last executing test programs: 3m42.929637754s ago: executing program 32 (id=160): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x1, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x60, 0xef, 0x22, 0x3f, 0xcf, 0x45e, 0x4e1, 0xa86a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xfe, 0xf0, 0x5, [{{0x9, 0x4, 0x40, 0x16, 0x0, 0x8d, 0xcc, 0x37, 0xa}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2m55.544521594s ago: executing program 33 (id=886): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_settime(r2, 0x1, &(0x7f00000000c0)={{0x77359400}}, &(0x7f0000000140)) ioctl$VT_WAITACTIVE(r0, 0x5607) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000100)={{r3, r4+60000000}, {0x77359400}}, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5412, &(0x7f00000001c0)=0x11) 2m45.908685217s ago: executing program 3 (id=1060): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='souE\x87\xfe\xa0+TH\x05Yh4\x13\xae6rce\x06F\xd8\x1e\xd8.U\x80\x14gZ\x06\xb1\xb2\xf6\x9c\xf3\xd5\x01/\xbe\x8f\x14\xd7\fR\xe6oP4\xba\xef\xc2e\xdf\x02\x7f\xdd\xa8F\xb4\xf5M\x04\b\x16\xc5\x92\x17\v\xb4\xa4 1\xc6\xd0\xbf\xfb+\v\xa9Z\"\xa0K\x84o\xdcA\x8cK\xb4=~qx2\x12\x02\xcd\xda\\\b\x00\x00\x00\x00\x00\x00\x00\v\xbd\xb8H\x13J\xabW\x9d\xaf<\xb1\x00\x00\x00\x00\xce\xe5J\x92\xec5oZ\xb8,vC\x02\x02\x01!\x88\xed\xe1\xc2\xeb\xf2\x1d\x82\xd47\x98\r\xab.\xeeW\xd9B\xbe\x8c\x9f\a\xa9\x1f\xbdBS?3\xf5\r\xbf#\xc0\xb7\xde%G\x95\xc0(\xde\xc7\x83\x9d\xad\x893\xc62.<\'\t\xeb\x93\x10\x80(\x9a\xe4n\xbf\x1e<\xb8\x9f\xa1\xd2\xc1\xe8\xa4\xd7>\xc7\xd0\x01\xab\x9a|\xd6f\xe9G\x04\xfd\xccl\xf5\x1e\xf0\xe9\xf1\xf3n\xdb\xcf_d|\x05xj\xbbI\b_\t\x91\xbf\x9e\x9d\xc9\xaa\x1c\xe1C\x8a\x8b\xa3\x0f\xef\x04\xa7\x86\xb4\x1cF\x04\x87\x84\xdc>\xbe\xcef\xdc\xef\x8c\x10\xf1\xfa\xe3\xfc\xff%\xb6\x81\x02\xcf\xd4\b&\xe8\x83M\x02&H\xf9\x17s\x92\xfd\x94\fnRpV\xb3\x15d\xb7\x04\x98\x81y[\xf2\x00\x00|\xacZ', &(0x7f0000000600)='b\xb9\xc1\x14\f\xc2x\xcb\x1e7\x94\xbfT\x9b^oW\x9ajb\xcd\x00\x00\x14\x9cj\xe3i\x87++j<\xe8\xf2\xf3\xd1\x7f\r*\xe1\xf0K7\xa7\xfc\x9dV\xd4\xdb\xe9\"U\x90a\xb9\x80\xb5HP\x95\x9a>+;\x88W\x1e\xd3{\xfa\xdd\xf0\xfc\xd1q\xd9\x82H\xb3\x85s\x12kT7\xde\x99\xbb\xfb\x15Y\xd7\xcd\xc5\xad\x05\x01\x00T\x03\xfeC\xc4\xe3\xe0\xe5\xb7\x91a\x83L2\xe6\t\xc4\x95\x81\xab\xdb}\x02J\xc2\x8d\xd7\x11A\xda<\xbd\xad\xde\xef,\xaa\x1ev\xa4\x1db\x9f\x97\x14\xd3M\xb9\xd7\xd9Z\xfe\x00\xd4\xdbe\xfd\x85\x020\x0e\xdc\xe66\xa7\x81\xfc\x86\x1b\xf3\xda-\xd8X\xebE\xfeV\xb2\xc2C\xc2\xa0\xe9\x93`\x94K\xd0C\xdd\x80\x04\x1f\xb8\xed&\xa6\xb7\xea\xea\xc7\xd4\x1d3\xd0\xdcw\xd1\xa8\x93N\x92\xc2\xeadA\x98w\xb5\xa0\xeb\xca\x92\xd2]\xb3\x1bC\xa7\xd8\x81\x81\xd0~\xe1\xc0p\xf9|R\x89\xf5 \x81\xcc\xcc\x80\xfb\xff\xff\xffB\r\xa6\xf2K\xfc\xac.Z\x18\xb5\xa0\xdb|\xef\xe8\xcb\x9fV\xc05\xa2\xe4Y\xbb\x81\x8at\xed\xb7\xa91\xfe\x05f\x94I\xb9|\x16`\xaa\x9a\x18\xbc\x1f\x1c\\\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00P\xcc\x1f:u\xdbw\tF>\xb4\x91\v\xfd\xa0\x80\x06&4zE\xe0p*\x1cY\x93\xc2\x88\xf7LT\x10\x99p\xd9:\x84\xc9\x14\x15\xa0\xe1\x87\v\x14w\t\'g\xe0\xb0@\\\xc0\xfaz.@z\xb7\xeabQ\xf4\x9a\xb9${\xcet\x00\xf0\x17\x15\xe8\xb2\x95\xf3\x99\x9b\x14j\xc9\xb7\x8a\x85\\q\xd1) 3V\nM\x84\x82\xb2\xb7V\xff\xce\x89r\xa0\xbc\x99\xa3D\x89\xec\xae-y\xc0\xc3<\xbb\"D\xf0\xc9?\xdc=\x11\x89\xac)', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f1ff0000000071300000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040400007203200000000000e500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) setpriority(0x1, 0x0, 0x7fffffffffffffff) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x2}, &(0x7f0000000140)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe94, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {0x0, 0x2}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x1}, {}, {}, {0x8, 0x10000000}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0xf49, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffb, 0x0, 0x0, 0x0, 0xa92}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}, 0x1, 0x0, 0x0, 0x40004000}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2m45.747352108s ago: executing program 3 (id=1062): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d00"/20, @ANYRES32=r1, @ANYBLOB="00300000c048000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}, 0x1, 0x100000000000000, 0x0, 0x40000}, 0x0) 2m45.746961739s ago: executing program 3 (id=1063): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r2, &(0x7f0000000080)=""/237, 0xed, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000000)={0x1, @vbi={0x1000, 0x1, 0x2, 0x30314442, [0x3, 0xfffffff3], [0x40, 0x1], 0x108}}) 2m45.746793328s ago: executing program 3 (id=1064): r0 = syz_usbip_server_init(0x3) write$usbip_server(r0, &(0x7f0000001bc0)=@ret_submit={{0x3, 0xffffffba, 0x0, 0x1, 0x5}, 0x8, 0x0, 0xd4aa, 0x0, 0x9}, 0x30) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001e0020"], 0x3c}, 0x1, 0x2000000000000000}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xf0ffffff) 2m45.118244948s ago: executing program 3 (id=1068): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) poll(&(0x7f0000000000), 0x20000000000000ea, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_emit_ethernet(0x66, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffff15beff0180c200000086dd7500000000303afffe8000000000000000000000000000bbff020000000000000000000000000001890004000e5001008900907800000000fe8000000000000000000000000000bbfc0100"/104], 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x5}, {0x5}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x43}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4c800) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0x1ff, 0x8, 0x10, 0xffffffffffffffff, 0x2ae, '\x00', 0x0, r3, 0x0, 0x5, 0x1, 0x6}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x2e, &(0x7f0000000700)=@raw=[@call={0x85, 0x0, 0x0, 0x9d}, @ringbuf_query, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x473}, @jmp={0x5, 0x0, 0xd, 0x1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffb}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000880)='syzkaller\x00', 0x8, 0x61, &(0x7f00000008c0)=""/97, 0x41100, 0x14, '\x00', r9, 0x25, r3, 0x8, &(0x7f0000000980)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000009c0)={0x1, 0x9, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000a00)=[{0x0, 0x1, 0x8, 0x1}, {0x2, 0x4, 0xd, 0x8}, {0x3, 0x5, 0x4, 0x2}, {0x0, 0x3, 0x3, 0xb}, {0x4, 0x5, 0x4, 0x3}, {0x0, 0x5, 0xa, 0x8}], 0x10, 0x2}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r11, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) r12 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r12, 0x40049366, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fdfaffffffffffffff000300", @ANYRES32=r13, @ANYBLOB="0500a20005000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40840) 2m44.208739049s ago: executing program 3 (id=1094): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x4000000000009, 0xd, 0x1000000000424, 0x2, 0xffffffffffffffff, 0x10, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x7ff, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x40000000, 0x5, 0x7}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES64=r0, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="0f2211440f20c0663508000000440f22c00f21003e0fc71d072fc730a50f20e06635040000000f22e0ba6100f30f090f320fc729b9c30e00", 0x38}], 0x1, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r10, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="b9800000c00f3235004000000f30b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d90000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3166b857000f00d0", 0x54}], 0x0, 0x10, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r9, 0x40049366, &(0x7f0000000100)=0x2) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f00000002c0)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7800, 0x8000, 0x6, 0x5, {{0x8, 0x4, 0x0, 0xa, 0x20, 0x68, 0x0, 0xb, 0x2f, 0x0, @multicast2, @multicast2, {[@generic={0x86, 0xa, "722ff8e913eed242"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)=ANY=[@ANYBLOB="60010000", @ANYRES16=0x0, @ANYBLOB="00002dbd7000fbdbdf25040000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000003000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e30000000000000000008000300010000004400018008000300010000001400020073797a5f74756e00000000000000000014000200776c616e31000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000005c00018008000300020000001400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000000800030000000000140002006272696467655f736c6176655f300000080003000300000048000180140002006873723000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="0900c400", @ANYRES32=r12, @ANYBLOB="080003000200000008000300030000002000018008000300020000001400020069703665727370616e30000000000000"], 0x160}, 0x1, 0x0, 0x0, 0x20004080}, 0x200000c0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f00000000c0)=0x82) 2m29.479420398s ago: executing program 34 (id=1201): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x13, 0x0, &(0x7f0000000080)) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xbdf) (async) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_DO_IT(r0, 0xab03) (async) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 2m28.660428659s ago: executing program 6 (id=1202): r0 = socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00', 0x800}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd000000", 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x150d0, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x4e22, @broadcast}}) 2m28.601192738s ago: executing program 6 (id=1220): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000401b", @ANYRES16=r2, @ANYBLOB="02002dbd700000000000040000000c0002800800050007000000"], 0x20}}, 0x0) sendmmsg$sock(r0, &(0x7f0000005040)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000005200)="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", 0x3f4}], 0x1}}], 0x1, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000140)={r1}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000070a0100000000000000067a30000000000000000000000000000000a8a22e9e808c6df7156ecddcc38a085087bbf162d333b8e02817baaf274904c88a5fd1f92d519da7cfe248f9551b00"/90], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r4, &(0x7f0000000240)='./file0\x00') socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x7, 0x0, &(0x7f00000000c0)) (async) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x7, 0x0, &(0x7f00000000c0)) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K\x00\x00\x00\x00\x00\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K\x00\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x0, 0x1000}) (async) r9 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x0, 0x1000}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r9}, 0x18) 2m28.515343344s ago: executing program 6 (id=1221): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x2, &(0x7f00000004c0)=@raw=[@map_fd], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x1, 0x0, &(0x7f0000000140)=[{}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) r6 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipmr_delroute={0x0, 0x19, 0x200, 0x70bd27, 0x25dfdbfe, {0x80, 0x80, 0x10, 0x4, 0xff, 0x4, 0xfd, 0x1}, [@RTA_GATEWAY={0x0, 0x5, @multicast2}, @RTA_UID={0x0, 0x19, r6}, @RTA_MARK={0x0, 0x10, 0x663}, @RTA_SRC={0x0, 0x2, @private=0xa010101}, @RTA_UID={0x0, 0x19, r6}, @RTA_DST={0x0, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, @RTA_ENCAP={0x0, 0x16, 0x0, 0x1, @LWTUNNEL_IP_ID={0x0, 0x1, 0x9}}, @RTA_TABLE={0x0, 0xf, 0x23}]}, 0xfd49}, 0x1, 0x0, 0x0, 0x40841}, 0x4000000) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x4, 0x0, r2, 0xd9c, '\x00', r5, r7, 0x0, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x2, &(0x7f00000004c0)=@raw=[@map_fd], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x1, 0x0, &(0x7f0000000140)=[{}]}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00'}) (async) geteuid() (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipmr_delroute={0x0, 0x19, 0x200, 0x70bd27, 0x25dfdbfe, {0x80, 0x80, 0x10, 0x4, 0xff, 0x4, 0xfd, 0x1}, [@RTA_GATEWAY={0x0, 0x5, @multicast2}, @RTA_UID={0x0, 0x19, r6}, @RTA_MARK={0x0, 0x10, 0x663}, @RTA_SRC={0x0, 0x2, @private=0xa010101}, @RTA_UID={0x0, 0x19, r6}, @RTA_DST={0x0, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, @RTA_ENCAP={0x0, 0x16, 0x0, 0x1, @LWTUNNEL_IP_ID={0x0, 0x1, 0x9}}, @RTA_TABLE={0x0, 0xf, 0x23}]}, 0xfd49}, 0x1, 0x0, 0x0, 0x40841}, 0x4000000) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x4, 0x0, r2, 0xd9c, '\x00', r5, r7, 0x0, 0x5, 0x4}, 0x50) (async) 2m27.745673612s ago: executing program 35 (id=1094): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x4000000000009, 0xd, 0x1000000000424, 0x2, 0xffffffffffffffff, 0x10, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x7ff, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x40000000, 0x5, 0x7}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES64=r0, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="0f2211440f20c0663508000000440f22c00f21003e0fc71d072fc730a50f20e06635040000000f22e0ba6100f30f090f320fc729b9c30e00", 0x38}], 0x1, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r10, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="b9800000c00f3235004000000f30b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d90000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3166b857000f00d0", 0x54}], 0x0, 0x10, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r9, 0x40049366, &(0x7f0000000100)=0x2) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f00000002c0)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7800, 0x8000, 0x6, 0x5, {{0x8, 0x4, 0x0, 0xa, 0x20, 0x68, 0x0, 