13414] pim6reg0: linktype set to 778 [ 229.804334][ T53] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 229.964672][ T53] usb 9-1: Using ep0 maxpacket: 8 [ 229.975297][ T53] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 229.981386][ T53] usb 9-1: config 0 has no interface number 0 [ 229.984049][ T53] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 229.994339][ T53] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 229.998367][ T53] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 230.001845][ T53] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 230.013828][ T53] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 230.018077][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.024025][ T53] usb 9-1: config 0 descriptor?? [ 230.029963][ T53] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 230.117906][T13428] overlayfs: failed to clone upperpath [ 230.139436][T13428] 9p: Unknown uid 00000000004294967295 [ 230.349574][T13443] syz_tun: entered allmulticast mode [ 230.353851][T13443] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 230.356860][T13443] mroute: pending queue full, dropping entries [ 230.679021][T13464] __nla_validate_parse: 14 callbacks suppressed [ 230.679043][T13464] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2091'. [ 230.684135][T13464] openvswitch: netlink: Flow key attr not present in new flow. [ 230.729398][T13464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2091'. [ 230.732429][T13464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2091'. [ 230.990136][T13473] netlink: 'syz.5.2093': attribute type 1 has an invalid length. [ 231.023170][T13473] 8021q: adding VLAN 0 to HW filter on device bond6 [ 231.081770][T13473] bond6: (slave veth9): Enslaving as an active interface with a down link [ 231.092992][T13473] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2093'. [ 231.236034][T13477] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2094'. [ 231.312247][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2095'. [ 231.316829][T13479] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2095'. [ 231.329572][T13481] devtmpfs: Unknown parameter 'usrqnި_inode_hardli 6' [ 231.330847][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2095'. [ 231.442046][T13493] overlayfs: failed to clone upperpath [ 231.492219][T13495] netlink: 'syz.5.2100': attribute type 3 has an invalid length. [ 231.542985][T13501] debugfs: '1^!' already exists in 'ieee80211' [ 231.599278][T13497] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2101'. [ 231.616972][T13497] bond5: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 231.626232][T13497] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2101'. [ 231.630329][T13497] bond5: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 231.689448][T13511] binder: 13510:13511 ioctl 5394 200000000180 returned -22 [ 231.693787][T13511] program syz.6.2104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.697510][T13511] ata1.00: non-matching transfer count (32/0) [ 231.796219][T13515] netlink: 'syz.6.2106': attribute type 1 has an invalid length. [ 231.800174][T13515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=13515 comm=syz.6.2106 [ 232.351159][T13540] bridge8: port 1(veth11) entered blocking state [ 232.353998][T13540] bridge8: port 1(veth11) entered disabled state [ 232.356682][T13540] veth11: entered allmulticast mode [ 232.360540][T13540] veth11: entered promiscuous mode [ 232.368286][T13543] veth0_to_bond: left allmulticast mode [ 232.371282][T13543] bridge8: port 2(veth0_to_bond) entered blocking state [ 232.374922][T13543] bridge8: port 2(veth0_to_bond) entered disabled state [ 232.378482][T13543] veth0_to_bond: entered allmulticast mode [ 232.383137][T13543] veth0_to_bond: entered promiscuous mode [ 232.446660][T13545] netlink: 'syz.5.2115': attribute type 1 has an invalid length. [ 232.452208][ T53] usb 9-1: USB disconnect, device number 9 [ 232.462132][ T53] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 232.719723][ T40] kauditd_printk_skb: 57 callbacks suppressed [ 232.719736][ T40] audit: type=1326 audit(232.132:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13560 comm="syz.5.2121" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f4219c819 code=0x0 [ 232.807983][ T59] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 232.823822][T13563] netlink: 'syz.4.2122': attribute type 21 has an invalid length. [ 232.827270][T13563] IPv6: NLM_F_CREATE should be specified when creating new route [ 232.958023][ T59] usb 6-1: device descriptor read/64, error -71 [ 232.977977][T13574] fuse: Bad value for 'user_id' [ 232.980258][T13574] fuse: Bad value for 'user_id' [ 232.995959][T13574] netlink: 'syz.4.2125': attribute type 1 has an invalid length. [ 233.013383][T13577] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 233.070513][T13580] adfs: Unknown parameter 'norecovery' [ 233.159265][ T40] audit: type=1400 audit(232.572:867): avc: denied { read } for pid=13587 comm="syz.4.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 233.205041][ T59] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 233.282549][ T40] audit: type=1400 audit(232.692:868): avc: denied { map } for pid=13594 comm="syz.6.2131" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 233.356138][ T59] usb 6-1: device descriptor read/64, error -71 [ 233.465482][ T59] usb usb6-port1: attempt power cycle [ 233.599341][T13602] fuse: Bad value for 'group_id' [ 233.602892][T13602] fuse: Bad value for 'group_id' [ 233.609654][T13602] xt_hashlimit: max too large, truncated to 1048576 [ 233.651810][T13606] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 233.732283][T13613] 9pnet: Found fid 0 not clunked [ 233.814407][ T59] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 233.845054][ T59] usb 6-1: device descriptor read/8, error -71 [ 233.923591][T13621] batadv_slave_0: entered allmulticast mode [ 233.959518][T13625] netlink: 'syz.6.2141': attribute type 2 has an invalid length. [ 233.970038][T13625] !: entered promiscuous mode [ 234.019878][ T40] audit: type=1400 audit(233.432:869): avc: denied { ioctl } for pid=13631 comm="syz.4.2143" path="socket:[50918]" dev="sockfs" ino=50918 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 234.029750][ T40] audit: type=1400 audit(233.442:870): avc: denied { lock } for pid=13631 comm="syz.4.2143" path="/dev/usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 234.094367][ T59] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 234.120339][ T59] usb 6-1: device descriptor read/8, error -71 [ 234.225527][ T59] usb usb6-port1: unable to enumerate USB device [ 234.388371][ T40] audit: type=1326 audit(233.802:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13649 comm="syz.6.2148" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392999c819 code=0x7ffc0000 [ 234.397750][ T40] audit: type=1326 audit(233.802:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13649 comm="syz.6.2148" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392999c819 code=0x7ffc0000 [ 234.405971][ T40] audit: type=1326 audit(233.802:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13649 comm="syz.6.2148" exe="/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f392999c819 code=0x7ffc0000 [ 234.413776][ T40] audit: type=1326 audit(233.802:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13649 comm="syz.6.2148" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392999c819 code=0x7ffc0000 [ 234.424543][ T40] audit: type=1326 audit(233.802:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13649 comm="syz.6.2148" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392999c819 code=0x7ffc0000 [ 234.900199][T13662] 8021q: VLANs not supported on netdevsim0 [ 235.010792][T13665] netlink: 'syz.4.2153': attribute type 1 has an invalid length. [ 235.030481][T13665] 8021q: adding VLAN 0 to HW filter on device bond9 [ 235.056885][T13665] bond9: (slave veth7): Enslaving as an active interface with a down link [ 235.067680][T13665] bond9: (slave dummy0): making interface the new active one [ 235.074634][T13665] dummy0: entered promiscuous mode [ 235.078332][T13665] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 235.112672][T13665] bond9: (slave dummy0): Releasing active interface [ 235.115891][T13665] dummy0 (unregistering): left promiscuous mode [ 235.402789][T13676] overlayfs: invalid origin (0000) [ 235.867892][T13713] overlayfs: conflicting options: userxattr,metacopy=on [ 236.017062][T13722] syzkaller1: entered promiscuous mode [ 236.019619][T13722] syzkaller1: entered allmulticast mode [ 236.244348][ T10] usb 11-1: new full-speed USB device number 13 using dummy_hcd [ 236.261881][T13726] __nla_validate_parse: 12 callbacks suppressed [ 236.261901][T13726] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2174'. [ 236.417620][ T10] usb 11-1: config 0 has no interfaces? [ 236.428157][ T10] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 236.436065][ T10] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 236.441494][ T10] usb 11-1: Product: syz [ 236.444628][ T10] usb 11-1: Manufacturer: syz [ 236.447017][ T10] usb 11-1: SerialNumber: syz [ 236.455241][ T10] usb 11-1: config 0 descriptor?? [ 236.529009][T13737] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 236.539477][T13737] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 236.541874][T13737] overlayfs: failed to set xattr on upper [ 236.543823][T13737] overlayfs: ...falling back to redirect_dir=nofollow. [ 236.546373][T13737] overlayfs: ...falling back to metacopy=off. [ 236.548348][T13737] overlayfs: ...falling back to index=off. [ 236.550277][T13737] overlayfs: ...falling back to uuid=null. [ 236.567265][ T5290] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 236.572245][ T5290] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 236.685077][ T1468] usb 11-1: USB disconnect, device number 13 [ 236.878040][T13753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2184'. [ 236.883515][T13753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13753 comm=syz.1.2184 [ 236.889992][T13753] netlink: 'syz.1.2184': attribute type 1 has an invalid length. [ 236.914112][T13753] 8021q: adding VLAN 0 to HW filter on device bond8 [ 236.922295][T13753] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2184'. [ 236.957634][T13757] omfs: Invalid superblock (0) [ 236.963588][T13757] GUP no longer grows the stack in syz.1.2185 (13757): 200000004000-20000000a000 (200000002000) [ 236.967521][T13757] CPU: 1 UID: 60929 PID: 13757 Comm: syz.1.2185 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.967542][T13757] Tainted: [L]=SOFTLOCKUP [ 236.967546][T13757] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.967554][T13757] Call Trace: [ 236.967611][T13757] [ 236.967617][T13757] dump_stack_lvl+0x100/0x190 [ 236.968205][T13757] gup_vma_lookup.cold+0x83/0x96 [ 236.968284][T13757] __get_user_pages+0x241/0x34d0 [ 236.968397][T13757] ? find_held_lock+0x2b/0x80 [ 236.968445][T13757] ? mtree_load+0x311/0xa40 [ 236.968704][T13757] ? __pfx___get_user_pages+0x10/0x10 [ 236.968722][T13757] get_user_pages_remote+0x3d2/0xb10 [ 236.968737][T13757] ? mas_new_root+0x690/0x6e0 [ 236.968748][T13757] ? __pfx_get_user_pages_remote+0x10/0x10 [ 236.968763][T13757] ? __access_remote_vm+0x84d/0xa70 [ 236.968785][T13757] __access_remote_vm+0x3ba/0xa70 [ 236.968806][T13757] ? do_raw_spin_lock+0x128/0x260 [ 236.968820][T13757] ? __pfx___access_remote_vm+0x10/0x10 [ 236.968841][T13757] ? alloc_pages_noprof+0x238/0x390 [ 236.968915][T13757] proc_pid_cmdline_read+0x4f2/0x8c0 [ 236.969012][T13757] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 236.969032][T13757] ? rw_verify_area+0xce/0x6d0 [ 236.969055][T13757] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 236.969072][T13757] vfs_readv+0x5d8/0x8d0 [ 236.969094][T13757] ? __pfx_vfs_readv+0x10/0x10 [ 236.969110][T13757] ? sctp_bind+0xbb/0x130 [ 236.969217][T13757] ? __fget_files+0x21f/0x3d0 [ 236.969235][T13757] ? do_preadv+0x1ac/0x270 [ 236.969251][T13757] do_preadv+0x1ac/0x270 [ 236.969270][T13757] ? __pfx_do_preadv+0x10/0x10 [ 236.969292][T13757] do_syscall_64+0x106/0xf80 [ 236.969303][T13757] ? clear_bhb_loop+0x40/0x90 [ 236.969318][T13757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.969329][T13757] RIP: 0033:0x7f064d99c819 [ 236.969341][T13757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.969351][T13757] RSP: 002b:00007f064bbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 