0xb, 0x2f, 0x0, @multicast2, @multicast2, {[@generic={0x86, 0xa, "722ff8e913eed242"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)=ANY=[@ANYBLOB="60010000", @ANYRES16=0x0, @ANYBLOB="00002dbd7000fbdbdf25040000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000003000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e30000000000000000008000300010000004400018008000300010000001400020073797a5f74756e00000000000000000014000200776c616e31000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000005c00018008000300020000001400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000000800030000000000140002006272696467655f736c6176655f300000080003000300000048000180140002006873723000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="0900c400", @ANYRES32=r12, @ANYBLOB="080003000200000008000300030000002000018008000300020000001400020069703665727370616e30000000000000"], 0x160}, 0x1, 0x0, 0x0, 0x20004080}, 0x200000c0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f00000000c0)=0x82) 2m25.885017222s ago: executing program 6 (id=1233): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000040)={0x2, 0x1, 0x1, {0xffff, 0x0, 0xf90, 0x5}}) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000000d0601030000000000000000010000010500010008000000000000006c6973743a73657400000000050005000a0000000500010007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000)=0xfffffff9, 0x4) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670800000000005601000000ff07ad6706000002000000070300000ee60000bf250000000000002d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56600a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8ddaf2cdad3d1a74a2f078aa6402483856a6e495408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae06e394c9639564f000fc3cdd05a157544d0200000000000000ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f88e80ef80c6ed3e1ff91ff111000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcbacec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0ddd932d838ff651023853d42210642986f8bbc7340bc8393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d68124674478186edd036f15bf847c33f79e1a0ad3d2b5080ecb01420c9f1b534e969fce97ffff07000009000000bfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861220799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a823e28f359608ea326c77a1aa17318f392a0ec6c188916f4149c503027feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8e68f076c659f56d6c7f97a94d604f45cfe88b30c170000000001000000ef931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f0400000000000000d23b48bb38b31a14ffcddd92c38f6b6d86a0e56d47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f1300007d6072f0cf120ad2ba519afdd43a14000000000000000000000000007ef2f3c58d045f0700000094069acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d000000000000000000007758b1267669ded883b5867c5916a74843b784955108f750c57744c76a09629dd0aaca5cb0f14f49db80a1aa2692c18fbb31cbdb3f2e138e6d5ba3491fc3617b511f24bad26466407e39000000000000d7a1bf4624d31c13a6840f45a7f4e01a50d790132abb36915e35b1ac35bf3921357f638684bba17b8fe1e2123153ecd6d1f76820d4f8fa0b96b50c457ae8d5f2351cdb7bc8170380557bc11cf6ee3395974e37018a2a7473312cb32affb8ff72a253e0d36099e460f13694b9891af526d9608271838e83d17103887f34210dd4c0cf60dec608b4ca5ba2f3037bf381e7b5d5b27820000000000000000000000b719bd34f3244730f708fdd532640edc6b82dd4ad72ecbaccafef806f5447aba2246d56a601bbd8c24ba1e16dda3296ce10de6830"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2m25.875823581s ago: executing program 36 (id=1233): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000040)={0x2, 0x1, 0x1, {0xffff, 0x0, 0xf90, 0x5}}) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000000d0601030000000000000000010000010500010008000000000000006c6973743a73657400000000050005000a0000000500010007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000)=0xfffffff9, 0x4) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1m54.400196967s ago: executing program 1 (id=1710): syz_emit_ethernet(0x4a, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaa0700000000000000bb86dd607f00ef00142c00fe8000000000000000000000000000bbff0200000000000000000000000000012b0000000000000000000000000c907801000000"], 0x0) (async) gettid() (async, rerun: 32) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000440)={0x0, 0x9}) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x2, 0xf506, 0x4f565559, 0x3, 0x0, 0xff, 0x0, 0x6, 0x1, 0x4, 0x1, 0x4}}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) (async, rerun: 32) r4 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x3, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5dcf8863f1271a803c044c0bfc9cd4ac", 0x10) (rerun: 32) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r2) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="2003000011878ea6848c35f2641ef0c9856f42c232969d97383a07fd1c9aebd699669ed7f0213e771479c11147202d7cdf4d6932e614f1a9b652505090460f56423a68421705f4704fad18c15f6b7841822d1d5ee50c79dff0fb5312841e150b397aaf706358649eca9837d867324fb66a475c810cd23475ff0c05832f93e226cf4f99a3fd155c720921fff6797bd0e141619040d4c8bba9bbc8ff79b57bd402846e0137326a3f217bea5be13474bcb318158f87de", @ANYRES16=r6, @ANYBLOB="100027bd7000fbdbdf25090000007c00018044000400200001000a004e2200000003fc02000000000000000000000000000100000000200002000a004e2000000001fc000000000000000000000000000001040000002c0004001400010002004e20e000000200000000000000001400020002004e227f000001000000000000000008000300530c0000f400068004000200ea000300e3625c848a41dc04d2bfc5ee79375af01f5116c77cd9982cd354994e970605d927a5cce58d32d9b09c5679ac7d5e97e04f7c20b223f01ffd46ebe65f92633bddbaef14b853ca5c4f03e7d6bcae915c12cd4af058895c694b8c5cfd2b213a925832423f98340a5d6e8984a6e239191872d3b12882ce899a002c71225d426b1384054c8f5c566dcf9baf6feefaeb6a7f0846ec52b307b5259de00103d2f33195b5c2ae6608b27b174d12852a6db1c5a62097970b773d7d28584461fa51d95eb9d584da4116ebe2d1706d64f156a739f09511051e293eb0d47b6fc048a4fe5c678eac987789c1940000c80004801300010062726f6164636173742d6c696e6b00003400078008000300feffffff080004000f000000080002007f0000000800010007000000080003000300000008000400080000001c00078008000200040000000800030003000000080001001d0000001c00078008000100020000000800010012000000080004000008000014000780080001001c00000008000100060000000900010073797a31000000000900010073797a31000000000900010073797a31000000000900010073797a30000000002400098008000200d30e0000080001000500000008000100ff010000080001000700000024000380080001000800000008000300070000000800010003000000080003007f0000008000028008000200a200000008000100000000000c00038008000200090000000c000380080002001700000008000200080000004c0003800800010007000000080002000e000000080002000004000008000200b6000000080002004e0d000008000200090000000800020000000000080001000900000008000100000200000c0005800800010065746800"], 0x320}}, 0x804) (async) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0xc0001, 0x0) io_uring_enter(r7, 0x34b4, 0xfad, 0xb, &(0x7f0000000200)={[0x80000000]}, 0x8) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00002b6000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, 0x0}], 0x1, 0x9c659263af156f1e, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000140), 0x10) (async) ioctl$SIOCGSTAMPNS(r8, 0x8907, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x48}}, 0x0) (async) read(r8, &(0x7f0000001480)=""/4096, 0x38) (async, rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000004c0)={0x3, 0x1, 0x3, "1739c2d6dd03411263872223255f9ab95eb9fa4f3b1caa1f0727de95b3a309c0", 0x32314d54}) (rerun: 32) 1m54.337404361s ago: executing program 1 (id=1711): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) timer_create(0x6, &(0x7f0000000080)={0x0, 0xf, 0x0, @tid=r1}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) memfd_secret(0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x400000f3, 0x0, 0xb}]}) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r8, &(0x7f0000000700)={0x234, 0x7d, 0x1, {{0x500, 0xf3, 0x0, 0x400, {0x0, 0x0, 0x4}, 0x10000000, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x05\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x57, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbb\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00\x0eG'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x234) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0xc0a85320, &(0x7f0000001400)={{0x80, 0xfe}, 'port1\x00', 0xe3, 0x1b1807, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20102, 0x0) accept4(r0, 0x0, 0x0, 0x0) 1m53.266529335s ago: executing program 1 (id=1734): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') (async) chroot(&(0x7f0000000a40)='./file0\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) gettid() (async) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x97e6}, 0x50) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x97e6}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x2, 0x1, 0x4, 0x2, 0x4, 0x30, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x3e, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xf, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000600)=[r4, 0x1, r5], &(0x7f0000000640)=[{0x0, 0x1, 0xe, 0x8}], 0x10, 0x8000}, 0x94) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000000000000711184000000005e2e10020700000000000000000000000000950000000000000095e5bc3500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000000000000711184000000005e2e10020700000000000000000000000000950000000000000095e5bc3500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f00000000c0)='./bus\x00', 0x50) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x50) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000200)='./file0\x00', 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) 1m52.348041005s ago: executing program 1 (id=1754): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r1, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20004000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES16=r0, @ANYBLOB="01072bbd70000000001a05", @ANYRES64=r0, @ANYRES16=0x0, @ANYRES16=0x0, @ANYRES64=r0], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f00000000c0)="0300f198aaae5a98ca00008508001cf64eabb05435233cd3ac6c8b22390c4aad23b31475712dacbea90dccee463fb6d356efabcbf53b55b1a09736aff4008a0558f73d5ca56c9d6b639260b29d203e", 0x4f, 0x20044884, &(0x7f0000000200)={0x11, 0x8, r4, 0x1, 0xfe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) 1m52.347577336s ago: executing program 1 (id=1755): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x72, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x81, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtclass={0x60, 0x28, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x2}, {0x8, 0xe}, {0xf, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x9d}}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_RATE={0x6, 0x5, {0x69, 0x7}}, @TCA_RATE={0x6, 0x5, {0x28, 0x8}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x9}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m52.284488464s ago: executing program 1 (id=1757): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000580)={0x0, 0x0, "878d4635812ca7c4363cbd74e9e16542"}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) (async) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f00000003c0)={0x5d98, 0x7}) r4 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f00000004c0)=""/184) ioctl$NBD_DISCONNECT(r4, 0xab08) (async, rerun: 32) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) (async) close_range(0xffffffffffffffff, r2, 0x0) (async) fcntl$getownex(r4, 0x10, &(0x7f00000000c0)) syz_open_procfs(r6, &(0x7f0000000240)='net/ip_tables_matches\x00') 1m39.958682581s ago: executing program 7 (id=1904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2040400) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000004e40)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)={0x68, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:memory_device_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) r3 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) unshare(0x22000400) fsmount(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 1m39.954449015s ago: executing program 7 (id=1906): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)="5f719d7a65b60f807ea7ae23fc0f30db3fe9a2ef5641b99632610557bf8460749986b0b723f4eccbef2a8e4b3414f1d2943c", 0x32}], 0x1}, 0x448e4) (async, rerun: 32) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) (rerun: 32) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose}, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) sendto$netrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r3 = getpid() (rerun: 64) kcmp(r3, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'veth1_to_team\x00', {0x2, 0x0, @local}}) syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd604dd30800280601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0020000a4780000131278a46132f60d6fce3eb1929818e962995bbd28a100"/42], 0x0) 1m39.953297402s ago: executing program 7 (id=1908): socket$inet6(0xa, 0x802, 0x0) (async) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @loopback, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002bc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x18000, @loopback, 0x81}, 0x1c, 0x0}}], 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_settings={0x8, 0x4, @te1=0x0}}) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x2, @remote}}, 0x1e) (async) bind$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x2, @remote}}, 0x1e) ioctl$sock_netdev_private(r3, 0x8948, &(0x7f0000000000)) fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) (async) r5 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) mkdirat(r6, &(0x7f0000000000)='./file0\x00', 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x66, '\x00', r2, 