236.969391][T13757] RAX: ffffffffffffffda RBX: 00007f064dc15fa0 RCX: 00007f064d99c819 [ 236.969398][T13757] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 236.969406][T13757] RBP: 00007f064da32c91 R08: 00000000fffffff9 R09: 0000000000000000 [ 236.969413][T13757] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 236.969421][T13757] R13: 00007f064dc16038 R14: 00007f064dc15fa0 R15: 00007ffe80e73248 [ 236.969437][T13757] [ 237.093045][T13760] netlink: 'syz.5.2186': attribute type 10 has an invalid length. [ 237.097336][T13760] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2186'. [ 237.119278][T13760] team0: Port device geneve0 added [ 237.180918][T13765] virtiofs: Unknown parameter 'dFx' [ 237.223910][T13768] netlink: 'syz.5.2189': attribute type 12 has an invalid length. [ 237.226944][T13768] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2189'. [ 237.230781][T13768] netlink: 'syz.5.2189': attribute type 12 has an invalid length. [ 237.234078][T13768] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2189'. [ 237.239827][T13768] trusted_key: syz.5.2189 sent an empty control message without MSG_MORE. [ 237.927096][T13804] EXT4-fs (nbd4): unable to read superblock [ 238.002235][T13806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2200'. [ 238.143153][T13812] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2202'. [ 238.270175][T13820] macvtap1: entered promiscuous mode [ 238.272428][T13820] macsec0: entered promiscuous mode [ 238.294774][T13820] macsec0: left promiscuous mode [ 238.385661][ T7957] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 238.400027][T13831] hpfs: Bad magic ... probably not HPFS [ 238.403713][T13831] hpfs: Bad magic ... probably not HPFS [ 238.410352][T13831] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2208'. [ 238.460210][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 238.460224][ T40] audit: type=1400 audit(237.872:899): avc: denied { write } for pid=13832 comm="syz.5.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 238.472134][T13833] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 238.642528][T13845] netlink: 'syz.5.2214': attribute type 13 has an invalid length. [ 238.648057][T13845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13845 comm=syz.5.2214 [ 239.017999][T13860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2219'. [ 239.359751][T13870] kAFS: unable to lookup cell '' [ 239.365424][T13871] kAFS: unable to lookup cell '(,c' [ 239.570411][T13891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13891 comm=syz.4.2227 [ 239.950333][T13899] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13899 comm=syz.5.2231 [ 240.753115][T13910] syzkaller1: entered promiscuous mode [ 240.755754][T13910] syzkaller1: entered allmulticast mode [ 242.410284][T13879] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 242.556863][T13962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 242.585396][T13978] overlayfs: failed to clone upperpath [ 242.600370][T13981] __nla_validate_parse: 2 callbacks suppressed [ 242.600390][T13981] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2244'. [ 242.627774][T13985] Cannot find add_set index 65532 as target [ 242.679152][T13985] netlink: 'syz.5.2246': attribute type 25 has an invalid length. [ 242.681753][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2246'. [ 242.698140][T13985] netlink: 'syz.5.2246': attribute type 25 has an invalid length. [ 242.699545][ T7957] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.701940][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2246'. [ 242.712996][ T7957] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.717587][ T7957] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.726971][ T7957] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.804520][T14003] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio0-cursor) [ 242.816395][T14003] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2251'. [ 242.948356][T14023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2257'. [ 242.967930][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2258'. [ 243.053934][T14039] MINIX-fs: unable to read superblock [ 243.118602][T14042] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 243.121540][T14042] ipt_REJECT: ECHOREPLY no longer supported. [ 243.135606][ T40] audit: type=1400 audit(242.532:900): avc: denied { mounton } for pid=14041 comm="syz.1.2262" path="/552/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 243.204786][T14049] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2265'. [ 243.208079][T14049] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2265'. [ 243.372099][ T40] audit: type=1400 audit(242.782:901): avc: denied { create } for pid=14056 comm="syz.6.2268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 243.389643][T14058] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2267'. [ 243.454821][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2269'. [ 243.576459][T14059] can0: slcan on ttyS3. [ 243.654607][T14056] can0 (unregistered): slcan off ttyS3. [ 243.842432][ T40] audit: type=1400 audit(243.252:902): avc: denied { read } for pid=14092 comm="syz.6.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 243.904485][ T40] audit: type=1400 audit(243.322:903): avc: denied { accept } for pid=14092 comm="syz.6.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 244.331564][T14116] ocfs2: Unknown parameter 'usrquota.cpu/syz1' [ 244.657550][ T40] audit: type=1400 audit(2000000000.249:904): avc: denied { write } for pid=14125 comm="syz.5.2290" name="file0" dev="tmpfs" ino=2934 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 244.665178][ T40] audit: type=1400 audit(2000000000.249:905): avc: denied { open } for pid=14125 comm="syz.5.2290" path="/551/file0" dev="tmpfs" ino=2934 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 244.707800][ T40] audit: type=1400 audit(2000000000.299:906): avc: denied { module_load } for pid=14132 comm="syz.6.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 244.715964][T14133] Invalid ELF header type: 0 != 1 [ 244.918371][ T40] audit: type=1400 audit(2000000000.509:907): avc: denied { cmd } for pid=14143 comm="syz.5.2295" path="socket:[54528]" dev="sockfs" ino=54528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 244.968570][T14147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.974473][T14147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.977669][T14147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.980938][T14147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.985158][T14147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.988248][T14147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.991413][T14147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.995325][T14147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.999335][T14147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.003518][T14147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.075688][T14156] netlink: 'syz.6.2297': attribute type 2 has an invalid length. [ 245.139549][T14165] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 245.193465][T14172] overlayfs: failed to clone upperpath [ 245.204039][T14172] overlayfs: failed to resolve './file1': -2 [ 245.226961][T14179] sctp: [Deprecated]: syz.6.2306 (pid 14179) Use of int in maxseg socket option. [ 245.226961][T14179] Use struct sctp_assoc_value instead [ 245.319898][T14192] netlink: 'syz.4.2310': attribute type 4 has an invalid length. [ 245.442995][T14199] program syz.4.2312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.455395][T14199] fuse: Invalid rootmode [ 245.458097][T14199] syz.4.2312: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 245.622674][T14223] pim6reg: entered allmulticast mode [ 245.651287][ T40] audit: type=1400 audit(2000000001.239:908): avc: denied { create } for pid=14226 comm="syz.6.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 245.657923][ T40] audit: type=1400 audit(2000000001.239:909): avc: denied { listen } for pid=14222 comm="syz.1.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 245.664707][ T40] audit: type=1400 audit(2000000001.249:910): avc: denied { write } for pid=14226 comm="syz.6.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 245.708237][ T40] audit: type=1400 audit(2000000001.289:911): avc: denied { accept } for pid=14222 comm="syz.1.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 245.930010][ T5290] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 245.970602][T14247] 8021q: adding VLAN 0 to HW filter on device bond9 [ 246.003829][T14250] netlink: 'syz.4.2327': attribute type 1 has an invalid length. [ 246.006373][T14250] netlink: 'syz.4.2327': attribute type 4 has an invalid length. [ 246.439374][T14219] ceph: No mds server is up or the cluster is laggy [ 247.638878][T14329] ref_ctr_offset mismatch. inode: 0xbec offset: 0x0 ref_ctr_offset(old): 0x16 ref_ctr_offset(new): 0x0 [ 247.679662][T14329] netlink: 'syz.5.2352': attribute type 8 has an invalid length. [ 247.852424][T14345] syz_tun: left allmulticast mode [ 247.870254][T14342] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 247.951160][T14349] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 248.252992][T14363] bad cache= option: noneage_sys [ 248.252992][T14363] [ 248.255709][T14363] CIFS: VFS: bad cache= option: noneage_sys [ 248.353392][T14368] netlink: 'syz.1.2365': attribute type 1 has an invalid length. [ 248.369054][T14368] 8021q: adding VLAN 0 to HW filter on device bond10 [ 248.632560][T14382] xt_hashlimit: size too large, truncated to 1048576 [ 248.721168][T14388] __nla_validate_parse: 8 callbacks suppressed [ 248.721189][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2368'. [ 248.787795][T14392] netlink: 'syz.4.2370': attribute type 13 has an invalid length. [ 248.857840][T14392] netlink: 'syz.4.2370': attribute type 2 has an invalid length. [ 248.863219][T14392] netlink: 'syz.4.2370': attribute type 13 has an invalid length. [ 248.960706][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2372'. [ 249.012423][T14405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2374'. [ 249.061741][T14407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2376'. [ 249.066469][T14407] bridge_slave_1: left allmulticast mode [ 249.068396][T14407] bridge_slave_1: left promiscuous mode [ 249.070412][T14407] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.081180][T14407] bridge_slave_0: left allmulticast mode [ 249.083359][T14407] bridge_slave_0: left promiscuous mode [ 249.086018][T14407] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.210118][T14408] netlink: 71 bytes leftover after parsing attributes in process `syz.4.2376'. [ 249.493825][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 249.493843][ T40] audit: type=1400 audit(2000000005.079:914): avc: denied { create } for pid=14439 comm="syz.5.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 249.778112][T14476] rdma_op ffff88805afe51f0 conn xmit_rdma 0000000000000000 [ 250.110712][ T40] audit: type=1400 audit(2000524293.694:915): avc: denied { ioctl } for pid=14511 comm="syz.1.2408" path="socket:[54097]" dev="sockfs" ino=54097 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 250.131509][ T40] audit: type=1400 audit(2000524293.714:916): avc: denied { setopt } for pid=14511 comm="syz.1.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 250.274181][T14519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2410'. [ 250.277890][T14519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2410'. [ 250.289789][T14519] netlink: 'syz.1.2410': attribute type 1 has an invalid length. [ 250.347595][T14520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2410'. [ 250.350629][T14520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2410'. [ 250.354209][T14520] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2410'. [ 250.683170][ T40] audit: type=1400 audit(2000524294.256:917): avc: denied { getopt } for pid=14521 comm="syz.4.