0x25, r6}, 0x94) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x66, '\x00', r2, 0x25, r6}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4024}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) semget$private(0x0, 0x4, 0x100) (async) r9 = semget$private(0x0, 0x4, 0x100) semctl$GETVAL(r9, 0x3, 0xc, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m39.819390072s ago: executing program 7 (id=1911): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000002100), 0x1, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004d40)={0x14, 0x31, 0x9, 0x70bd2b, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x844) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x7fff, r0}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, &(0x7f0000000080)=0x8) (async) ioctl$DRM_IOCTL_GET_UNIQUE(r5, 0xc0106401, &(0x7f00000001c0)={0xffffffffffffff39, &(0x7f0000000440)=""/112}) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) (async, rerun: 64) r6 = socket$l2tp(0x2, 0x2, 0x73) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x2, 0x2}], "a77818"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "e4"}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) (async, rerun: 32) close_range(r6, r5, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) (async, rerun: 32) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000380)=0x2) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r13 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r13, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b090d, 0x2, '\x00', @p_u32=0x0}}) (async) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r12], 0x1c}}, 0x0) (async) write$nci(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="6103064b057d818101ce02"], 0xb) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000340)=0x2) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB="011905000207ba852e9243b22ee491f500fdb22c96234530d50a2b1a6634b80908b31db7cea1464107a8477a2641106454f5f40a25671c36d399477ecb79a99c2f109aa31cee4344abfe24f58d8d14ea9953355e6a9aac3e89f747890690ce2509e35d7c5c8fd132564747334e23484d0f083578204b577693e4dd", @ANYRESOCT, @ANYRESOCT, @ANYRESHEX=r8, @ANYRESHEX=r5], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40812) 1m39.819179762s ago: executing program 7 (id=1912): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0xf5, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000600000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c02000005000500020000000500010006"], 0x6c}}, 0x40000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000340)='gfs2\x00', 0x0, &(0x7f0000000380)='acl') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200030000e40800010001000000080001000100000008000300", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 1m39.733989242s ago: executing program 7 (id=1913): unshare(0x22020600) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f0000001140)='pids.current\x00', 0x5000000, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000001200)=ANY=[@ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {}, 0x2}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x16, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) readv(r2, &(0x7f0000000300)=[{&(0x7f0000004200)=""/4111, 0x100f}, {&(0x7f00000003c0)=""/172, 0xac}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/164, 0xa4}], 0x4) sync() ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000001180)={0x0, @nfc={0x27, 0x0, 0x0, 0x2}, @llc={0x1a, 0xffff, 0x7, 0x38, 0x8d, 0x6, @random="811f9dfeeb37"}, @ethernet={0x6, @multicast}, 0xd, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001100)='tunl0\x00', 0x7fffffff, 0x464f9945, 0x2}) sync() sync() ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000001300)=""/210) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES16=r5, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329", @ANYRES64=0x0], 0x2c0}, 0x1, 0x0, 0x0, 0x6000014}, 0x4004) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x109801, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000240)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) fcntl$lock(r10, 0x26, &(0x7f0000000200)={0x1}) ioctl$SNAPSHOT_CREATE_IMAGE(r7, 0x40043311, 0x0) getsockopt$rose(r6, 0x104, 0x6, 0x0, &(0x7f0000000080)) 1m35.852314485s ago: executing program 37 (id=1757): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000580)={0x0, 0x0, "878d4635812ca7c4363cbd74e9e16542"}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) (async) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f00000003c0)={0x5d98, 0x7}) r4 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f00000004c0)=""/184) ioctl$NBD_DISCONNECT(r4, 0xab08) (async, rerun: 32) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) (async) close_range(0xffffffffffffffff, r2, 0x0) (async) fcntl$getownex(r4, 0x10, &(0x7f00000000c0)) syz_open_procfs(r6, &(0x7f0000000240)='net/ip_tables_matches\x00') 1m29.06440737s ago: executing program 5 (id=1973): r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x8, 0x1050a1) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000000)) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000200)=0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r3, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x1c, 0x17, {0x1b, 0x6, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}}}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x40010) syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x8, 0x1050a1) (async) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000000)) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000200)=0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r3, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x1c, 0x17, {0x1b, 0x6, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}}}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x40010) (async) 1m29.064160082s ago: executing program 5 (id=1974): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x3, 0x20}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'trusted.', '\x00'}) sendmmsg$sock(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}, {{0x0, 0x3f, &(0x7f0000000040)=[{&(0x7f00000002c0)="a6", 0x3f}], 0x1}}], 0x2, 0x40448c0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40002, 0x5a) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) readlinkat(r3, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001280)=""/4096, 0x1000) shutdown(r1, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000100)={0x6, 'batadv_slave_0\x00', {0x2}, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004801) sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)="9468cad202", 0x5}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x800) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000026c0)=ANY=[@ANYBLOB='.\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000030000008900000008000300", @ANYRES32=r5, @ANYBLOB="18001d801400008006000500c000000005000700d2000000"], 0x34}}, 0x8040) 1m28.123610522s ago: executing program 5 (id=1979): r0 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x200, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x9, 0x0}, @in=@local, 0x4e23, 0x0, 0x0, 0x2000, 0xa, 0x0, 0x0, 0x2b}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0xfffffffc}, 0x70bd27, 0x1, 0x2, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r1, 0x2285, &(0x7f0000000dc0)={0x51, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffeac, 0x0, 0x0, &(0x7f0000000c00)="d6", 0x0, 0xc30, 0x30, 0x0, 0x4}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) (async) r2 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82) (async) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 1m28.123373215s ago: executing program 5 (id=1980): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 1m28.121498038s ago: executing program 5 (id=1981): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getrlimit(0x7, &(0x7f00000037c0)) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000080)={{'\x00', 0x3}, {0x9}, 0x62, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)="99b48131764a913a3e73cd6a5b57ff1ae3d6ec0916542cd06528e70d91c71ba6e172ff8489820122fe159dc1624f99008914ec1a6d1344952aca2a44ef6ae2a5215e7fd509a92c8af97da32693a65ecb5f709cd6a66390be71ec1e2be9d7a02624c60284cc65413235bd9969859bc795fa97b3324a049ca988888324a80a520b16465ef53f957aff7e064e95817907f864b3d276251550ac09c171", 0x9b, 0x0, &(0x7f0000003500)={0x2, 0x1a7, {0x0, 0xc, 0xd6, "ba543260f01b7e7d854b9d312e14f17e8fee5c114a9997727d9cd0f08866f09a67a27c12d536c62c10240c3f98a5f4f13fe2edee98539f328612d80c018696f3de4ed334e120e26476d01cba2dae8ecd83c9256e2f16afbc7a3a7f51ee0fa537d63c379e911f9ff4105ec21255a035922cf7c35e8b0759fbf1f11d1c1760e3024d2c059ccbe756d0def448c9a1875127bc889aa01e1980edbd69555f437221fe5fc8132fce55171e4e40410461c9566294e085f9bc71670ea2c0a8a5de70562674d71e97f2212b527b6ba249c6e4146f8f1c3650b4d5", 0xc4, "f40aa112eb01628ac74f7815c6c5f7e2c26036a4c347c8a56edeb741e90bb72d481e55ba474d07a78d9e9919a8c17c7a77906b54def2913cbe978a7b09ffa55d79b72e9040d1bd20f9675b813ffbde5e58b77bbccb90224c654b6503e81f282d27aeba7d2a43d67d9daffa658fb729a8bbe3663a91a3f0cce07f08d64bd633da11df6b89365534732999dd74e622e2fe1cd8d73670452db27bcea784ebf7bd792b7759cb55779b193150856408b72ed15042959079e51e9376bc2d168b0cfc7dd0f11242"}, 0x8b, "5900dccc27279d85b404fdbffb4b6074dc82aaa7211ccd0b36211c2c45d0fa628cf0161512fb434daba682702b04fcde8a3afc60e035eb1ef1917b62793311e28af5e28fa0c0d2b6f8deda91cc03628401ec9eb469e6280a5b22aceca4250ea6ede903eeb4c1ea1695b0abeb45e860a51967172a743f7d387fed6795bc542b7e18b602c01b57e04b31db1a"}, 0x23e}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_usbip_server_init(0x4) ioprio_get$pid(0x2, r0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r1, &(0x7f0000003800)=ANY=[@ANYBLOB="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"], 0x32f6) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000800)=@newnexthop={0x3c, 0x68, 0x901, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6}, @NHA_GROUP={0x1c, 0x2, [{0x1, 0x4}, {0x2, 0xd4}, {0x1, 0x2}]}]}, 0x3c}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) rt_sigqueueinfo(r0, 0x34, &(0x7f0000003740)={0x13, 0xffff8001, 0x50000000}) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m24.830918959s ago: executing program 5 (id=2015): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@dev, 0x4e22, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2e}, {}, {0x0, 0x3e3}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0x4}}, 0xe8) r5 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20040, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f0000000280)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newtaction={0x12c, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x118, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_sample={0xc8, 0x2, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xd, 0x10000000, 0x0, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100008, 0x4d82, 0xffffffffffffffff, 0x7ff, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x88, 0x6, 0x4, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x9e07, 0x5, 0x3, 0x1000009}}]}, {0x22, 0x6, "b993a266d04d68c578a189161d7b3605ae1ad871dbd78a555343b82aff5a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x12c}}, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) dup2(r8, r3) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x3c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) fsync(r10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) r13 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r13, 0x3309) getpeername$l2tp(r10, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000140)=0x10) r14 = dup(r12) ioctl$TIOCL_SETSEL(r14, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e, 0x400}}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="2f4fa700"/14, @ANYRES32=r11, @ANYBLOB="18001d801400008006000500c00000000500090000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) 1m23.590755236s ago: executing program 38 (id=1913): unshare(0x22020600) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f0000001140)='pids.current\x00', 0x5000000, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000001200)=ANY=[@ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {}, 0x2}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x16, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) readv(r2, &(0x7f0000000300)=[{&(0x7f0000004200)=""/4111, 0x100f}, {&(0x7f00000003c0)=""/172, 0xac}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/164, 0xa4}], 0x4) sync() ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000001180)={0x0, @nfc={0x27, 0x0, 0x0, 0x2}, @llc={0x1a, 0xffff, 0x7, 0x38, 0x8d, 0x6, @random="811f9dfeeb37"}, @ethernet={0x6, @multicast}, 0xd, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001100)='tunl0\x00', 0x7fffffff, 0x464f9945, 0x2}) sync() sync() ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000001300)=""/210) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES16=r5, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329", @ANYRES64=0x0], 0x2c0}, 0x1, 0x0, 0x0, 0x6000014}, 0x4004) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x109801, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000240)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) fcntl$lock(r10, 0x26, &(0x7f0000000200)={0x1}) ioctl$SNAPSHOT_CREATE_IMAGE(r7, 0x40043311, 0x0) getsockopt$rose(r6, 0x104, 0x6, 0x0, &(0x7f0000000080)) 1m8.814093435s ago: executing program 39 (id=2015): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@dev, 0x4e22, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2e}, {}, {0x0, 0x3e3}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0x4}}, 0xe8) r5 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20040, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f0000000280)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newtaction={0x12c, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x118, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_sample={0xc8, 0x2, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xd, 0x10000000, 0x0, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100008, 0x4d82, 0xffffffffffffffff, 0x7ff, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x88, 0x6, 0x4, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x9e07, 0x5, 0x3, 0x1000009}}]}, {0x22, 0x6, "b993a266d04d68c578a189161d7b3605ae1ad871dbd78a555343b82aff5a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x12c}}, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) dup2(r8, r3) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x3c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) fsync(r10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) r13 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r13, 0x3309) getpeername$l2tp(r10, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000140)=0x10) r14 = dup(r12) ioctl$TIOCL_SETSEL(r14, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e, 0x400}}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="2f4fa700"/14, @ANYRES32=r11, @ANYBLOB="18001d801400008006000500c00000000500090000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) 12.669050201s ago: executing program 9 (id=2811): r0 = syz_io_uring_setup(0x3888, &(0x7f0000000400)={0x0, 0x100002, 0x80, 0x2, 0x10000000}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0], &(0x7f0000000140), 0x1, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000280)={0x401, 0x1, &(0x7f0000000440)=[r5], &(0x7f0000000600)=[0x2], &(0x7f0000000040)=[r6, r6], &(0x7f0000000580)}) io_uring_enter(r0, 0xa3d, 0x8, 0x0, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xffffffffffffffff, 0x6, 0x4, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="a11fa81b133d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000380), 0x40, 0x200040) ioctl$SG_IO(r8, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @scatter={0x7, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=""/214, 0xd6}, {&(0x7f0000000280)=""/211, 0xd3}, {&(0x7f0000000200)=""/103, 0xffffffffffffff9d}, {&(0x7f0000000100)=""/32, 0x20}, {&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f0000000480)=""/247, 0xf7}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f00000003c0)=""/75}, {&(0x7f00000006c0)=""/105}, {&(0x7f0000000740)=""/202}]}, &(0x7f0000000140)="8532b60bfad6", 0x0, 0x7, 0x12, 0x1, 0x0}) 12.305113929s ago: executing program 9 (id=2815): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x189882, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000002540)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)="d306c5", 0x3}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x20040005) (async) sendmmsg$alg(r4, &(0x7f0000002540)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)="d306c5", 0x3}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x20040005) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.08610986s ago: executing program 9 (id=2819): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0xfd, 0xc9, 0x6}}}, 0x6) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2d, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x0, 0x7ffe}, 0xc) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x54, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000) read$FUSE(r0, 0x0, 0x0) 12.085963635s ago: executing program 9 (id=2820): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001100)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @local}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r3 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000201, 0x0, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000580)={r2, 0x1, 0x6}, 0x10) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0xfffffffffffffe88, &(0x7f0000000640)) rt_sigqueueinfo(r5, 0x27, &(0x7f0000001040)={0xe, 0x3, 0x6}) 12.025930611s ago: executing program 9 (id=2823): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x0, 0x0, 0xfffffffe, 0x402226, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a32000000002800048008000240000000000800014000000005140003007665e868315f6d6163768e61700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x515}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x3c}}, 0x40) 11.758693138s ago: executing program 9 (id=2825): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xb, [@restrict={0x7}, @const={0xe}, @volatile={0x8}, @restrict={0x8}, @float={0x1, 0x0, 0x0, 0x10, 0x8}, @enum64={0x4, 0x1, 0x0, 0x13, 0x0, 0xd, [{0x3, 0xff, 0x3}]}, @float={0x1, 0x0, 0x0, 0x10, 0x10}, @volatile={0x4, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x5f, 0x5f, 0x0, 0x5f, 0x61, 0x0, 0x30, 0x0, 0x0]}}, &(0x7f0000000100)=""/127, 0x8f, 0x7f, 0x0, 0x887d, 0x10000}, 0x28) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xb, [@restrict={0x7}, @const={0xe}, @volatile={0x8}, @restrict={0x8}, @float={0x1, 0x0, 0x0, 0x10, 0x8}, @enum64={0x4, 0x1, 0x0, 0x13, 0x0, 0xd, [{0x3, 0xff, 0x3}]}, @float={0x1, 0x0, 0x0, 0x10, 0x10}, @volatile={0x4, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x5f, 0x5f, 0x0, 0x5f, 0x61, 0x0, 0x30, 0x0, 0x0]}}, &(0x7f0000000100)=""/127, 0x8f, 0x7f, 0x0, 0x887d, 0x10000}, 0x28) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x18, 0x6, 0x1) (async) r3 = socket(0x18, 0x6, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) timerfd_create(0x0, 0x0) (async) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000140), 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0400000000fcdbdf257a000000", @ANYRES32=r4, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r6, 0x0, 0x1, 0x0, &(0x7f0000006940)) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000fcf000/0x4000)=nil, 0x4000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r9, &(0x7f0000000280)=[{&(0x7f0000000140)=""/57, 0x39}], 0x1, 0x8, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r8, 0x0, 0x10000, 0x0, 0x4, 0x12fbab, 0x2976b1}) 11.741068111s ago: executing program 40 (id=2825): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xb, [@restrict={0x7}, @const={0xe}, @volatile={0x8}, @restrict={0x8}, @float={0x1, 0x0, 0x0, 0x10, 0x8}, @enum64={0x4, 0x1, 0x0, 0x13, 0x0, 0xd, [{0x3, 0xff, 0x3}]}, @float={0x1, 0x0, 0x0, 0x10, 0x10}, @volatile={0x4, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x5f, 0x5f, 0x0, 0x5f, 0x61, 0x0, 0x30, 0x0, 0x0]}}, &(0x7f0000000100)=""/127, 0x8f, 0x7f, 0x0, 0x887d, 0x10000}, 0x28) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xb, [@restrict={0x7}, @const={0xe}, @volatile={0x8}, @restrict={0x8}, @float={0x1, 0x0, 0x0, 0x10, 0x8}, @enum64={0x4, 0x1, 0x0, 0x13, 0x0, 0xd, [{0x3, 0xff, 0x3}]}, @float={0x1, 0x0, 0x0, 0x10, 0x10}, @volatile={0x4, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x5f, 0x5f, 0x0, 0x5f, 0x61, 0x0, 0x30, 0x0, 0x0]}}, &(0x7f0000000100)=""/127, 0x8f, 0x7f, 0x0, 0x887d, 0x10000}, 0x28) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x18, 0x6, 0x1) (async) r3 = socket(0x18, 0x6, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) timerfd_create(0x0, 0x0) (async) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000140), 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0400000000fcdbdf257a000000", @ANYRES32=r4, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r6, 0x0, 0x1, 0x0, &(0x7f0000006940)) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000fcf000/0x4000)=nil, 0x4000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r9, &(0x7f0000000280)=[{&(0x7f0000000140)=""/57, 0x39}], 0x1, 0x8, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r8, 0x0, 0x10000, 0x0, 0x4, 0x12fbab, 0x2976b1}) 2.777771794s ago: executing program 0 (id=3022): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x9, "26f76fbe82cd40306207a5d741a2b23f9a6505e0326aed6f778ed425e8cc1826", 0xffffffffffffffff}) close_range(r0, r3, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x3, {0x2, 0x0, 0x6}}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.773487189s ago: executing program 0 (id=3024): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0x9, @loopback, 0x2}}, 0x0, 0x1, 0x4, 0x5, 0x42, 0x3, 0x6}, &(0x7f0000000100)=0x9c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='mctp_key_release\x00', r2, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x2, 0x5, 0xf0f3, 0x2, 0x2, 0x6}) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r4, 0x0, 0x9}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='mctp_key_release\x00', r4, 0x0, 0x5}, 0x18) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3, r8}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r1, @in={{0x2, 0x4e21, @private=0xa010102}}, 0xa0a, 0x400, 0xfd, 0x101, 0x40, 0x5, 0x4}, 0x9c) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r9, 0x5411, &(0x7f0000000040)={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r10, r10, &(0x7f0000000000)=0x1, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') iopl(0x3) iopl(0x0) sendto$llc(r10, &(0x7f0000000200)="f194a5462bd5ba08a26b4c4b5f12b172af7c950b6e57c7b8462393639618521cdc702c5ec64cb55daafe828d6a3f5bbc92dd48f5f3ebfc3ed776e6fb9fc38aefc42126a7b154a53b9ec6bc55fe4f03408b7b99f151970982030aa469aab1ecb0646125c42b1f1ff6bd4c999a1e69ba8d4377829067336075ace6e618028fe12152da90999668d268aee4a8e81333d241bcb9d1ae2a1f7c16e3ea4019a07ae8c9a301f6", 0xa3, 0x4040010, &(0x7f00000002c0)={0x1a, 0x204, 0x3, 0xf, 0x1, 0x2}, 0x10) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x400448dc, 0x0) bind$bt_hci(r11, &(0x7f0000000100)={0x1f, 0xffffffffffffffff}, 0x6) 2.704414697s ago: executing program 0 (id=3025): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0x9, 0x3, "70ddda7022"}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000200)={0x1d, r5}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x0) 2.629986329s ago: executing program 0 (id=3027): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r0, &(0x7f00000012c0)=""/4090, 0xffa) 2.03174197s ago: executing program 0 (id=3048): syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x4, 0x0, 0x0}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00'}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000000c0)=0xa, 0x4) r3 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x4) unshare(0x2a040800) unshare(0x800) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001440), 0x111, 0x2}}, 0x20) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup(r4) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r6, &(0x7f0000000340)={0x1a, 0x103, 0x0, 0x0, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) getsockname$packet(r5, 0x0, 0x0) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) read$FUSE(r9, 0x0, 0xfffffffffffffe9b) write$FUSE_INIT(r9, 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f0000001480)="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", 0x2000, 0x0) 2.028115628s ago: executing program 0 (id=3051): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c090000cf2418b0ce55a99f5b9329f1b820c20c596ed18d204f2be354a7155d4d111e6fc0b3a381e04ed6ed45c0a273528f9d2e09c4f296d4aec7d5685d22c50edb47a70e259fd1dab3bf1d406e12a9c63baafe289e6cb6769faa192d5b30b0dc5a3a234d155be9d5d42a9dce477c7be4793dcb433d58f1a0c5a473ea9af4931cc83f53fd26954797164f4adf0047263a807f75baddcba6b8a4cc9a59af39f3e0019bef0deb9420dee4c2f4e819c27292dae8a307c7af426dbac5421bf125c1221122", @ANYRES16=r1, @ANYBLOB="010329bd7000fcdbdf252400000018000180140002007465616d5f736c6176655f3000000000"], 0x2c}}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRES64=0x0, @ANYRES8=r0, @ANYRES32=r0, @ANYRESDEC=r0], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000280)="0f20c035000001000f22c0660f383deff3a766b80c008ee066b882000f00d00f788fa4ba00000f3566ba200066b8340c66ef64360f78190f0119", 0x3a}], 0x1, 0x19, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r5) syz_usb_connect(0x2, 0x2ba, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x64, 0xb, 0xac, 0x40, 0x1b3d, 0x9316, 0xf406, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2a8, 0x2, 0x4, 0x6, 0x80, 0xb, [{{0x9, 0x4, 0x37, 0x10, 0x1, 0x85, 0x48, 0x64, 0xf0, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "6c8e"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7dfbfceb, 0x29, 0x1, 0xb}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x18}, @country_functional={0xa, 0x24, 0x7, 0xe, 0x0, [0xbe7, 0x2]}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0x7f, 0xfc, 0xfe}, @dmm={0x7, 0x24, 0x14, 0x8f1, 0x1}]}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "1523"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x9, 0xfff9, 0x9}, {0x6, 0x24, 0x1a, 0x2, 0x18}, [@mdlm={0x15, 0x24, 0x12, 0x7f}]}], [{{0x9, 0x5, 0x6, 0x4, 0x10, 0x40, 0x2, 0x40}}]}}, {{0x9, 0x4, 0x6, 0x7, 0x6, 0x2, 0x6, 0x0, 0x4, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "95c93d"}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x9, 0x200, 0xf7}, [@mbim={0xc, 0x24, 0x1b, 0x2, 0x3, 0x3, 0xf, 0x5, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x7, 0x8, 0x6d, 0x0, 0x14}]}, @hid_hid={0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0x6ff}}], [{{0x9, 0x5, 0x0, 0x10, 0x10, 0x5, 0xe7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x75}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x8, 0x2, 0x2, [@generic={0x8a, 0x9, "cd85ae060a82bf547c5e04066de5fe1cb9c2d54bbdc692f51cd14a88130e5eb14b165ea06b92025a597e5a8f5e04e6e672201c719d884013746c25277866dbd177e8cbaed7778697656b15f3a7e96585c1838c2a63642527bb04f16c0882ebe8282095ff8cf3a33278619846dbc2f1195acf4591f52d734a4b4fcc5baf92439ddd4088942117339a"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x5, 0x5, 