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 250.839024][T14530] netlink: 'syz.4.2414': attribute type 1 has an invalid length. [ 250.891505][ T5937] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 250.895621][ T5937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 250.899306][ T5937] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 250.903426][ T5937] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 250.905970][ T5937] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 251.103271][T14531] chnl_net:caif_netlink_parms(): no params data found [ 251.266250][T14554] netlink: 'syz.1.2419': attribute type 1 has an invalid length. [ 251.352861][T14554] 8021q: adding VLAN 0 to HW filter on device bond11 [ 251.360865][T14555] bond11: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 251.419371][T14555] bond11: entered allmulticast mode [ 251.595577][ T7975] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.599481][ T7975] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.651218][T14564] syzkaller0: entered promiscuous mode [ 251.653388][T14564] syzkaller0: entered allmulticast mode [ 251.662455][T14531] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.666118][T14531] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.669500][T14531] bridge_slave_0: entered allmulticast mode [ 251.674026][T14531] bridge_slave_0: entered promiscuous mode [ 252.134396][ T40] audit: type=1400 audit(2000524295.671:918): avc: denied { mounton } for pid=14571 comm="syz.1.2424" path="/bus" dev="bpf" ino=54256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 252.141239][T14572] overlayfs: upper fs does not support tmpfile. [ 253.005316][ T5290] Bluetooth: hci4: command tx timeout [ 254.876322][T14531] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.879339][T14531] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.882614][T14531] bridge_slave_1: entered allmulticast mode [ 254.886439][T14531] bridge_slave_1: entered promiscuous mode [ 254.952888][ T7975] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.964637][ T7975] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.971320][T14579] netlink: 'syz.1.2426': attribute type 1 has an invalid length. [ 254.975331][T14579] netlink: 'syz.1.2426': attribute type 1 has an invalid length. [ 254.978349][T14579] __nla_validate_parse: 4 callbacks suppressed [ 254.978360][T14579] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.2426'. [ 254.988548][T14579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2426'. [ 255.014231][T14531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.025619][T14531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.110306][ T7975] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.114994][ T7975] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.138779][ T5290] Bluetooth: hci4: command tx timeout [ 255.171525][T14531] team0: Port device team_slave_0 added [ 255.216151][ T7975] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.224398][ T7975] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.243919][T14531] team0: Port device team_slave_1 added [ 255.322833][T14531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.325793][T14531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.334408][T14531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.339062][T14531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.341678][T14531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.350382][T14531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.402521][T14531] hsr_slave_0: entered promiscuous mode [ 255.404640][ T40] audit: type=1400 audit(2000524298.844:919): avc: denied { accept } for pid=14592 comm="syz.1.2431" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 255.404840][T14531] hsr_slave_1: entered promiscuous mode [ 255.450457][T14598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2432'. [ 255.504858][ T7975] veth0_to_bond: left allmulticast mode [ 255.506759][ T7975] veth0_to_bond: left promiscuous mode [ 255.509879][ T7975] bridge8: port 2(veth0_to_bond) entered disabled state [ 255.531642][ T7975] veth11: left allmulticast mode [ 255.533477][ T7975] veth11: left promiscuous mode [ 255.535238][ T7975] bridge8: port 1(veth11) entered disabled state [ 255.610360][T14606] netlink: 'syz.4.2434': attribute type 1 has an invalid length. [ 255.613216][T14606] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2434'. [ 255.642027][T14609] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 255.642027][T14609] program syz.4.2435 not setting count and/or reply_len properly [ 255.721102][T14610] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2435'. [ 255.756856][ T7975] bond5 (unregistering): (slave ip6gre1): Releasing backup interface [ 255.923985][ T7975] team0: Port device geneve0 removed [ 257.137467][ T7975] bond1 (unregistering): (slave .`): Releasing active interface [ 257.145704][ T7975] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.164683][ T7975] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.172119][ T7975] .` (unregistering): Released all slaves [ 257.176840][ T7975] bond1 (unregistering): Released all slaves [ 257.197422][ T7975] bond0 (unregistering): Released all slaves [ 257.204098][ T7975] bond2 (unregistering): Released all slaves [ 257.212632][ T7975] bond3 (unregistering): Released all slaves [ 257.221632][ T7975] bond4 (unregistering): Released all slaves [ 257.230546][ T7975] bond5 (unregistering): Released all slaves [ 257.250398][ T7975] bond6 (unregistering): (slave veth9): Releasing active interface [ 257.262604][ T7975] bond6 (unregistering): Released all slaves [ 257.267829][ T5290] Bluetooth: hci4: command tx timeout [ 257.418188][ T7975] tipc: Left network mode [ 257.488776][T14628] netlink: 512 bytes leftover after parsing attributes in process `syz.1.2438'. [ 257.547309][T14633] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2439'. [ 257.581685][T14636] netlink: 'syz.1.2440': attribute type 1 has an invalid length. [ 257.681841][ T7975] IPVS: stopping master sync thread 9590 ... [ 257.690118][ T7975] IPVS: stopping master sync thread 9589 ... [ 257.706530][ T7975] IPVS: stopping master sync thread 9587 ... [ 257.709273][ T7975] IPVS: stopping master sync thread 9586 ... [ 258.497476][T14531] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 258.516121][T14531] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 258.531604][T14531] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 258.555044][T14531] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 258.601953][T14677] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 258.610463][T14677] block device autoloading is deprecated and will be removed. [ 258.633439][T14675] veth1_to_bond: left allmulticast mode [ 258.729310][T14531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.745641][T14531] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.753283][ T7957] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.755940][ T7957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.783585][ T7957] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.786231][ T7957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.876076][T14691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2451'. [ 259.141770][T14706] netlink: 'syz.1.2455': attribute type 10 has an invalid length. [ 259.200567][T14708] Cannot find add_set index 65532 as target [ 259.217453][T14706] syz_tun: left allmulticast mode [ 259.223049][T14706] syz_tun: entered allmulticast mode [ 259.225893][T14706] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 259.243262][T14531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.278988][ T5290] Bluetooth: hci2: unexpected event for opcode 0x2024 [ 259.298501][ T7975] hsr_slave_0: left promiscuous mode [ 259.301845][ T7975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.306538][ T7975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.310864][ T7975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.316964][ T7975] veth1_macvtap: left allmulticast mode [ 259.320309][ T7975] veth1_macvtap: left promiscuous mode [ 259.323132][ T7975] veth1_vlan: left allmulticast mode [ 259.325716][ T7975] veth1_vlan: left promiscuous mode [ 259.410840][ T5290] Bluetooth: hci4: command tx timeout [ 259.445129][ T7975] team0 (unregistering): Port device macvlan0 removed [ 259.511968][ T7975] team0 (unregistering): Port device team_slave_1 removed [ 259.532652][ T7975] team0 (unregistering): Port device team_slave_0 removed [ 259.818225][T14531] veth0_vlan: entered promiscuous mode [ 259.823042][T14729] net_ratelimit: 25 callbacks suppressed [ 259.823064][T14729] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 259.826181][T14531] veth1_vlan: entered promiscuous mode [ 259.855309][T14531] veth0_macvtap: entered promiscuous mode [ 259.864249][T14531] veth1_macvtap: entered promiscuous mode [ 259.873951][T14531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.881603][T14531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.889170][ T7957] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.895070][ T7957] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.900821][ T7957] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.911151][ T7957] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.007348][ T7957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.010921][ T7957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.039036][ T7957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.041987][ T7957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.047509][ T7975] IPVS: stop unused estimator thread 0... [ 260.065180][ T40] audit: type=1400 audit(2000524303.416:920): avc: denied { mounton } for pid=14531 comm="syz-executor" path="/syzkaller.WGBqub/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=56544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 260.250150][ T5937] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.251408][ T5937] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.254239][ T5937] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.255340][ T5937] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.256793][ T5937] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 260.421986][T11024] bond0: (slave syz_tun): Releasing backup interface [ 260.423716][T11024] syz_tun (unregistering): left allmulticast mode [ 260.436555][T14745] chnl_net:caif_netlink_parms(): no params data found [ 260.517277][T14745] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.517363][T14745] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.517535][T14745] bridge_slave_0: entered allmulticast mode [ 260.519237][T14745] bridge_slave_0: entered promiscuous mode [ 260.523166][T14745] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.523278][T14745] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.523392][T14745] bridge_slave_1: entered allmulticast mode [ 260.525039][T14745] bridge_slave_1: entered promiscuous mode [ 260.558457][T14745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.570099][T14745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.595002][T14745] team0: Port device team_slave_0 added [ 260.599661][T14745] team0: Port device team_slave_1 added [ 260.624505][T14745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.624526][T14745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.624549][T14745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.626233][T14745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.646607][T14745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.646638][T14745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.679427][T14745] hsr_slave_0: entered promiscuous mode [ 260.680360][T14745] hsr_slave_1: entered promiscuous mode [ 260.684818][T14745] debugfs: 'hsr0' already exists in 'hsr' [ 260.684841][T14745] Cannot create hsr debugfs directory [ 260.821739][T14745] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 260.897222][T14745] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 260.973101][T14745] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 261.045548][T14745] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 261.220560][T14745] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 261.228107][T14745] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 261.238435][T14745] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 261.244605][T14745] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 261.280771][T14773] sctp: [Deprecated]: syz.5.2468 (pid 14773) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.280771][T14773] Use struct sctp_sack_info instead [ 261.289644][T14773] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2468'. [ 261.308394][T14745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.323248][T14745] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.331382][ T7960] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.334163][ T7960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.342823][ T7972] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.345695][ T7972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.488249][T14745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.515921][T14745] veth0_vlan: entered promiscuous mode [ 261.521360][T14745] veth1_vlan: entered promiscuous mode [ 261.537334][T14745] veth0_macvtap: entered promiscuous mode [ 261.541720][T14745] veth1_macvtap: entered promiscuous mode [ 261.554161][T14745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.561807][T14745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.570735][ T94] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.574556][ T94] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.579457][ T94] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.583159][ T94] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.640977][ T7975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.643518][ T7975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.671742][ T7972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.674529][ T7972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.331323][ T5937] Bluetooth: hci3: command tx timeout [ 262.664908][T14798] pim6reg: entered allmulticast mode [ 262.701477][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2475'. [ 262.706462][T14803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2475'. [ 262.729750][T14804] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 263.090572][T14809] program syz.1.2477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.098014][T14809] xt_l2tp: unknown flags: 51 [ 263.232176][T14812] sp0: Synchronizing with TNC [ 263.270814][ T5290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 263.276955][ T5290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 263.280422][ T5290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 263.284206][ T5290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 263.287239][ T5290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 263.358840][ T40] audit: type=1400 audit(2000524306.662:921): avc: denied { read append } for pid=14815 comm="syz.5.2480" name="usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 263.366627][ T40] audit: type=1400 audit(2000524306.662:922): avc: denied { open } for pid=14815 comm="syz.5.2480" path="/dev/usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 263.388014][ T40] audit: type=1400 audit(2000524306.672:923): avc: denied { ioctl } for pid=14815 comm="syz.5.2480" path="/dev/usbmon3" dev="devtmpfs" ino=746 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 263.435166][T14824] netlink: 'syz.5.2481': attribute type 1 has an invalid length. [ 263.439257][T14824] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2481'. [ 263.443238][T14824] netlink: 658 bytes leftover after parsing attributes in process `syz.5.2481'. [ 263.445688][T14813] chnl_net:caif_netlink_parms(): no params data found [ 263.447061][T14824] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2481'. [ 263.480590][ T40] audit: type=1400 audit(2000524306.780:924): avc: denied { map } for pid=14823 comm="syz.5.2481" path="socket:[59136]" dev="sockfs" ino=59136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 263.523785][T14830] netlink: 188196 bytes leftover after parsing attributes in process `syz.4.2482'. [ 263.547631][T14813] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.551962][T14813] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.555146][T14813] bridge_slave_0: entered allmulticast mode [ 263.558968][T14813] bridge_slave_0: entered promiscuous mode [ 263.565798][T14813] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.568881][T14813] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.572311][T14813] bridge_slave_1: entered allmulticast mode [ 263.576124][T14813] bridge_slave_1: entered promiscuous mode [ 263.593600][T14813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.598685][T14813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.616130][T14813] team0: Port device team_slave_0 added [ 263.620242][T14813] team0: Port device team_slave_1 added [ 263.636134][T14813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.638562][T14813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.647435][T14813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.653135][T14813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.656073][T14813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.667334][T14813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.699373][T14813] hsr_slave_0: entered promiscuous mode [ 263.701751][T14813] hsr_slave_1: entered promiscuous mode [ 263.705597][T14813] debugfs: 'hsr0' already exists in 'hsr' [ 263.707636][T14813] Cannot create hsr debugfs directory [ 263.818370][T14813] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 263.827445][T14813] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 263.838235][T14813] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 263.845357][T14813] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 263.876025][T14813] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.878865][T14813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.881888][T14813] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.884786][T14813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.940424][T14813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.958625][T14813] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.964017][ T7972] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.969099][ T7972] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.981392][ T7975] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.984451][ T7975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.987595][T14843] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 264.001846][ T7960] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.005327][ T7960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.145317][ T40] audit: type=1400 audit(2000524307.431:925): avc: denied { setopt } for pid=14855 comm="syz.5.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 264.188397][T14813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.303693][T14859] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 264.306676][T14859] overlayfs: missing 'lowerdir' [ 264.372614][ T40] audit: type=1400 audit(2000524307.658:926): avc: denied { create } for pid=14870 comm="syz.4.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 264.389064][ T40] audit: type=1400 audit(2000524307.667:927): avc: denied { getopt } for pid=14870 comm="syz.4.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 264.399768][ T40] audit: type=1400 audit(2000524307.667:928): avc: denied { shutdown } for pid=14870 comm="syz.4.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 264.410602][T14813] veth0_vlan: entered promiscuous mode [ 264.433205][ T5937] Bluetooth: hci3: command tx timeout [ 264.440527][T14813] veth1_vlan: entered promiscuous mode [ 264.492163][T14813] veth0_macvtap: entered promiscuous mode [ 264.497081][T14813] veth1_macvtap: entered promiscuous mode [ 264.507537][T14813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.517060][T14813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.525919][ T94] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.531114][ T94] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.543355][ T94] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.548953][ T94] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.578714][T14887] loop9: detected capacity change from 0 to 7 [ 264.618241][T14889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2497'. [ 264.627797][T14887] Dev loop9: unable to read RDB block 7 [ 264.634689][T14887] loop9: unable to read partition table [ 264.645178][T14887] loop9: partition table beyond EOD, truncated [ 264.647721][T14887] loop_reread_partitions: partition scan of loop9 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 264.663772][T14894] fuse: Bad value for 'user_id' [ 264.665441][T14894] fuse: Bad value for 'user_id' [ 264.676935][ T7960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.681002][ T7960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.733221][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.737561][T14896] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2497'. [ 264.738210][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.864191][T14908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2503'. [ 264.872880][T14908] bridge0: port 3(macvlan2) entered blocking state [ 264.875150][T14908] bridge0: port 3(macvlan2) entered disabled state [ 264.877552][T14908] macvlan2: entered allmulticast mode [ 264.883033][T14908] macvlan2: left allmulticast mode [ 264.890741][T14907] random: crng reseeded on system resumption [ 265.182277][ T1468] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 265.344413][ T1468] usb 9-1: Using ep0 maxpacket: 8 [ 265.347673][ T1468] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 265.351344][ T1468] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 265.357421][ T1468] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.362566][ T1468] usb 9-1: config 0 descriptor?? [ 265.402662][T14922] netlink: 'syz.5.2507': attribute type 20 has an invalid length. [ 265.415386][ T5937] Bluetooth: hci2: command tx timeout [ 265.418754][ T7972] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.419085][T14922] netlink: 'syz.5.2507': attribute type 20 has an invalid length. [ 265.422864][ T7972] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.428884][ T7972] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.436094][ T7972] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.489379][ T40] audit: type=1400 audit(2000524308.762:929): avc: denied { setattr } for pid=14923 comm="syz.5.2508" name="" dev="pipefs" ino=57316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 265.573429][ T1468] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 265.622591][T14931] netlink: 'syz.1.2511': attribute type 1 has an invalid length. [ 265.718855][T14931] bond_slave_0: entered promiscuous mode [ 265.721459][T14931] bond_slave_0: entered allmulticast mode [ 265.769280][T14934] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 265.864386][T14940] netlink: 'syz.1.2514': attribute type 11 has an invalid length. [ 266.036329][ T40] audit: type=1400 audit(2000524309.296:930): avc: denied { remount } for pid=14935 comm="syz.7.2512" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 266.117909][T14954] tipc: Started in network mode [ 266.120348][T14954] tipc: Node identity , cluster identity 4711 [ 266.122928][T14954] tipc: Failed to set node id, please configure manually [ 266.125909][T14954] tipc: Enabling of bearer rejected, failed to enable media [ 266.357800][ T7960] Bluetooth: (null): Invalid header checksum [ 266.402943][ T5937] block nbd1: Receive control failed (result -32) [ 266.412851][T14973] block nbd1: shutting down sockets [ 266.539538][ T5937] Bluetooth: hci3: command tx timeout [ 266.875384][T14735] usb 9-1: USB disconnect, device number 10 [ 267.043416][T15016] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46 sclass=netlink_xfrm_socket pid=15016 comm=syz.7.2533 [ 267.051032][T15016] __nla_validate_parse: 10 callbacks suppressed [ 267.051044][T15016] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2533'. [ 267.245437][T15030] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2538'. [ 267.248801][T15027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2537'. [ 267.251589][T15027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2537'. [ 267.254713][T15027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2537'. [ 267.500829][ T6948] usb 12-1: new full-speed USB device number 2 using dummy_hcd [ 267.521431][ T5937] Bluetooth: hci2: command tx timeout [ 267.559926][T15049] netlink: 868 bytes leftover after parsing attributes in process `syz.4.2543'. [ 267.613276][T15051] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2544'. [ 267.616435][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2544'. [ 267.655257][ T6948] usb 12-1: not running at top speed; connect to a high speed hub [ 267.659559][ T6948] usb 12-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 