0x2, [@generic={0x7a, 0x3, "8912d86e5c715bb2c556d02fb7e5b10729d29530144e38e7a0109836b7799ad6cef8aac8d967aa367d00179780d0dceb1bf45ce8703b8718c6c4275164f66dc5fc630c1cc2b67fbbe55da23a8e7c91b32e10e88f87896a2286cade75435eaee7c863ce5c09a4fd421f4225e48909ef40d88e7d1556c38441"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x6}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x2, 0x6, 0x3, [@generic={0x6b, 0xe, "b980de50f36f6e52d1dace49541633a6c4f8d9886ff1e4a0f3d1fc0967ecc4232f9a6feb486ef4b21f3577f1c528b372dd37d3aa0ba6c74f7830d6f1b473bf54dfe4bc7ba7a91be15d324cd7d05bee37da1ba49581fdae80ada48bddcac939968651b88dcd1bcddc76"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x9, 0x4, 0x6}}, {{0x9, 0x5, 0x8, 0x4, 0x10, 0x6, 0xfa, 0x6, [@generic={0x2c, 0x21, "e492ef30a1bea8e7802c0eddd743a82b23da44049bb166630b92e7ee5a0f526aae4fcfd2bd21db19dbea"}]}}]}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x200, 0x7, 0x1, 0xe6, 0x10}, 0x23, &(0x7f0000000780)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x9, 0x81, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "2c8b676bd3ab9550b6e088d0ae08268c"}]}, 0x2, [{0x91, &(0x7f00000007c0)=@string={0x91, 0x3, "eac6038182822d5eb5e446ca989ed945156371e7de0ccf429d6224b9df5347d660fbb0a32275a0e0f90f3dd1b88dbb52f056964a83fb8e1828c578f224b6ebd5cfe379767442894947d88b5e61575b72c25f0f4d82ca05a4cd0f6af96ce167eb07fd7e94c2870228c58d50e3f4c024d04e41de8a5ce0ab7aaac8ce7ac3047fdaa648f71962c55671197624cea21e6b"}}, {0x35, &(0x7f0000000880)=@string={0x35, 0x3, "2a67be37fa6e5f0a38400e453aa1de033b245a787182ab7153c8679a98e764fd428745f9db5dd56d4254aa90b9dc355417223d"}}]}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r9, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x2c, r10, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000000}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004884}, 0x3d1b20ebe52bdd56) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x40003f, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) 1.881809421s ago: executing program 4 (id=3052): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)) read$dsp(r1, &(0x7f0000000440)=""/171, 0xab) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r4 = getuid() setfsuid(r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10404, &(0x7f00000002c0)={'trans=virtio,', {[{@afid={'afid', 0x3d, 0x1}}, {@access_uid={'access', 0x3d, r3}}, {@cache_loose}, {@afid={'afid', 0x3d, 0x7e0dcc31}}, {@noxattr}, {@ignoreqv}, {@posixacl}, {@access_uid={'access', 0x3d, r4}}], [{@func={'func', 0x3d, 'FILE_CHECK'}}]}}) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r0, &(0x7f0000000640), 0x10) shutdown(r0, 0x1) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) setfsuid(r2) ioctl$SNDCTL_SEQ_GETTIME(r5, 0x80045113, &(0x7f0000000280)) ppoll(&(0x7f0000000400)=[{r0, 0x480}], 0x1, 0x0, 0x0, 0x0) 1.636113222s ago: executing program 4 (id=3053): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000600)="266745e30d470f01c866baf80cb854df4586ef66bafc0cb0e5eec423f963c200400fc3a88b747c6e66ba400066ed2ef701fbcb00000f01c40f01c866baf80cb848582486ef66bafc0ced", 0x4a}], 0x1, 0x10, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbbf, {}, [{0x58, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x6, 0xd, 0xe}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x320, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5e}}, 0x0) 1.539495738s ago: executing program 4 (id=3054): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x202) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000040)={0xf, 0x2, 'client1\x00', 0x4, "70067ad327c699d3", "78a45e16571ec69bc5afc81e679e50b0d40d6a65820e48ce9b168132d17e5813", 0xffffff2a, 0x7fff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x43, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r3 = epoll_create(0x0) epoll_wait(r3, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x7) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db47c327ab5b7233ac3507e16db41df04709094056af33a6db1e301a74db81f27f6aa6a8ca9d22a565ff96d46e88fa99b284c26c46494072fc2e47da240c71"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) r7 = socket$inet(0x2, 0x4, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) 1.474937076s ago: executing program 4 (id=3055): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r1, &(0x7f0000000200)=""/82, 0x52) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x2, @vbi={0x2, 0x7, 0xdd3, 0x34325258, [0x5, 0x400], [0x2, 0x7], 0x1}}) write(r3, &(0x7f0000000380)="a0fd1a", 0x3) splice(r3, &(0x7f0000000040), r2, 0x0, 0x800000000ff, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000380)={0x50, 0x0, r6, {0x7, 0x27, 0x1, 0x801001a, 0x66d, 0x0, 0x0, 0x400, 0x0, 0x0, 0x40, 0x9}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x8, {0x3, 0x3, 0x100000003, 0x0, 0x0, 0x3881fffc, {0x5, 0x7, 0x1, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x8000, 0x0, 0x0, r7, 0x5, 0x8009}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x0, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000000)={0x1, 0x1}) 916.395908ms ago: executing program 8 (id=3069): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x48884) (async) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) listen(r2, 0x8) (async, rerun: 64) accept4$inet(r2, 0x0, 0x0, 0x80800) (rerun: 64) 916.193465ms ago: executing program 8 (id=3070): r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r4, 0x0, 0x0) 914.799197ms ago: executing program 8 (id=3071): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r2, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000050) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r6, &(0x7f00000004c0)="7644c77302f263daa3a33b93a754654fbaf40a577a0460cd5ba61a9ae4b0e0708f5089ce7af1c9b84d99bb4d015b6219de89699e5bfe16908e2c5f30892e49f1bd123bbcd09b7967409a02a95c5b21216023be8a242a8645a0d7f62add9b1ed93dbde165d9141cbdcdd03d02a5c54014f752345b9497347825a5c826ebd2ff8cccf56dd17fd67572794859bafb88a22cfe871cda4008eee492b5b265618ea0e689c002a4cbe2b70f65dcdca4d54cc9ea7d9d3c7cfb1439278e074ecca31e168899d1899d1aafa7ba4bd93b426cfeef4d79128002eb37d85303c3e39bece43d7846294155780ae6b83b3a718dc86ef2", 0xef) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, r7, 0x8, 0x0, 0x6}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) splice(r6, &(0x7f0000000200)=0x3, r5, &(0x7f0000000280)=0x19f, 0x0, 0x8) bind$xdp(r0, &(0x7f0000000000)={0x2c, 0x2, r7, 0x25}, 0x10) getsockopt(r0, 0x10001, 0x100, &(0x7f0000000400)=""/139, &(0x7f0000000040)=0x8b) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r10, r9, 0x25, 0x0, @void}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000008c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x5}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x48}]}}]}, 0x50}}, 0x4000) 842.29514ms ago: executing program 8 (id=3072): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xf9, 0xfd, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001f80)=[r6], 0x1, 0x0, 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x9, 0x0, 0xffffffff, 0x7fffffff}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x0, 0x0, 0x6, 0x0, 0x1c, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x3}, 0x7, 0x0, 0xfffffffc}}) 841.949244ms ago: executing program 8 (id=3073): r0 = socket(0x10, 0x803, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, &(0x7f0000000600)) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) add_key$user(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000004c0)="7eb48ac7b82c249f8e7214cd213f19ec6b4a877222c4089c06b9d53541024b3f3ebd7bacd2d91850fb94a755b22a505dcc76b65c0577587fc7517f0a7f34c77d95b01fc0d372ee78e094506dcc7805e32e2370a47987bc6bc0d73c5cb52d1448f58738ba5e2a50a4dc8de43631faefb2c73778c8a28a", 0x76, 0xfffffffffffffffa) (async) add_key$user(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000004c0)="7eb48ac7b82c249f8e7214cd213f19ec6b4a877222c4089c06b9d53541024b3f3ebd7bacd2d91850fb94a755b22a505dcc76b65c0577587fc7517f0a7f34c77d95b01fc0d372ee78e094506dcc7805e32e2370a47987bc6bc0d73c5cb52d1448f58738ba5e2a50a4dc8de43631faefb2c73778c8a28a", 0x76, 0xfffffffffffffffa) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000540)={'ip_vti0\x00', r2, 0x10, 0x700, 0xabaa, 0x4def6a59, {{0x1f, 0x4, 0x1, 0x31, 0x7c, 0x65, 0x0, 0x9, 0x29, 0x0, @local, @loopback, {[@rr={0x7, 0x1b, 0x51, [@local, @local, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @multicast1]}, @rr={0x7, 0x1f, 0xa3, [@empty, @loopback, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast2, @dev={0xac, 0x14, 0x14, 0x2d}, @local, @multicast2]}, @ssrr={0x89, 0x23, 0xf, [@private=0xa010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x64010100, @remote, @empty, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @timestamp={0x44, 0x8, 0xc3, 0x0, 0x4, [0xb4d]}]}}}}}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newtfilter={0x504, 0x2c, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xb, 0xb}, {0x1, 0x4}, {0xffe0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x1, 0xd}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_fw={{0x7}, {0x4b8, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff3, 0x3}}, @TCA_FW_MASK={0x8, 0x5, 0x8c}, @TCA_FW_POLICE={0x494, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1d, 0x0, 0x81, 0xffff1295, 0xd, {0x3, 0x1, 0x6, 0x2, 0x3, 0x9}, {0x8, 0xc9fae99513b5c347, 0x6, 0x6, 0x0, 0x54eb}, 0x3ff, 0x4, 0x8}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2001000, 0x7, 0x0, 0x2, 0x7, 0x7df2, 0x4, 0x80, 0x2, 0x0, 0x61, 0x3, 0x7af, 0xb9b, 0x7, 0x10000, 0x0, 0x8, 0x2, 0x200, 0x5, 0x20000000, 0xfffffff2, 0x3, 0x0, 0x6, 0x1, 0x7fff, 0x10000000, 0x1000, 0x7, 0x1, 0x0, 0x100, 0x7e86, 0x2, 0x6, 0xfffff7e2, 0x8a04e6d0, 0x8, 0x0, 0x5, 0x200, 0x8f, 0x1, 0x6, 0x4, 0x3, 0x88, 0x5, 0x3, 0x6, 0x9, 0x10000, 0x1c, 0x8, 0xee, 0xfffffe01, 0xd999, 0x88b7, 0x1, 0xfffffffd, 0x8, 0x0, 0xc, 0xd, 0x6, 0x6, 0x7, 0x4, 0x2, 0x0, 0xa9, 0xacf, 0xe, 0x7, 0x7, 0x8, 0x3, 0x570, 0xb6f5, 0xfff, 0x4, 0x0, 0x9, 0xffff7fff, 0x8000, 0x6748, 0x5, 0x2, 0xffffffcf, 0x5, 0x0, 0x9, 0x4, 0x46, 0x7f, 0x80000001, 0x5, 0x0, 0x9, 0x3, 0x8, 0x4, 0xcbc, 0x80000000, 0xd8, 0x9, 0xfffffffd, 0x8001, 0x9, 0x4, 0x2, 0x1, 0x9, 0x1, 0x4, 0x2, 0x1, 0x4, 0x5, 0x2, 0x1a6, 0x6, 0x3, 0x4, 0x6, 0x9, 0x80, 0x76, 0x100, 0x5, 0x7, 0xa, 0x5, 0xeea4, 0x1000, 0xfff, 0x6, 0xfffffffd, 0xc, 0x37, 0x19, 0x39, 0x4, 0x100, 0x6, 0x7, 0x9, 0x8, 0x7fffffff, 0x0, 0x5, 0x1, 0x82b, 0x5, 0x3, 0x40, 0x57c, 0x3, 0xffff, 0x5, 0x8000, 0x0, 0x10001, 0x4, 0x2, 0xa, 0x55d, 0x79, 0x6b72, 0x2b8e, 0x0, 0x0, 0x10000, 0x8, 0x1, 0x10001, 0x5e, 0x9, 0x3d6, 0x9, 0xd9f1, 0x9, 0x199a, 0x7, 0x7, 0x1, 0x3aa10, 0x5, 0x1, 0x3, 0x40, 0x8, 0x7, 0x6d38, 0x4, 0x3ff, 0x6, 0xf964, 0x0, 0x2, 0x283283a4, 0x8, 0xffff, 0x33, 0x0, 0x3, 0xfffffff8, 0x9, 0xf78, 0x4, 0x5, 0x9, 0x7, 0x4, 0x3, 0xffffff44, 0x8, 0x9, 0x3, 0x8, 0x0, 0x4, 0x2, 0xd43, 0xfffffff7, 0x6, 0x5, 0xa80, 0x8, 0x2, 0x400, 0xd5d, 0x8, 0x4, 0x6, 0x800, 0x8, 0x1, 0x7, 0xf, 0x2, 0x7, 0x8, 0x200, 0x0, 0x9, 0xf, 0x7, 0x3, 0xffffffff, 0x8000, 0x3, 0x10001, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x8166, 0x81, 0x3ff, {0x7, 0x2, 0x5, 0x6, 0x0, 0x400}, {0x6, 0x2, 0xa, 0x3, 0x6, 0x7}, 0xfffffffb, 0x1, 0xaa0}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xe, 0xb}}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x1}}]}}, @TCA_CHAIN={0x8, 0xb, 0xcba9}]}, 0x504}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x48, 0x28, 0xd2b, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_POLICE={0x14, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x48, 0x28, 0xd2b, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_POLICE={0x14, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) 841.765496ms ago: executing program 8 (id=3074): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0x800001, 0x4) (async) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) setresgid(0x0, 0xee01, r1) setuid(0xee00) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc008551b, 0x0) r3 = msgget$private(0x0, 0x383) msgsnd(r3, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) (async) msgsnd(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="0000ff"], 0x8, 0x0) 481.485136ms ago: executing program 4 (id=3075): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="bad00466ed0f20d86635200000000f22d80f3808a00800af0f30f36221b800088ed82e660faef266b9e10a00000f32f2ab", 0x31}], 0x1, 0x15, 0x0, 0x0) syz_emit_ethernet(0xda, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x4d, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x1, 0x12, "8c9300"/16}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x9, "ccf0294e2a3bdb"}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}, @lsrr={0x83, 0x7, 0x62, [@rand_addr=0x64010100]}]}}, "a815a23d"}}}}}, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="66b823010f00d0c4a1f97e05acb9000066450fc7b0494c542336f3a7647400b9800000c00f3235001000000f303e460f01f86726410f79b081000000c4a13351620766b81c018ee8", 0x3c}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x1a) syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad0000"], 0x125) io_setup(0x8, &(0x7f00000002c0)) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x7f000001, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}}}}}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 405.45875ms ago: executing program 4 (id=3077): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0'}, 0xb) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) msgget$private(0x0, 0x81) close_range(r1, 0xffffffffffffffff, 0x0) 235.333391ms ago: executing program 2 (id=3081): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x7, 0xb, &(0x7f0000000040)=0xe}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) (async) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x7, 0xb, &(0x7f0000000040)=0xe}) (async) 96.692373ms ago: executing program 2 (id=3082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000140)={'nat\x00', 0xfb, "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"}, &(0x7f0000000040)=0x11f) (async) lseek(r1, 0x851, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a3000000000140003"], 0x60}}, 0xc000) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4049000) 95.253523ms ago: executing program 2 (id=3083): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="fc4406008e199ae0898c7a8988823619badd4fe626289574f86d0809dc46543a7397ceafd65272d076683d2908aba612c0421a489cbc57359748ade403033388d7b8", 0x42}, {&(0x7f00000048c0)="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", 0x82f}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x4815) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000180)="95f3dc41b8", 0x5, 0xfffffffffffffffe) keyctl$search(0xa, r2, &(0x7f0000000100)='trusted\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/122, 0x7a}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x2}, 0x40000000) 94.789213ms ago: executing program 2 (id=3084): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r2 = syz_io_uring_setup(0x36c1, &(0x7f0000000200)={0x0, 0xbcb5, 0x10000, 0x5, 0x1002}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r1, &(0x7f0000000000)=0x80, &(0x7f00000000c0)=@nfc, 0x0, 0x400}) io_uring_enter(r2, 0x3513, 0x3e44, 0x8, 0x0, 0x0) unshare(0x64000600) 485.712µs ago: executing program 2 (id=3085): mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x1, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x20000000000000, 0x40001) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000180)={0x0, 0xffff0000, 0x40, '\x00', &(0x7f0000000080)=0x4}) mkdirat(r0, &(0x7f0000000240)='.\x00', 0x5) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) r2 = syz_open_dev$usbfs(&(0x7f0000000280), 0x4, 0x800) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) symlinkat(&(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000140)='./file0\x00') 0s ago: executing program 2 (id=3086): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x13, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) (async) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (async) r4 = syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0xcc90, 0x100, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}) (async) io_uring_enter(r4, 0x3513, 0x217, 0xa1, 0x0, 0x0) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x0, 0x3}}, 0x20) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@struct={0x8, 0x2, 0x0, 0xf, 0x0, 0xffffffff, [{0xe, 0x0, 0x3}, {0x7, 0x3, 0xfffffffd}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x46, 0x0, 0x6, 0x901}, 0x28) 0s ago: executing program 8 (id=3088): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BLKGETDISKSEQ(r1, 0x80081280, &(0x7f0000000180)) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000100)={0xf1e5b317, 0x800000, 0x0, 0x6, 0x40001000}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0x1, 0x3, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x4ee0, 0x0, 0x5, 0xb367}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000140)=0xaaf0, 0x4) kernel console output (not intermixed with test programs): adm_t pid=13134 comm="syz.2.2066" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19b9f8ebe9 code=0x0 [ 198.317042][T13140] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 198.319166][T13140] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 198.321753][T13140] vhci_hcd vhci_hcd.0: Device attached [ 198.529876][ T6033] vhci_hcd: vhci_device speed not set [ 198.572732][T10901] usb 14-1: new low-speed USB device number 8 using dummy_hcd [ 198.604648][ T6033] usb 55-1: new full-speed USB device number 2 using vhci_hcd [ 198.761702][T10901] usb 14-1: config 0 has no interfaces? [ 198.763669][T10901] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 198.767757][T10901] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.771649][T10901] usb 14-1: config 0 descriptor?? [ 198.844977][T13148] dlm: no locking on control device [ 198.850926][ T6034] usb 13-1: USB disconnect, device number 18 [ 198.882333][ T40] audit: type=1400 audit(1755795048.968:1051): avc: denied { read } for pid=13153 comm="syz.8.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 198.990769][T13142] vhci_hcd: connection reset by peer [ 198.992470][ T1145] vhci_hcd: stop threads [ 198.992580][ T6162] usb 14-1: USB disconnect, device number 8 [ 198.994018][ T1145] vhci_hcd: release socket [ 198.997464][ T1145] vhci_hcd: disconnect device [ 199.053832][ T6033] vhci_hcd: vhci_device speed not set [ 199.567058][ T5972] Bluetooth: hci5: command tx timeout [ 199.755411][T13160] ALSA: seq fatal error: cannot create timer (-19) [ 199.822355][T13168] bond1: entered promiscuous mode [ 199.825893][T13168] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.947572][T13179] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2079'. [ 200.003059][ T1145] Bluetooth: hci6: Frame reassembly failed (-84) [ 200.006086][T13183] Bluetooth: hci6: Frame reassembly failed (-84) [ 200.484865][ T40] audit: type=1400 audit(1755795050.465:1052): avc: denied { attach_queue } for pid=13184 comm="syz.9.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 200.787969][T13194] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2084'. [ 200.892518][T13205] pvfs2: Unknown parameter 'aclread 0 [ 200.892518][T13205] ' [ 201.737633][T13207] dummy0: entered promiscuous mode [ 201.790676][ T5982] Bluetooth: hci5: command tx timeout [ 201.851994][T13214] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2089'. [ 201.856009][T13214] netlink: 'syz.2.2089': attribute type 6 has an invalid length. [ 201.859019][T13214] netlink: 'syz.2.2089': attribute type 5 has an invalid length. [ 201.862211][T13214] netlink: 'syz.2.2089': attribute type 4 has an invalid length. [ 202.218127][ T5982] Bluetooth: hci6: command 0x1003 tx timeout [ 202.218205][ T5972] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 202.818215][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.820206][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.831306][T13224] netlink: zone id is out of range [ 202.832979][T13224] netlink: zone id is out of range [ 202.834636][T13224] netlink: zone id is out of range [ 202.836740][T13224] netlink: zone id is out of range [ 202.839649][T13227] netlink: 'syz.8.2094': attribute type 58 has an invalid length. [ 202.840337][T13224] netlink: zone id is out of range [ 202.844588][T13224] netlink: zone id is out of range [ 202.846569][T13224] netlink: zone id is out of range [ 202.848207][T13224] netlink: zone id is out of range [ 202.851139][T13224] netlink: zone id is out of range [ 202.930041][T13232] binder_alloc: 13231: binder_alloc_buf size 8 failed, no address space [ 202.932591][T13232] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 203.077616][ T40] audit: type=1400 audit(1755795052.897:1053): avc: denied { bind } for pid=13247 comm="syz.2.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 203.762322][ T5972] Bluetooth: hci4: unexpected subevent 0x01 length: 16 < 18 [ 203.803907][T13261] binfmt_misc: register: failed to install interpreter file ./file0 [ 203.883971][T13269] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2108'. [ 203.887055][T13269] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2108'. [ 204.024817][ T5972] Bluetooth: hci5: command 0x0405 tx timeout [ 204.237570][T13288] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2113'. [ 204.400436][T13302] netlink: 'syz.9.2118': attribute type 10 has an invalid length. [ 204.405632][T13302] team0: Port device dummy0 added [ 205.171176][T13328] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2127'. [ 205.195331][T13330] netlink: 'syz.8.2128': attribute type 58 has an invalid length. [ 205.257126][ T40] audit: type=1400 audit(1755795054.936:1054): avc: denied { write } for pid=13338 comm="syz.8.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 205.419272][T13346] syz.9.2132 (13346): drop_caches: 2 [ 205.696524][T13361] net_ratelimit: 14 callbacks suppressed [ 205.696541][T13361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.774525][ T40] audit: type=1400 audit(1755795055.422:1055): avc: denied { bind } for pid=13371 comm="syz.8.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 205.793193][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2140'. [ 205.840483][T13383] loop6: detected capacity change from 0 to 6656 [ 205.842884][T13383] buffer_io_error: 44 callbacks suppressed [ 205.842892][T13383] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.847300][T13383] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.849935][T13383] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.852384][T13383] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.854921][T13383] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.857529][T13383] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.860243][T13383] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.862983][T13383] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.865987][T13383] ldm_validate_partition_table(): Disk read failed. [ 205.868048][T13383] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.870550][T13383] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.873019][T13383] Dev loop6: unable to read RDB block 0 [ 205.874996][T13383] loop6: unable to read partition table [ 205.877023][T13383] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 206.077445][T10907] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 206.130436][T13394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13394 comm=syz.8.2152 [ 206.135056][T13394] netlink: 'syz.8.2152': attribute type 1 has an invalid length. [ 206.148042][T13394] bond1: (slave bridge3): making interface the new active one [ 206.151663][T13394] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 206.173255][T13398] netlink: 4088 bytes leftover after parsing attributes in process `syz.8.2153'. [ 206.237968][ T5972] Bluetooth: hci5: command 0x0405 tx timeout [ 206.240807][T10907] usb 14-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 206.244196][T10907] usb 14-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 206.247236][T10907] usb 14-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 206.250016][T10907] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.253684][T13379] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 206.257365][T10907] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.472147][T10901] usb 14-1: USB disconnect, device number 9 [ 206.527449][T13412] fuse: Bad value for 'fd' [ 206.541902][T13414] vlan2: entered promiscuous mode [ 206.543967][T13414] bridge0: entered promiscuous mode [ 206.562188][ T40] audit: type=1400 audit(1755795056.161:1056): avc: denied { remount } for pid=13416 comm="syz.2.2159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 206.687881][T13379] openvswitch: netlink: Missing key (keys=40, expected=100) [ 206.971158][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2167'. [ 206.974840][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2167'. [ 206.981042][ T40] audit: type=1400 audit(1755795056.545:1057): avc: denied { remount } for pid=13442 comm="syz.8.2167" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 207.125066][ T6034] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 207.204842][T13449] netlink: 'syz.8.2169': attribute type 1 has an invalid length. [ 207.218958][T13448] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.222258][T13448] bond2: (slave bond3): making interface the new active one [ 207.224763][T13448] bond2: (slave bond3): Enslaving as an active interface with an up link [ 207.228989][T13448] netlink: 'syz.8.2169': attribute type 10 has an invalid length. [ 207.231463][T13448] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2169'. [ 207.286962][T13449] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 207.297633][T13448] netlink: 'syz.8.2169': attribute type 10 has an invalid length. [ 207.300755][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2169'. [ 207.304295][ T6034] usb 7-1: unable to get BOS descriptor or descriptor too short [ 207.304398][T13448] bond2: entered promiscuous mode [ 207.308882][ T6034] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 207.308946][T13448] bond3: entered promiscuous mode [ 207.311376][ T6034] usb 7-1: can't read configurations, error -71 [ 207.313459][T13448] bond2: entered allmulticast mode [ 207.317304][T13448] bond3: entered allmulticast mode [ 207.320431][T13448] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.323672][T13448] bridge0: port 3(bond2) entered blocking state [ 207.326150][T13448] bridge0: port 3(bond2) entered disabled state [ 207.331236][T13448] bridge0: port 3(bond2) entered blocking state [ 207.333188][T13448] bridge0: port 3(bond2) entered forwarding state [ 207.357613][T13458] libceph: resolve ' [ 207.357613][T13458] -&fYǝa2i [ 207.357613][T13458] .?