267.667145][ T6948] usb 12-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 267.670887][ T6948] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.675332][ T6948] usb 12-1: Product: syz [ 267.677093][ T6948] usb 12-1: Manufacturer: syz [ 267.679001][ T6948] usb 12-1: SerialNumber: syz [ 267.899946][ T6948] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 267.902634][ T6948] usb 12-1: MIDIStreaming interface descriptor not found [ 267.929744][ T6948] usb 12-1: USB disconnect, device number 2 [ 267.943615][ T9938] udevd[9938]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb12/12-1/12-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.106054][T15057] nbd: must specify a device to reconfigure [ 268.357806][T15069] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 268.362128][T15069] bond1 (unregistering): Released all slaves [ 268.486134][T15074] netlink: 'syz.7.2550': attribute type 10 has an invalid length. [ 268.489927][T15074] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2550'. [ 268.503987][T15077] tmpfs: Bad value for 'mpol' [ 268.653701][ T5937] Bluetooth: hci3: command tx timeout [ 268.721787][T15102] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2560'. [ 268.730313][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 268.730327][ T40] audit: type=1400 audit(2000524311.954:934): avc: denied { read } for pid=15087 comm="syz.1.2556" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 268.741271][ T40] audit: type=1400 audit(2000524311.954:935): avc: denied { open } for pid=15087 comm="syz.1.2556" path="/23/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 268.931857][T15121] qnx4: unable to read the superblock [ 268.931948][T15122] netlink: 'syz.1.2567': attribute type 12 has an invalid length. [ 268.942804][ T7975] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.945838][ T7975] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.946852][T15122] netlink: 'syz.1.2567': attribute type 12 has an invalid length. [ 268.957815][ T7975] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.960895][ T7975] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.968247][ T40] audit: type=1400 audit(2000524312.202:936): avc: denied { setattr } for pid=15126 comm="syz.7.2569" path="socket:[60661]" dev="sockfs" ino=60661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 269.047337][ T40] audit: type=1400 audit(2000524312.271:937): avc: denied { write } for pid=15133 comm="syz.7.2572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 269.128632][T14735] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 269.214308][ T40] audit: type=1400 audit(2000524312.439:938): avc: denied { node_bind } for pid=15147 comm="syz.7.2577" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 269.274443][ T40] audit: type=1400 audit(2000524312.499:939): avc: denied { write } for pid=15151 comm="syz.5.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 269.285989][ T40] audit: type=1400 audit(2000524312.509:940): avc: denied { ioctl } for pid=15151 comm="syz.5.2578" path="socket:[60081]" dev="sockfs" ino=60081 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 269.302277][T14735] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 269.306011][T14735] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.309140][T14735] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.314953][T14735] usb 9-1: config 0 interface 0 has no altsetting 0 [ 269.318565][T14735] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.321810][T14735] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.325366][T14735] usb 9-1: config 0 interface 0 has no altsetting 0 [ 269.328682][T14735] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.332377][T14735] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.336375][T14735] usb 9-1: config 0 interface 0 has no altsetting 0 [ 269.339549][T14735] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.342733][T14735] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.346804][T14735] usb 9-1: config 0 interface 0 has no altsetting 0 [ 269.350633][T14735] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.354213][T14735] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.358146][T14735] usb 9-1: config 0 interface 0 has no altsetting 0 [ 269.361992][T14735] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.364977][T14735] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.368767][T14735] usb 9-1: config 0 interface 0 has no altsetting 0 [ 269.373900][T14735] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.377160][T14735] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.381009][T14735] usb 9-1: config 0 interface 0 has no altsetting 0 [ 269.384593][T14735] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.387738][T14735] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.391828][T14735] usb 9-1: config 0 interface 0 has no altsetting 0 [ 269.397479][T14735] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 269.402703][T14735] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 269.406556][T14735] usb 9-1: Product: syz [ 269.408121][T14735] usb 9-1: Manufacturer: syz [ 269.409747][T14735] usb 9-1: SerialNumber: syz [ 269.419278][T14735] usb 9-1: config 0 descriptor?? [ 269.426785][T14735] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 269.432343][T15161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.613930][ T5937] Bluetooth: hci2: command tx timeout [ 269.665534][T15180] ref_ctr increment failed for inode: 0xdc offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88805bc24980 [ 269.741331][ C0] usb 9-1: yurex_control_callback - control failed: -71 [ 269.741487][ T5362] usb 9-1: USB disconnect, device number 11 [ 269.743349][T15184] NILFS (nbd1): device size too small [ 269.744708][T15181] yurex 9-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 269.746321][T15184] "syz.1.2589" (15184) uses obsolete ecb(arc4) skcipher [ 269.747670][ T5362] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 269.990381][T15197] misc userio: No port type given on /dev/userio [ 270.082789][T15206] ceph: No source [ 270.134098][T15212] veth1_macvtap: left promiscuous mode [ 270.135922][T15212] macsec0: entered allmulticast mode [ 270.141577][T15212] veth1_macvtap: entered promiscuous mode [ 270.143723][T15212] veth1_macvtap: entered allmulticast mode [ 270.147325][T15212] macsec0: left allmulticast mode [ 270.151202][T15212] veth1_macvtap: left allmulticast mode [ 270.187252][T15216] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 270.223782][T15220] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 270.266215][T15222] x_tables: duplicate underflow at hook 2 [ 270.361635][T15237] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 270.376137][T15232] 9p: Could not find request transport: virtmo [ 270.433819][T15240] cgroup: No subsys list or none specified [ 270.672434][T15252] vivid-004: ================= START STATUS ================= [ 270.676379][T15252] vivid-004: ================== END STATUS ================== [ 270.676855][T15255] xt_policy: too many policy elements [ 270.912430][T15279] netlink: 'syz.7.2620': attribute type 10 has an invalid length. [ 270.999733][T15288] syz_tun: entered allmulticast mode [ 271.003651][T15288] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 271.007244][T15288] mroute: pending queue full, dropping entries [ 271.026441][T15287] syz_tun: left allmulticast mode [ 271.233090][ T40] audit: type=1400 audit(2000524314.440:941): avc: denied { read append } for pid=15302 comm="syz.1.2628" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 271.242525][ T40] audit: type=1400 audit(2000524314.440:942): avc: denied { open } for pid=15302 comm="syz.1.2628" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 271.250957][ T40] audit: type=1400 audit(2000524314.450:943): avc: denied { map } for pid=15302 comm="syz.1.2628" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 271.264738][T15303] binder_alloc: 15302: binder_alloc_buf, no vma [ 271.458904][ T5290] Bluetooth: hci5: sending frame failed (-49) [ 271.464840][ T5937] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 271.563987][T15320] 8021q: VLANs not supported on pim6reg [ 271.616377][T15327] XFS (nullb0): Invalid superblock magic number [ 271.713592][ T5937] Bluetooth: hci2: command tx timeout [ 290.581403][T15346] __nla_validate_parse: 13 callbacks suppressed [ 290.581416][T15346] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2636'. [ 290.599258][T15350] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2638'. [ 290.604298][T15350] netlink: 7 bytes leftover after parsing attributes in process `syz.7.2638'. [ 290.625068][T15356] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 290.640367][T15356] romfs: unable to set blocksize [ 290.640367][T15356] [ 290.651599][T15346] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 290.654391][T15346] team0: Device ipvlan2 is already an upper device of the team interface [ 290.669673][T15360] serio: Serial port ptm0 [ 290.731087][T15366] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2639'. [ 290.733956][T15366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2639'. [ 290.875026][T15380] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 290.983336][T15389] "syz.5.2648" (15389) uses obsolete ecb(arc4) skcipher [ 291.028724][T15396] MTD: Couldn't look up './cgroup': -15 [ 291.030607][T15396] ./cgroup: Can't lookup blockdev [ 291.286181][T15402] delete_channel: no stack [ 291.477173][ T5985] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 291.637664][ T5985] usb 12-1: Using ep0 maxpacket: 32 [ 291.641514][ T5985] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.645113][ T5985] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.650314][ T5985] usb 12-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 291.653200][ T5985] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.668216][ T5985] usb 12-1: config 0 descriptor?? [ 291.864821][T15443] overlayfs: failed to resolve './file1': -2 [ 291.873509][T15419] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 291.993803][T15461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2670'. [ 292.034212][T15466] binder: 15465:15466 ioctl c018620c 200000000240 returned -22 [ 292.100519][T15470] netlink: 'syz.5.2669': attribute type 3 has an invalid length. [ 292.102549][ T5985] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 292.144194][T15474] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2673'. [ 292.181545][T15474] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15474 comm=syz.5.2673 [ 292.226621][T15477] [syz.5.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 292.271067][T15479] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 292.357709][T15419] netlink: 'syz.7.2656': attribute type 5 has an invalid length. [ 292.369389][ T5985] usb 12-1: USB disconnect, device number 3 [ 292.388049][T15485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2677'. [ 292.393172][T15486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2677'. [ 292.397273][T15486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2677'. [ 292.467753][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 292.467766][ T40] audit: type=1400 audit(2000524335.559:947): avc: denied { ioctl } for pid=15491 comm="syz.1.2679" path="socket:[63489]" dev="sockfs" ino=63489 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 292.743770][ T40] audit: type=1400 audit(2000524335.838:948): avc: denied { listen } for pid=15513 comm="syz.5.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 292.750219][ T40] audit: type=1400 audit(2000524335.838:949): avc: denied { accept } for pid=15513 comm="syz.5.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 292.908177][ T40] audit: type=1400 audit(2000524335.998:950): avc: denied { watch_sb } for pid=15529 comm="syz.7.2688" path="/41" dev="tmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 292.910777][T15532] overlayfs: workdir and upperdir must be separate subtrees [ 292.965237][T15534] netlink: 'syz.7.2690': attribute type 1 has an invalid length. [ 292.984991][T15534] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.997944][T15534] fuse: Unknown parameter '017777777777777777777770x0000000000000004' [ 293.051537][ T140] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 293.179450][T15545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.187679][T15545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.194772][T15545] bond0 (unregistering): Released all slaves [ 293.203900][ T140] usb 10-1: Using ep0 maxpacket: 32 [ 293.207522][ T140] usb 10-1: config 0 has no interfaces? [ 293.211092][ T140] usb 10-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 293.214941][ T140] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.217521][ T140] usb 10-1: Product: syz [ 293.218996][ T140] usb 10-1: Manufacturer: syz [ 293.220514][ T140] usb 10-1: SerialNumber: syz [ 293.224135][ T140] usb 10-1: config 0 descriptor?? [ 293.310913][T15548] cgroup: Unknown subsys name 'cpuset' [ 293.420813][ T140] libceph: connect (1)[c::]:6789 error -101 [ 293.423590][ T140] libceph: mon0 (1)[c::]:6789 connect error [ 293.470632][ T5985] libceph: connect (1)[b::]:6789 error -101 [ 293.472820][ T5985] libceph: mon0 (1)[b::]:6789 connect error [ 293.542084][ T40] audit: type=1400 audit(2000524336.626:951): avc: denied { read } for pid=15513 comm="syz.5.2685" path="socket:[61300]" dev="sockfs" ino=61300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 293.688414][ T140] libceph: connect (1)[c::]:6789 error -101 [ 293.690576][ T140] libceph: mon0 (1)[c::]:6789 connect error [ 293.733696][ T5985] libceph: connect (1)[b::]:6789 error -101 [ 293.736022][ T5985] libceph: mon0 (1)[b::]:6789 connect error [ 293.939282][T15584] netlink: Conntrack attr has 4 unknown bytes [ 293.955104][T15586] tipc: Can't bind to reserved service type 0 [ 294.053469][T15588] syz_tun: entered promiscuous mode [ 294.058982][T15588] syz_tun: refused to change device tx_queue_len [ 294.204806][ T53] libceph: connect (1)[c::]:6789 error -101 [ 294.207608][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 294.254939][ T5985] libceph: connect (1)[b::]:6789 error -101 [ 294.260375][ T5985] libceph: mon0 (1)[b::]:6789 connect error [ 294.296138][ T40] audit: type=1400 audit(2000524337.384:952): avc: denied { setattr } for pid=15597 comm="syz.7.2708" name="nbd7" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 294.308283][T15597] delete_channel: no stack [ 294.359091][T15602] XFS (loop7): SB validate failed with error -5. [ 294.373601][T15559] ceph: No mds server is up or the cluster is laggy [ 294.374244][T15562] ceph: No mds server is up or the cluster is laggy [ 294.401512][ T1284] blk_print_req_error: 27 callbacks suppressed [ 294.401529][ T1284] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 294.413836][ T40] audit: type=1400 audit(2000524337.504:953): avc: denied { getattr } for pid=15611 comm="syz.4.2711" name="KEY" dev="sockfs" ino=65564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 294.529694][T15624] Invalid logical block size (536872960) [ 294.603793][T15630] virt_wifi0: entered promiscuous mode [ 294.606120][T15630] virt_wifi0: entered allmulticast mode [ 294.623279][T15624] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 294.626108][T15624] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 294.632236][T15624] vhci_hcd vhci_hcd.0: Device attached [ 294.656568][ T40] audit: type=1400 audit(2000524337.743:954): avc: denied { nlmsg_read } for pid=15633 comm="syz.7.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 294.819157][T15643] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 294.836410][T15631] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 294.840473][ T7958] vhci_hcd vhci_hcd.1: stop threads [ 294.842170][ T7958] vhci_hcd vhci_hcd.1: release socket [ 294.844443][ T7958] vhci_hcd vhci_hcd.1: disconnect device [ 294.866519][ T5985] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 294.869645][ T5985] usb 39-1: enqueue for inactive port 0 [ 294.886005][ T833] usb 6-1: new low-speed USB device number 39 using dummy_hcd [ 294.946671][ T5985] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 295.160009][T15681] netlink: 'syz.7.2730': attribute type 7 has an invalid length. [ 295.163042][T15681] netlink: 'syz.7.2730': attribute type 13 has an invalid length. [ 295.250786][ T40] audit: type=1326 audit(2000524338.342:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15696 comm="syz.7.2735" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9b39c819 code=0x7ffc0000 [ 295.259689][ T40] audit: type=1326 audit(2000524338.342:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15696 comm="syz.7.2735" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9b39c819 code=0x7ffc0000 [ 295.383222][T15706] comedi comedi3: comedi_config --init_data is deprecated [ 295.606932][T15723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.657798][T14735] libceph: connect (1)[c::]:6789 error -101 [ 295.659788][T14735] libceph: mon0 (1)[c::]:6789 connect error [ 295.841128][ T6948] usb 10-1: USB disconnect, device number 9 [ 295.876907][T15737] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20002 [ 295.894834][T15739] __nla_validate_parse: 43 callbacks suppressed [ 295.894850][T15739] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2745'. [ 295.919171][T14735] libceph: connect (1)[c::]:6789 error -101 [ 295.921185][T14735] libceph: mon0 (1)[c::]:6789 connect error [ 295.941115][T15746] random: crng reseeded on system resumption [ 296.249127][ T833] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 296.319414][ T6948] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 296.399432][ T833] usb 12-1: Using ep0 maxpacket: 8 [ 296.403846][ T833] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 296.405506][T15758] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2751'. [ 296.407361][ T833] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 296.416236][ T833] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 296.418042][T15758] dns_resolver: Unsupported content type (234) [ 296.420755][ T833] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 296.427329][ T833] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.436074][ T833] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 296.438943][ T833] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.440643][T14735] libceph: connect (1)[c::]:6789 error -101 [ 296.444647][T14735] libceph: mon0 (1)[c::]:6789 connect error [ 296.471553][ T6948] usb 10-1: config 0 has no interfaces? [ 296.473491][ T6948] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 296.476534][ T6948] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.483339][ T6948] usb 10-1: config 0 descriptor?? [ 296.485689][T15728] ceph: No mds server is up or the cluster is laggy [ 296.537738][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2752'. [ 296.659782][ T833] usb 12-1: usb_control_msg returned -32 [ 296.661890][ T833] usbtmc 12-1:16.0: can't read capabilities [ 296.699041][ T71] usb 10-1: USB disconnect, device number 10 [ 296.763084][T15774] dns_resolver: Unsupported server list version (0) [ 297.359364][T15823] usbtmc 12-1:16.0: usb_control_msg returned -71 [ 297.564106][T14735] usb 12-1: USB disconnect, device number 4 [ 297.691597][T15836] 9p: Bad value for 'rfdno' [ 298.190620][T15851] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 298.212109][T15851] netlink: 136 bytes leftover after parsing attributes in process `syz.7.2780'. [ 298.213577][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 298.213590][ T40] audit: type=1400 audit(2000524341.285:978): avc: denied { read } for pid=15850 comm="syz.7.2780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 298.261329][T15861] loop5: detected capacity change from 0 to 7 [ 298.267423][T15861] Dev loop5: unable to read RDB block 7 [ 298.269314][T15861] loop5: AHDI p1 [ 298.270472][T15861] loop5: partition table partially beyond EOD, truncated [ 298.289706][T15861] netlink: 'syz.4.2782': attribute type 3 has an invalid length. [ 298.292304][T15861] netlink: 'syz.4.2782': attribute type 3 has an invalid length. [ 298.295337][T15861] netlink: 'syz.4.2782': attribute type 3 has an invalid length. [ 298.297964][T15861] netlink: 'syz.4.2782': attribute type 3 has an invalid length. [ 298.300464][T15861] netlink: 'syz.4.2782': attribute type 3 has an invalid length. [ 298.303296][T15861] netlink: 'syz.4.2782': attribute type 3 has an invalid length. [ 298.306455][T15861] netlink: 'syz.4.2782': attribute type 3 has an invalid length. [ 298.316424][T15861] netlink: 'syz.4.2782': attribute type 3 has an invalid length. [ 298.319307][T15861] netlink: 'syz.4.2782': attribute type 3 has an invalid length. [ 298.321940][T15861] netlink: 'syz.4.2782': attribute type 3 has an invalid length. [ 298.328721][T15861] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 298.333775][T15861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2782'. [ 298.422295][ T5339] Dev loop5: unable to read RDB block 7 [ 298.424271][ T5339] loop5: AHDI p1 [ 298.425713][ T5339] loop5: partition table partially beyond EOD, truncated [ 298.431363][T15873] afs: Unknown parameter 'subj_user' [ 298.523904][ T5339] Dev loop5: unable to read RDB block 7 [ 298.525730][ T5339] loop5: AHDI p1 [ 298.526926][ T5339] loop5: partition table partially beyond EOD, truncated [ 298.662818][T15890] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.787571][T15890] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.838184][ T40] audit: type=1400 audit(2000524341.914:979): avc: denied { lock } for pid=15900 comm="syz.4.2795" path="socket:[66131]" dev="sockfs" ino=66131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 298.881339][T15890] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.948191][T15890] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.069792][T15911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2797'. [ 299.083377][ T7967] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.098261][ T7967] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.118831][ T7967] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.130645][ T7958] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.213515][T15917] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2800'. [ 300.007161][ T5290] Bluetooth: hci5: command 0x1003 tx timeout [ 300.007118][ T5937] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 300.377537][ T1468] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 300.527946][ T1468] usb 10-1: Using ep0 maxpacket: 8 [ 300.531721][ T1468] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.535378][ T1468] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.539237][ T1468] usb 10-1: config 0 interface 0 has no altsetting 0 [ 300.542030][ T1468] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 300.545679][ T1468] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.556206][ T1468] usb 10-1: config 0 descriptor?? [ 300.594731][T15950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2810'. [ 300.639480][T15952] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2811'. [ 300.738208][ T71] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 300.774048][T15954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2812'. [ 300.815942][T15956] kAFS: unable to lookup cell 'syz0' [ 300.888463][ T71] usb 12-1: Using ep0 maxpacket: 16 [ 300.892378][ T71] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 300.899320][ T71] usb 12-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 300.903137][ T71] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.906365][ T71] usb 12-1: Product: syz [ 300.908897][ T71] usb 12-1: Manufacturer: syz [ 300.911177][ T71] usb 12-1: SerialNumber: syz [ 300.915800][ T71] usb 12-1: config 0 descriptor?? [ 300.922030][ T71] em28xx 12-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 300.925829][ T71] em28xx 12-1:0.0: DVB interface 0 found: bulk [ 300.986864][ T1468] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 300.990616][ T1468] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 300.993809][ T1468] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 300.996670][ T1468] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 301.000120][ T1468] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 301.003650][ T1468] mcp2221 0003:04D8:00DD.000F: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 301.354293][ T833] usb 10-1: USB disconnect, device number 11 [ 301.407749][T15971] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2817'. [ 301.522412][ T71] em28xx 12-1:0.0: unknown em28xx chip ID (0) [ 301.564500][T15983] kvm: MWAIT instruction emulated as NOP! [ 301.569051][T15986] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2821'. [ 301.683762][ T40] audit: type=1400 audit(2000524344.759:980): avc: denied { map } for pid=15995 comm="syz.1.2824" path="socket:[64304]" dev="sockfs" ino=64304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 301.684109][T15996] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2824'. [ 301.723872][T15996] xt_socket: unknown flags 0xc [ 301.854775][ T5290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.860340][ T5290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.879746][ T5290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.883124][ T5290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.885933][ T5290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.958366][ T71] em28xx 12-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 301.961595][ T71] em28xx 12-1:0.0: board has no eeprom [ 301.986890][T16004] SELinux: ebitmap: truncated map [ 302.030020][T16004] SELinux: failed to load policy [ 302.246883][T16000] chnl_net:caif_netlink_parms(): no params data found [ 302.355919][ T7952] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.359213][ T7952] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.382034][ T71] em28xx 12-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 302.384930][ T71] em28xx 12-1:0.0: dvb set to bulk mode. [ 302.402965][T14735] em28xx 12-1:0.0: Binding DVB extension [ 302.425677][T16030] overlay: Unknown parameter 'dont_measure' [ 302.462614][ T7952] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.470148][ T7952] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.494661][T16000] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.497096][T16000] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.499668][T16000] bridge_slave_0: entered allmulticast mode [ 302.503749][T16036] fuse: Bad value for 'fd' [ 302.504811][T16000] bridge_slave_0: entered promiscuous mode [ 302.509608][T16000] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.512353][T16000] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.514889][T16000] bridge_slave_1: entered allmulticast mode [ 302.518145][T16000] bridge_slave_1: entered promiscuous mode [ 302.571693][ T7952] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.575685][ T7952] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.614886][T16000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.633489][T16000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.685919][T16000] team0: Port device team_slave_0 added [ 302.693283][T16000] team0: Port device team_slave_1 added [ 302.704570][ T7952] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.722374][ T7952] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.764004][T16057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2838'. [ 302.766347][ T40] audit: type=1400 audit(2000524345.837:981): avc: denied { listen } for pid=16056 comm="syz.5.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 302.775474][T16000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.777830][T16000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.781808][ T40] audit: type=1400 audit(2000524345.847:982): avc: denied { accept } for pid=16056 comm="syz.5.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 302.786715][T16000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.798469][T16000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.800750][T16000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.809860][T16000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.848326][T16000] hsr_slave_0: entered promiscuous mode [ 302.850972][T16000] hsr_slave_1: entered promiscuous mode [ 302.854478][T16000] debugfs: 'hsr0' already exists in 'hsr' [ 302.856842][T16000] Cannot create hsr debugfs directory [ 302.992613][T16062] SELinux: policydb magic number 0x32f42bd9 does not match expected magic number 0xf97cff8c [ 302.995939][T16062] SELinux: failed to load policy [ 303.101853][ T1468] SELinux: failure in sel_netif_sid_slow(), invalid network interface (95) [ 303.232589][ T7952] bond2 (unregistering): (slave gretap1): Releasing active interface [ 303.251230][ T7952] bond4 (unregistering): (slave bridge1): Releasing active interface [ 303.368581][T15946] em28xx 12-1:0.0: writing to i2c device at 0x0 failed (error=-5) [ 303.378425][ T7952] bond7 (unregistering): (slave bridge3): Releasing backup interface [ 303.382400][ T7952] bridge3 (unregistering): left promiscuous mode [ 303.399053][T14735] em28xx 12-1:0.0: Registering input extension [ 303.404106][T14735] usb 12-1: USB disconnect, device number 5 [ 303.407269][T14735] em28xx 12-1:0.0: Disconnecting em28xx [ 303.409623][T14735] em28xx 12-1:0.0: Closing input extension [ 303.459103][T14735] em28xx 12-1:0.0: Freeing device [ 303.464058][T16078] tmpfs: Bad value for 'mpol' [ 303.607848][ T40] audit: type=1400 audit(2000524346.676:983): avc: denied { getopt } for pid=16085 comm="syz.7.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 303.687218][ T7952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.691872][ T7952] bond0 (unregistering): Released all slaves [ 303.698614][ T7952] bond1 (unregistering): Released all slaves [ 303.708763][ T7952] bond2 (unregistering): Released all slaves [ 303.719262][ T7952] bond3 (unregistering): Released all slaves [ 303.729049][ T7952] bond4 (unregistering): Released all slaves [ 303.737752][ T7952] bond5 (unregistering): Released all slaves [ 303.751075][ T7952] bond6 (unregistering): (slave batadv1): Releasing backup interface [ 303.758470][ T7952] batadv1: left promiscuous mode [ 303.760752][ T7952] batadv1: left allmulticast mode [ 303.764129][ T7952] bond6 (unregistering): Released all slaves [ 303.778885][ T7952] bond7 (unregistering): Released all slaves [ 303.791197][ T7952] bond8 (unregistering): Released all slaves [ 303.802498][ T7952] bond9 (unregistering): (slave veth7): Releasing active interface [ 303.803247][ T53] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 303.810536][ T7952] bond9 (unregistering): Released all slaves [ 303.925957][ T5290] Bluetooth: hci5: command tx timeout [ 303.966522][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 303.969919][ T7952] tipc: Left network mode [ 303.981804][ T53] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 303.985211][ T53] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 303.997750][ T53] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 304.002226][ T53] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 304.007053][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.022039][ T53] usbtmc 6-1:16.0: bulk endpoints not found [ 304.334367][ T6067] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 304.438788][T16110] validate_nla: 32 callbacks suppressed [ 304.438806][T16110] netlink: 'syz.7.2852': attribute type 11 has an invalid length. [ 304.443188][T16110] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2852'. [ 304.458271][T16110] [U]  [ 304.459534][T16110] [U] + [ 304.464007][T16110] [U] $܁P~ƊQrAe`G-Rij笨mA)߀No4gV;uQ` [ 304.470216][T16110] [U] Wg-u]}FyȘeƮ)>,>f}a&\msOHn'Ä=#$Ǧ&g C.,jP^{"Oiňo;pʪ6qwS_{CWfs+R~qu›ŸNn! [ 304.472807][T16000] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 304.476851][T16110] [U] Zph5Laӝ8H [ 304.486418][ T6067] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 304.490125][ T6067] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 304.498308][ T6067] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 304.501273][T16110] [U] V)*Gr [ 304.503196][T16110] [U] g©MD9i^g[&TXd}y^#"Z&|JiYDX~reGiUMNkqGJcӔ0 r088D<U0P9=>ȪU[ƒuW9jl"hZG+EĖ#LY`z2 [ 304.505332][ T6067] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 304.509214][T16110] [U] }{_S|j\ptژ1b-S4!{9C5->M [ 304.513672][ T6067] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 304.516191][T16110] [U] UXBH,~nmIM/a [ 304.516204][T16110] [U] VS6e^ SHk"(*:$}<^YD?rnHEX#X3Ys6 [ 304.516211][T16110] [U] [ 304.524358][T16110] [U] 71D%}7G\4'Kp7U,"^|-B g&@bWRY [ 304.529859][ T6067] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.531822][ T7952] hsr_slave_0: left promiscuous mode [ 304.537585][T16110] [U] p~ [ 304.539028][T16110] [U] hQVOK) ƵZ>uY`XԶޖQtBhvMdR/%F8`yǥY䦈Fؾx@-d֛ 0ʩz;D")tRgiL()d6"BnBf?ӛ,ѧ`'Lq 6t2t@F@p6v]t4NξyRΓvP':J۫ۆE*̣];M4TqB_5pM [ 304.558241][ T7952] hsr_slave_1: left promiscuous mode [ 304.561323][ T7952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.564230][ T7952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.567328][T16110] [U] _mֱ9KU""^s6rP [ 304.570587][ T7952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.574014][T16110] [U] ¥U[m j0zOoF|:! /$@RH(Η1K@ǚ/w4|xJ3: [ 304.599447][T16110] [U] V :p\U 5V"cd:nb3Ob,%ǯe j9>\rCˉiVE<\7;娍+ȏ"IƔ/6FNhgw~xcWö}H6TI؆6aA耹C1v]ba9xT  [ 304.606532][T16110] [U] ۼuJD⠙("wZ[(s1yXNׯtAc/piǎj Ѕ#{0`y,Hp+̄j54?@պNa^!4^3" [ 304.612249][T16110] [U] I\xezW80ܚPfzqi^@O [ 304.612494][ T7952] veth1_vlan: left allmulticast mode [ 304.614846][T16110] [U] gڑ/P+ؒb=pYY1gJd initial count (148514 ns). Using initial count to start timer. [ 306.914818][T16225] loop2: detected capacity change from 0 to 7 [ 306.923381][T16225] Dev loop2: unable to read RDB block 7 [ 306.926373][T16225] loop2: unable to read partition table [ 306.929186][T16225] loop2: partition table beyond EOD, truncated [ 306.931826][T16225] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 307.186156][T16238] omfs: Invalid superblock (0) [ 307.222395][T16241] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2883'. [ 307.618843][ T5985] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 307.772953][ T5985] usb 12-1: Using ep0 maxpacket: 8 [ 307.777003][ T5985] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 307.780079][ T5985] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 307.784436][ T5985] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 307.788540][ T5985] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 307.793286][ T5985] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 307.797790][ T5985] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 307.802610][ T5985] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 307.807609][ T5985] usb 12-1: config 168 interface 0 has no altsetting 0 [ 307.814108][ T5985] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 307.817400][ T5985] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 307.822050][ T5985] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 307.826421][ T5985] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 307.831225][ T5985] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 307.836702][ T5985] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 307.841934][ T5985] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 307.847115][ T5985] usb 12-1: config 168 interface 0 has no altsetting 0 [ 307.851803][ T5985] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 307.854769][ T5985] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 307.859634][ T5985] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 307.864946][ T5985] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 307.869990][ T5985] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 307.874653][ T5985] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 307.880980][ T5985] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 307.886226][ T5985] usb 12-1: config 168 interface 0 has no altsetting 0 [ 307.892253][ T5985] usb 12-1: string descriptor 0 read error: -22 [ 307.894844][ T5985] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 307.898436][ T5985] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.917037][ T5985] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 308.089800][ T5290] Bluetooth: hci5: command tx timeout [ 308.116767][ T71] usb 12-1: USB disconnect, device number 6 [ 308.884362][T16257] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 309.348741][T16195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.415671][ T40] audit: type=1400 audit(2000524352.478:986): avc: denied { lock } for pid=16263 comm="syz.5.2889" path="socket:[70670]" dev="sockfs" ino=70670 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 309.431794][T16265] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2889'. [ 309.454425][T16269] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2892'. [ 309.566254][T16285] : entered promiscuous mode [ 309.634145][T16264] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x62abf [ 309.641889][T16264] memcg:ffff88801dee0000 [ 309.643783][T16264] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 