&*&' (ret=-3): failed [ 207.379492][ T40] audit: type=1400 audit(1755795056.919:1058): avc: denied { shutdown } for pid=13462 comm="syz.8.2173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 207.415117][T13468] kvm: vcpu 4: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 207.422433][T13468] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 207.430029][T13471] pimreg3: entered allmulticast mode [ 207.543637][T13478] kvm: kvm [13477]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 207.547313][T13478] kvm: kvm [13477]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 207.714940][ T5972] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 207.717455][ T5972] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 207.719887][ T5972] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 207.722331][ T5972] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 207.725074][ T5972] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 207.790329][T13494] chnl_net:caif_netlink_parms(): no params data found [ 207.829671][T13494] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.832701][T13494] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.835301][T13494] bridge_slave_0: entered allmulticast mode [ 207.837840][T13494] bridge_slave_0: entered promiscuous mode [ 207.841975][T13494] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.844220][T13494] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.846575][T13494] bridge_slave_1: entered allmulticast mode [ 207.849426][T13494] bridge_slave_1: entered promiscuous mode [ 207.857992][T13507] 9pnet_virtio: no channels available for device syz [ 207.857995][ T40] audit: type=1400 audit(1755795057.368:1059): avc: denied { mounton } for pid=13506 comm="syz.2.2182" path="/54/file0" dev="9p" ino=35913871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 207.879626][T13494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.883977][T13494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.904246][T13494] team0: Port device team_slave_0 added [ 207.907090][T13494] team0: Port device team_slave_1 added [ 207.930007][T13494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.932132][T13494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.940593][T13494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.945580][T13494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.947945][T13494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.957027][T13494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.984078][T13494] hsr_slave_0: entered promiscuous mode [ 207.987006][T13494] hsr_slave_1: entered promiscuous mode [ 207.989661][T13494] debugfs: 'hsr0' already exists in 'hsr' [ 207.992264][T13494] Cannot create hsr debugfs directory [ 208.330979][T13494] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 208.335482][T13494] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 208.339013][T13494] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 208.342498][T13494] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 208.358978][T13494] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.361779][T13494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.364892][T13494] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.368048][T13494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.394697][T13494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.402371][T12238] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.406314][T12238] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.415912][T13494] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.420612][T12238] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.422895][T12238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.427259][T12238] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.429560][T12238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.511119][T13494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.598686][T13494] veth0_vlan: entered promiscuous mode [ 208.603358][T13494] veth1_vlan: entered promiscuous mode [ 208.613104][T13494] veth0_macvtap: entered promiscuous mode [ 208.615999][T13494] veth1_macvtap: entered promiscuous mode [ 208.622325][T13494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.627560][T13494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.632121][ T1177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.635631][ T1177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.640822][T13573] netlink: 'syz.8.2188': attribute type 11 has an invalid length. [ 208.641159][ T1177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.647539][ T1177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.667645][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.670002][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.679067][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.681613][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.771623][T13601] tmpfs: Bad value for 'mpol' [ 208.820608][ T5981] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 209.070756][T10908] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 209.252597][T10908] usb 9-1: Using ep0 maxpacket: 8 [ 209.255554][T10908] usb 9-1: config 0 interface 0 has no altsetting 0 [ 209.257902][T10908] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 209.260759][T10908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.264456][T10908] usb 9-1: config 0 descriptor?? [ 209.700436][T10908] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 209.915495][ T5981] Bluetooth: hci6: command tx timeout [ 209.997922][T13678] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 210.003622][T13678] __nla_validate_parse: 6 callbacks suppressed [ 210.003673][T13678] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2212'. [ 210.028024][T13680] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2213'. [ 210.030921][T13680] netlink: 'syz.9.2213': attribute type 7 has an invalid length. [ 210.033443][T13680] netlink: 'syz.9.2213': attribute type 8 has an invalid length. [ 210.035930][T13680] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2213'. [ 210.040459][T13680] gretap0: entered promiscuous mode [ 210.042687][T13680] batadv_slave_1: entered promiscuous mode [ 210.043740][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2214'. [ 210.048489][T13682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2214'. [ 210.052399][T13680] gretap0: left promiscuous mode [ 210.054649][T13680] batadv_slave_1: left promiscuous mode [ 210.118605][T12238] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.121342][T12238] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.124125][T12238] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.127142][T12238] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.150688][T13693] netlink: 'syz.2.2218': attribute type 3 has an invalid length. [ 210.153147][T13693] netlink: 'syz.2.2218': attribute type 3 has an invalid length. [ 210.271900][T13700] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2220'. [ 210.296665][T13704] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2221'. [ 210.448064][ T40] audit: type=1400 audit(1755795059.790:1060): avc: denied { unmount } for pid=10235 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 210.522181][ T40] audit: type=1400 audit(1755795059.856:1061): avc: denied { write } for pid=13705 comm="syz.8.2222" name="file0" dev="tmpfs" ino=1395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 210.529400][ T40] audit: type=1400 audit(1755795059.856:1062): avc: denied { open } for pid=13705 comm="syz.8.2222" path="/262/file0" dev="tmpfs" ino=1395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 210.556896][ T6034] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 210.557580][T13709] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.2223'. [ 210.605855][T13713] Invalid source name [ 210.607289][T13713] UBIFS error (pid: 13713): cannot open "ubifs", error -22 [ 210.727839][ T6034] usb 7-1: Using ep0 maxpacket: 16 [ 210.735525][ T6034] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 210.738690][ T6034] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 210.741232][ T6034] usb 7-1: Product: syz [ 210.742620][ T6034] usb 7-1: Manufacturer: syz [ 210.744140][ T6034] usb 7-1: SerialNumber: syz [ 210.746472][ T6034] usb 7-1: config 0 descriptor?? [ 211.020687][T13719] vlan2: entered allmulticast mode [ 211.022443][T13719] bond0: entered allmulticast mode [ 211.024052][T13719] bond_slave_0: entered allmulticast mode [ 211.025847][T13719] bond_slave_1: entered allmulticast mode [ 211.288541][ T40] audit: type=1326 audit(1755795060.576:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.8.2228" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221fb8ebe9 code=0x7ffc0000 [ 211.296988][ T40] audit: type=1326 audit(1755795060.576:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.8.2228" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221fb8ebe9 code=0x7ffc0000 [ 211.306149][ T40] audit: type=1326 audit(1755795060.576:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.8.2228" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f221fb8ebe9 code=0x7ffc0000 [ 211.598205][T13731] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 212.029055][ T6162] usb 9-1: USB disconnect, device number 16 [ 212.149640][ T5981] Bluetooth: hci6: command 0x041b tx timeout [ 212.309740][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 212.309752][ T40] audit: type=1400 audit(202.801:1111): avc: denied { execute } for pid=13739 comm="syz.8.2233" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 212.417096][ T1171] block nbd1: Possible stuck request ffff888027c65080: control (read@0,1024B). Runtime 60 seconds [ 212.420732][ T1171] block nbd1: Possible stuck request ffff888027c65240: control (read@1024,1024B). Runtime 60 seconds [ 212.424363][ T1171] block nbd1: Possible stuck request ffff888027c65400: control (read@2048,1024B). Runtime 60 seconds [ 212.428821][ T1171] block nbd1: Possible stuck request ffff888027c655c0: control (read@3072,1024B). Runtime 60 seconds [ 213.514685][ T6034] usb 7-1: USB disconnect, device number 5 [ 213.531933][T13758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2237'. [ 213.645612][T13761] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 213.740156][T13763] netlink: 504 bytes leftover after parsing attributes in process `syz.8.2238'. [ 213.743956][ T40] audit: type=1400 audit(204.157:1112): avc: denied { mounton } for pid=13762 comm="syz.8.2238" path="/273/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 213.782707][T13768] netlink: 'syz.8.2240': attribute type 6 has an invalid length. [ 214.362786][ T5981] Bluetooth: hci6: command 0x041b tx timeout [ 214.654360][T13776] veth1_macvtap: left promiscuous mode [ 214.656555][T13776] macsec0: entered promiscuous mode [ 214.658212][T13776] macsec0: entered allmulticast mode [ 214.673559][T13776] veth1_macvtap: entered promiscuous mode [ 214.675375][T13776] veth1_macvtap: entered allmulticast mode [ 214.677410][T13776] macsec0: left promiscuous mode [ 214.679018][T13776] macsec0: left allmulticast mode [ 214.680615][T13776] veth1_macvtap: left allmulticast mode [ 214.707638][T13778] binder: 13777:13778 unknown command 0 [ 214.709452][T13778] binder: 13777:13778 ioctl c0306201 200000000080 returned -22 [ 214.714284][T13778] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 214.964210][T13791] netlink: 'syz.2.2248': attribute type 1 has an invalid length. [ 214.980721][T13795] netlink: 'syz.4.2249': attribute type 1 has an invalid length. [ 215.053215][T13801] ISOFS: Unable to identify CD-ROM format. [ 215.098723][T13808] overlayfs: failed to resolve './file0': -2 [ 215.154585][T13814] netlink: 'syz.2.2257': attribute type 12 has an invalid length. [ 215.571978][T13847] __nla_validate_parse: 4 callbacks suppressed [ 215.571990][T13847] netlink: 1176 bytes leftover after parsing attributes in process `syz.8.2267'. [ 215.586611][T13847] hsr_slave_1 (unregistering): left promiscuous mode [ 215.590508][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2266'. [ 215.610415][T13850] FAULT_INJECTION: forcing a failure. [ 215.610415][T13850] name failslab, interval 1, probability 0, space 0, times 0 [ 215.615801][T13850] CPU: 1 UID: 0 PID: 13850 Comm: syz.2.2268 Not tainted syzkaller #0 PREEMPT(full) [ 215.615816][T13850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 215.615823][T13850] Call Trace: [ 215.615827][T13850] [ 215.615831][T13850] dump_stack_lvl+0x16c/0x1f0 [ 215.615865][T13850] should_fail_ex+0x512/0x640 [ 215.615883][T13850] should_failslab+0xc2/0x120 [ 215.615897][T13850] __kmalloc_cache_noprof+0x6a/0x3e0 [ 215.615914][T13850] ? __pfx_get_l2cap_conn.constprop.0+0x10/0x10 [ 215.615933][T13850] ? l2cap_chan_create+0x44/0x920 [ 215.615946][T13850] l2cap_chan_create+0x44/0x920 [ 215.615958][T13850] lowpan_control_write+0x2dc/0x740 [ 215.615968][T13850] ? __pfx_lowpan_control_write+0x10/0x10 [ 215.615978][T13850] ? __pfx_get_pid_task+0x10/0x10 [ 215.615988][T13850] ? rcu_is_watching+0x12/0xc0 [ 215.616002][T13850] ? lock_release+0x201/0x2f0 [ 215.616019][T13850] ? __debugfs_file_get+0x1fe/0x840 [ 215.616037][T13850] ? rcu_is_watching+0x12/0xc0 [ 215.616051][T13850] full_proxy_write+0x12e/0x1a0 [ 215.616061][T13850] ? __pfx_full_proxy_write+0x10/0x10 [ 215.616070][T13850] vfs_write+0x29d/0x11d0 [ 215.616082][T13850] ? __pfx___mutex_lock+0x10/0x10 [ 215.616100][T13850] ? __pfx_vfs_write+0x10/0x10 [ 215.616110][T13850] ? __fget_files+0x204/0x3c0 [ 215.616122][T13850] ? rcu_is_watching+0x12/0xc0 [ 215.616136][T13850] ? __fget_files+0x20e/0x3c0 [ 215.616149][T13850] ksys_write+0x12a/0x250 [ 215.616159][T13850] ? __pfx_ksys_write+0x10/0x10 [ 215.616172][T13850] do_syscall_64+0xcd/0x4c0 [ 215.616184][T13850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.616196][T13850] RIP: 0033:0x7f19b9f8ebe9 [ 215.616204][T13850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.616215][T13850] RSP: 002b:00007f19bae9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 215.616232][T13850] RAX: ffffffffffffffda RBX: 00007f19ba1b5fa0 RCX: 00007f19b9f8ebe9 [ 215.616238][T13850] RDX: 000000000000001b RSI: 0000200000000080 RDI: 0000000000000003 [ 215.616245][T13850] RBP: 00007f19bae9a090 R08: 0000000000000000 R09: 0000000000000000 [ 215.616251][T13850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.616258][T13850] R13: 