309.647073][T16264] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 309.650001][T16264] raw: ffffffffffffffff 0000000000000000 00000001ffffffff ffff88801dee0000 [ 309.661598][T16264] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 309.665688][T16264] page_owner tracks the page as allocated [ 309.668564][T16264] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 16264, tgid 16262 (syz.7.2890), ts 309634125828, free_ts 309634080763 [ 309.669250][T16295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16295 comm=syz.4.2899 [ 309.691239][T16264] post_alloc_hook+0x153/0x170 [ 309.697014][T16264] get_page_from_freelist+0x111d/0x3140 [ 309.699469][T16264] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 309.702100][T16264] alloc_pages_mpol+0x1fb/0x550 [ 309.704192][T16264] folio_alloc_noprof+0x22/0x330 [ 309.706243][T16264] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 309.709106][T16264] filemap_alloc_folio_noprof+0x5e/0x80 [ 309.711182][T16264] page_cache_ra_order+0x54b/0xf30 [ 309.714261][T16264] filemap_fault+0x191a/0x2eb0 [ 309.719002][T16264] __do_fault+0x10d/0x550 [ 309.720613][T16264] do_fault+0x2db/0x18e0 [ 309.722293][T16264] __handle_mm_fault+0x1815/0x2b60 [ 309.724481][T16264] handle_mm_fault+0x36d/0xa20 [ 309.729544][T16264] __get_user_pages+0xf9c/0x34d0 [ 309.733169][T16264] faultin_page_range+0x1f1/0x9e0 [ 309.736450][T16264] madvise_do_behavior+0x354/0x510 [ 309.738409][T16264] page last free pid 53 tgid 53 stack trace: [ 309.740552][T16264] __free_frozen_pages+0x7e1/0x10d0 [ 309.745511][T16264] vfree.part.0+0x12b/0x9d0 [ 309.748158][T16264] delayed_vfree_work+0x8e/0xd0 [ 309.750303][T16264] process_one_work+0xa23/0x19a0 [ 309.752097][T16264] worker_thread+0x5ef/0xe50 [ 309.753651][T16264] kthread+0x370/0x450 [ 309.754951][T16264] ret_from_fork+0x754/0xd80 [ 309.756610][T16264] ret_from_fork_asm+0x1a/0x30 [ 309.760464][T16264] ------------[ cut here ]------------ [ 309.763479][T16264] kernel BUG at mm/filemap.c:858! [ 309.781916][T16264] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 309.784309][T16264] CPU: 3 UID: 0 PID: 16264 Comm: syz.7.2890 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.788117][T16264] Tainted: [L]=SOFTLOCKUP [ 309.789740][T16264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 309.790152][ T40] audit: type=1400 audit(2000524352.847:987): avc: denied { write } for pid=5918 comm="syz-executor" path="pipe:[4090]" dev="pipefs" ino=4090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 309.793210][T16264] RIP: 0010:__filemap_add_folio+0xfcf/0x1280 [ 309.793243][T16264] Code: 2e c5 ff 48 c7 c6 e0 39 bd 8b 4c 89 ef e8 d9 3f 12 00 90 0f 0b e8 11 2e c5 ff 48 c7 c6 40 3a bd 8b 4c 89 ef e8 c2 3f 12 00 90 <0f> 0b e8 fa 2d c5 ff 90 0f 0b 90 e9 4b fe ff ff e8 ec 2d c5 ff 90 [ 309.793255][T16264] RSP: 0018:ffffc9000364f428 EFLAGS: 00010246 [ 309.812903][T16264] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc90006df1000 [ 309.815577][T16264] RDX: 0000000000080000 RSI: ffffffff825609a8 RDI: ffff88802aaa84c4 [ 309.818915][T16264] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 309.821982][T16264] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 [ 309.825803][T16264] R13: ffffea00018aafc0 R14: 0000000000000000 R15: 1ffff920006c9eaf [ 309.828546][T16264] FS: 00007fbb9c3236c0(0000) GS:ffff8880d6639000(0000) knlGS:0000000000000000 [ 309.831480][T16264] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.833614][T16264] CR2: 00007fdc8a9b3ff8 CR3: 00000000429b7000 CR4: 0000000000352ef0 [ 309.836160][T16264] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 309.838750][T16264] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 309.841590][T16264] Call Trace: [ 309.842985][T16264] [ 309.843992][T16264] ? __pfx___filemap_add_folio+0x10/0x10 [ 309.845825][T16264] filemap_add_folio+0x1d8/0x690 [ 309.847450][T16264] ? __lock_acquire+0x4a5/0x2630 [ 309.849113][T16264] ? __pfx_filemap_add_folio+0x10/0x10 [ 309.850945][T16264] ? css_rstat_updated+0x1ce/0x5a0 [ 309.852679][T16264] page_cache_ra_order+0x614/0xf30 [ 309.854538][T16264] filemap_fault+0x191a/0x2eb0 [ 309.856289][T16264] ? block_dirty_folio+0x14c/0x200 [ 309.858002][T16264] ? __pfx_filemap_fault+0x10/0x10 [ 309.859736][T16264] ? __pfx_filemap_map_pages+0x10/0x10 [ 309.861509][T16264] __do_fault+0x10d/0x550 [ 309.862918][T16264] ? __pfx_filemap_map_pages+0x10/0x10 [ 309.864727][T16264] do_fault+0x2db/0x18e0 [ 309.866155][T16264] __handle_mm_fault+0x1815/0x2b60 [ 309.867928][T16264] ? __pfx___handle_mm_fault+0x10/0x10 [ 309.869817][T16264] ? pte_offset_map_lock+0x174/0x320 [ 309.871574][T16264] ? find_held_lock+0x2b/0x80 [ 309.873112][T16264] ? follow_page_pte+0x5b3/0x1400 [ 309.874752][T16264] handle_mm_fault+0x36d/0xa20 [ 309.876352][T16264] __get_user_pages+0xf9c/0x34d0 [ 309.878046][T16264] ? down_read_killable+0x30e/0x4c0 [ 309.880231][T16264] ? __pfx___get_user_pages+0x10/0x10 [ 309.882119][T16264] faultin_page_range+0x1f1/0x9e0 [ 309.883846][T16264] madvise_do_behavior+0x354/0x510 [ 309.885479][T16264] ? __pfx_madvise_do_behavior+0x10/0x10 [ 309.887265][T16264] do_madvise+0x195/0x240 [ 309.888680][T16264] ? __pfx_do_madvise+0x10/0x10 [ 309.890251][T16264] ? do_futex+0x192/0x350 [ 309.891672][T16264] ? fput+0x79/0x100 [ 309.892994][T16264] __x64_sys_madvise+0xa9/0x110 [ 309.894649][T16264] ? lockdep_hardirqs_on+0x78/0x100 [ 309.896518][T16264] do_syscall_64+0x106/0xf80 [ 309.898131][T16264] ? clear_bhb_loop+0x40/0x90 [ 309.899904][T16264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.901795][T16264] RIP: 0033:0x7fbb9b39c819 [ 309.903252][T16264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.909827][T16264] RSP: 002b:00007fbb9c323028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 309.912684][T16264] RAX: ffffffffffffffda RBX: 00007fbb9b615fa0 RCX: 00007fbb9b39c819 [ 309.915239][T16264] RDX: 0000000000000017 RSI: 0000000000c00000 RDI: 0000200000000000 [ 309.917772][T16264] RBP: 00007fbb9b432c91 R08: 0000000000000000 R09: 0000000000000000 [ 309.920373][T16264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.923068][T16264] R13: 00007fbb9b616038 R14: 00007fbb9b615fa0 R15: 00007ffedc7c4db8 [ 309.926050][T16264] [ 309.927140][T16264] Modules linked in: [ 309.929207][T16264] ---[ end trace 0000000000000000 ]--- [ 309.943685][T16264] RIP: 0010:__filemap_add_folio+0xfcf/0x1280 [ 309.945688][T16264] Code: 2e c5 ff 48 c7 c6 e0 39 bd 8b 4c 89 ef e8 d9 3f 12 00 90 0f 0b e8 11 2e c5 ff 48 c7 c6 40 3a bd 8b 4c 89 ef e8 c2 3f 12 00 90 <0f> 0b e8 fa 2d c5 ff 90 0f 0b 90 e9 4b fe ff ff e8 ec 2d c5 ff 90 [ 309.954704][T16264] RSP: 0018:ffffc9000364f428 EFLAGS: 00010246 [ 309.956776][T16264] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc90006df1000 [ 309.959329][T16264] RDX: 0000000000080000 RSI: ffffffff825609a8 RDI: ffff88802aaa84c4 [ 309.962136][T16264] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 309.964701][T16264] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 [ 309.967330][T16264] R13: ffffea00018aafc0 R14: 0000000000000000 R15: 1ffff920006c9eaf [ 309.970561][T16264] FS: 00007fbb9c3236c0(0000) GS:ffff8880d6639000(0000) knlGS:0000000000000000 [ 309.974928][T16264] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.977053][T16264] CR2: 00007fdc8a9b3ff8 CR3: 00000000429b7000 CR4: 0000000000352ef0 [ 309.979630][T16264] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 309.982550][T16264] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 309.985078][T16264] Kernel panic - not syncing: Fatal exception [ 309.988117][T16264] Kernel Offset: disabled [ 309.989725][T16264] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:49:29 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000100 RBX=ffff88801caf69b0 RCX=ffffffff8b935990 RDX=0000000000000001 RSI=ffffffff82b8be3e RDI=ffff88801caf69b0 RBP=0000000000000100 RSP=ffffc900031df8b0 R8 =0000000000000001 R9 =ffffed100395ed36 R10=ffff88801caf69b7 R11=0000000000000000 R12=1ffff9200063bf17 R13=dffffc0000000000 R14=ffffffff82b8bdd0 R15=ffff88803cc1d47a RIP=ffffffff8b9359aa RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007ff6d7b74880 ffffffff 00c00000 GS =0000 ffff8880d6339000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdc8a9d4ff8 CR3=0000000035102000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000080083 DR3=ffffffffefffff16 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc50c24906 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc50c24906 00007ffc50c2490c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc8c833274 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc8c8332b4 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc8c833418 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc8c8332a6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc8c9ec5f8 00007fdc8c9ec5c8 00007fdc8c9ec600 00007fdc8c9ec5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffffffff829175b8 RDX=1ffff11007b69f06 RSI=ffffffff829175c6 RDI=ffff88803db4f3f0 RBP=ffff88803db4f708 RSP=ffffc9000c67fd48 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff88801c7d6028 R13=ffff88803db4f3c0 R14=0000000000000000 R15=ffff88803db4f5e0 RIP=ffffffff82917601 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00005555840e9500 ffffffff 00c01300 GS =0000 ffff8880d6439000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa1b13e7158 CR3=0000000034b1d000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000080083 DR3=ffffffffefffff16 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000fefce002 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6e69 5f65676173752e42 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff43d3e326 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff43d3e326 00007fff43d3e32c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa1b1233274 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa1b12332b4 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa1b1233418 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa1b12332a6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000001d50e7 RBX=ffff88801eafc980 RCX=ffffffff8b915c75 RDX=0000000000000000 RSI=ffffffff8de7ad42 RDI=ffffffff8c1b1e20 RBP=0000000000000000 RSP=ffffc90000187df0 R8 =0000000000000001 R9 =ffffed100d4c679d R10=ffff88806a633ceb R11=0000000000000000 R12=0000000000000002 R13=ffffed1003d5f930 R14=0000000000000002 R15=ffffffff90d9d310 RIP=ffffffff8b9145df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6539000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdc8a9b4d58 CR3=00000000429b7000 CR4=00352ef0 DR0=0000000010400001 DR1=0000000000000003 DR2=0000000000000001 DR3=0000000000000006 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb9c14d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffedc7c52a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffedc7c52a6 00007ffedc7c52ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb9b433274 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb9b4332b4 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb9b433418 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb9b4332a6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb9b5ec600 00007fbb9b5ec5e0 00007fbb9b5ec5e8 00007fbb9b5ec618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb9b5ec5f8 00007fbb9b5ec5c8 00007fbb9b5ec600 00007fbb9b5ec5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000028cdfb RBX=ffff88801eafa4c0 RCX=ffffffff8b915c75 RDX=0000000000000000 RSI=ffffffff8de7ad42 RDI=ffffffff8c1b1e20 RBP=0000000000000000 RSP=ffffc90000197df0 R8 =0000000000000001 R9 =ffffed100d4e679d R10=ffff88806a733ceb R11=0000000000000000 R12=0000000000000003 R13=ffffed1003d5f498 R14=0000000000000003 R15=ffffffff90d9d310 RIP=ffffffff8b9145df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6639000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdc8a9b3ff8 CR3=0000000037ebe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000001800 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc50c24906 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc50c24906 00007ffc50c2490c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc8c833274 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc8c8332b4 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc8c833418 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc8c8332a6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc8c9ec5f8 00007fdc8c9ec5c8 00007fdc8c9ec600 00007fdc8c9ec5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000