00007f19ba1b6038 R14: 00007f19ba1b5fa0 R15: 00007ffeec976dc8 [ 215.616268][T13850] [ 215.705371][T13857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2270'. [ 215.715150][ T6033] IPVS: starting estimator thread 0... [ 215.786110][T13857] kvm: kvm [13856]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 215.789442][T13857] kvm: kvm [13856]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 215.808470][T13857] kvm: kvm [13856]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 215.817958][T13861] IPVS: using max 56 ests per chain, 134400 per kthread [ 215.829003][T13857] kvm: kvm [13856]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 215.832311][T13857] kvm: kvm [13856]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 215.848296][T13857] kvm_intel: kvm [13856]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 215.875769][T13869] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2274'. [ 216.167688][T13879] FAULT_INJECTION: forcing a failure. [ 216.167688][T13879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.173370][T13879] CPU: 1 UID: 0 PID: 13879 Comm: syz.4.2278 Not tainted syzkaller #0 PREEMPT(full) [ 216.173387][T13879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 216.173393][T13879] Call Trace: [ 216.173397][T13879] [ 216.173401][T13879] dump_stack_lvl+0x16c/0x1f0 [ 216.173415][T13879] should_fail_ex+0x512/0x640 [ 216.173435][T13879] _copy_to_user+0x32/0xd0 [ 216.173450][T13879] simple_read_from_buffer+0xcb/0x170 [ 216.173462][T13879] proc_fail_nth_read+0x197/0x240 [ 216.173475][T13879] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.173487][T13879] ? security_file_permission+0x71/0x210 [ 216.173505][T13879] ? rw_verify_area+0xcf/0x6c0 [ 216.173533][T13879] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.173548][T13879] vfs_read+0x1e1/0xcf0 [ 216.173558][T13879] ? __pfx___mutex_lock+0x10/0x10 [ 216.173571][T13879] ? __pfx_vfs_read+0x10/0x10 [ 216.173580][T13879] ? __fget_files+0x204/0x3c0 [ 216.173592][T13879] ? rcu_is_watching+0x12/0xc0 [ 216.173607][T13879] ? __fget_files+0x20e/0x3c0 [ 216.173620][T13879] ksys_read+0x12a/0x250 [ 216.173630][T13879] ? __pfx_ksys_read+0x10/0x10 [ 216.173642][T13879] do_syscall_64+0xcd/0x4c0 [ 216.173654][T13879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.173665][T13879] RIP: 0033:0x7ff9e8d8d5fc [ 216.173674][T13879] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 216.173685][T13879] RSP: 002b:00007ff9e9b6a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 216.173697][T13879] RAX: ffffffffffffffda RBX: 00007ff9e8fb5fa0 RCX: 00007ff9e8d8d5fc [ 216.173704][T13879] RDX: 000000000000000f RSI: 00007ff9e9b6a0a0 RDI: 0000000000000007 [ 216.173710][T13879] RBP: 00007ff9e9b6a090 R08: 0000000000000000 R09: 0000000000000000 [ 216.173717][T13879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.173723][T13879] R13: 00007ff9e8fb6038 R14: 00007ff9e8fb5fa0 R15: 00007ffcdf8c47e8 [ 216.173733][T13879] [ 216.250193][T13883] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 216.252442][T13883] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 216.257196][T13883] vhci_hcd vhci_hcd.0: Device attached [ 216.412681][T13905] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2286'. [ 216.447322][ T6112] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 216.511649][T10907] usb 53-1: new high-speed USB device number 4 using vhci_hcd [ 216.528766][ T40] audit: type=1400 audit(206.758:1113): avc: denied { read } for pid=13929 comm="syz.2.2294" dev="sockfs" ino=64687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 216.535393][ T6034] usb 13-1: new high-speed USB device number 19 using dummy_hcd [ 216.548744][T13930] tipc: Started in network mode [ 216.550755][T13930] tipc: Node identity b6834c505bff, cluster identity 4711 [ 216.553079][T13930] tipc: Enabled bearer , priority 0 [ 216.558637][T13929] tipc: Resetting bearer [ 216.587469][T13929] tipc: Disabling bearer [ 216.596920][ T5972] Bluetooth: hci6: command 0x041b tx timeout [ 216.609832][ T6112] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 216.613188][ T6112] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 216.616243][ T6112] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 216.623146][ T6112] usb 9-1: string descriptor 0 read error: -22 [ 216.625150][ T6112] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.628021][ T40] audit: type=1400 audit(206.842:1114): avc: denied { mounton } for pid=13926 comm="syz.9.2292" path="/115/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 216.628237][ T6112] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.650919][T13885] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 216.706138][ T6034] usb 13-1: config 2 has an invalid interface number: 94 but max is 2 [ 216.709535][ T6034] usb 13-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 216.713127][ T6034] usb 13-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 216.717513][ T6034] usb 13-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 216.720992][ T6034] usb 13-1: config 2 has no interface number 0 [ 216.723067][ T6034] usb 13-1: config 2 interface 94 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 216.728933][ T6034] usb 13-1: config 2 interface 94 has no altsetting 0 [ 216.732777][ T6034] usb 13-1: New USB device found, idVendor=199b, idProduct=ba30, bcdDevice=9a.63 [ 216.735647][ T6034] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.738547][ T6034] usb 13-1: Product: syz [ 216.739925][ T6034] usb 13-1: Manufacturer: syz [ 216.741438][ T6034] usb 13-1: SerialNumber: syz [ 216.868959][ T6112] cdc_ncm 9-1:1.0: bind() failure [ 216.872298][ T6112] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 216.874480][ T6112] cdc_ncm 9-1:1.1: bind() failure [ 216.879375][ T6112] usb 9-1: USB disconnect, device number 17 [ 216.966177][T13888] vhci_hcd: connection reset by peer [ 216.966635][ T6034] cp210x 13-1:2.94: cp210x converter detected [ 216.968865][T12234] vhci_hcd: stop threads [ 216.970670][ T6034] cp210x 13-1:2.94: failed to get vendor val 0x370b size 1: -71 [ 216.972583][T12234] vhci_hcd: release socket [ 216.976488][ T6034] cp210x 13-1:2.94: querying part number failed [ 216.976691][T12234] vhci_hcd: disconnect device [ 216.979364][ T6034] usb 13-1: cp210x converter now attached to ttyUSB0 [ 216.983344][ T6034] usb 13-1: USB disconnect, device number 19 [ 216.986995][ T6034] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 216.990239][ T6034] cp210x 13-1:2.94: device disconnected [ 217.448681][T13957] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 217.519055][T13966] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 217.521573][T13966] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 217.524131][T13966] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 217.526631][T13966] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 217.534135][T13966] binder: 13965:13966 ioctl c014563b 200000000040 returned -22 [ 217.618040][T13977] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2309'. [ 217.648005][T13985] netlink: 'syz.8.2311': attribute type 3 has an invalid length. [ 217.650415][T13985] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.2311'. [ 217.658824][T13981] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 217.749075][T13997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2316'. [ 217.749577][T13995] only policy match revision 0 supported [ 217.754167][T13995] unable to load match [ 217.761787][T13997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2316'. [ 217.762852][ T61] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 217.829290][T14007] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2320'. [ 217.933329][ T61] usb 14-1: Using ep0 maxpacket: 16 [ 217.938158][ T61] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.942297][ T61] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.951256][ T61] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 217.964725][ T61] usb 14-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 217.969334][ T61] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.987156][ T61] usb 14-1: config 0 descriptor?? [ 218.113059][T14044] XFS (nullb0): Invalid superblock magic number [ 218.210797][T13964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.216155][T13964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.225340][T14059] netlink: 'syz.4.2325': attribute type 4 has an invalid length. [ 218.434896][ T61] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 218.439266][ T61] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 218.441493][ T61] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 218.443682][ T61] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 218.445941][ T61] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 218.450071][ T61] input: HID 0955:7214 Haptics as /devices/virtual/input/input42 [ 218.462169][ T61] shield 0003:0955:7214.0006: Registered Thunderstrike controller [ 218.464767][ T61] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 218.501350][T14074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=14074 comm=syz.4.2331 [ 218.520431][T14076] usb usb8: usbfs: process 14076 (syz.4.2332) did not claim interface 0 before use [ 218.547351][T14076] bond0: entered allmulticast mode [ 218.549023][T14076] bond_slave_0: entered allmulticast mode [ 218.550841][T14076] bond_slave_1: entered allmulticast mode [ 218.577106][T14080] sctp: [Deprecated]: syz.4.2333 (pid 14080) Use of int in maxseg socket option. [ 218.577106][T14080] Use struct sctp_assoc_value instead [ 218.652492][T10902] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 218.652678][T10908] usb 14-1: USB disconnect, device number 10 [ 218.656151][T10902] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 218.662840][T10902] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 218.666416][T10902] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 218.754084][ T40] audit: type=1400 audit(208.834:1115): avc: denied { execute } for pid=14085 comm="syz.4.2336" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=65032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 218.772043][T14091] option changes via remount are deprecated (pid=14090 comm=syz.4.2337) [ 218.809941][ T5972] Bluetooth: hci6: command 0x041b tx timeout [ 218.815432][T14097] erspan0: entered promiscuous mode [ 218.821402][T14099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14099 comm=syz.2.2341 [ 218.840262][T14101] 8021q: VLANs not supported on ipvlan1 [ 218.955971][ T40] audit: type=1400 audit(209.021:1116): avc: denied { setattr } for pid=14114 comm="syz.2.2347" name="PF_CAIF" dev="sockfs" ino=66569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 219.052246][T14132] netlink: 'syz.8.2352': attribute type 11 has an invalid length. [ 219.238809][ T53] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 219.243858][ T53] dvb_usb_dibusb_mb 10-1:179.206: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 219.249913][ T53] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in cold state, will try to load a firmware [ 219.253058][T10908] IPVS: starting estimator thread 0... [ 219.255486][ T53] usb 10-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 219.259930][ T53] usb 10-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 219.355159][T14155] IPVS: using max 55 ests per chain, 132000 per kthread [ 219.451416][ T6033] usb 13-1: new high-speed USB device number 20 using dummy_hcd [ 219.624428][ T6033] usb 13-1: config index 0 descriptor too short (expected 23569, got 27) [ 219.627199][ T6033] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.631124][ T6033] usb 13-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 219.634337][ T6033] usb 13-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 219.636916][ T6033] usb 13-1: Manufacturer: syz [ 219.639201][ T6033] usb 13-1: config 0 descriptor?? [ 219.676001][ T6033] rc_core: IR keymap rc-hauppauge not found [ 219.678530][ T6033] Registered IR keymap rc-empty [ 219.680990][ T6033] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 219.684787][ T6033] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input43 [ 219.904975][ T6162] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 219.908386][ T6162] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz1] on syz0 [ 219.911957][T10902] usb 13-1: USB disconnect, device number 20 [ 219.956602][ T40] audit: type=1326 audit(209.966:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14134 comm="syz.4.2353" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e8d8ebe9 code=0x7fc00000 [ 219.998293][T14162] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 219.998488][T14168] fuse: Unknown parameter 'A' [ 220.219737][T14188] 9pnet_virtio: no channels available for device syz [ 220.222181][T14188] 9pnet_virtio: no channels available for device syz [ 220.271191][T14192] netlink: 'syz.4.2368': attribute type 10 has an invalid length. [ 220.278984][T14192] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 220.281755][T14192] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 220.286856][T14191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.399055][ T40] audit: type=1400 audit(210.378:1118): avc: denied { ioctl } for pid=14197 comm="syz.9.2370" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xae42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 220.443698][T14201] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 220.681485][ T6034] e1000 0000:00:06.0 eth0: Reset adapter [ 220.798706][ T6034] e1000 0000:00:06.0 eth0: Reset adapter [ 220.799510][ T40] audit: type=1400 audit(210.752:1119): avc: denied { map } for pid=14216 comm="syz.8.2376" path="socket:[66079]" dev="sockfs" ino=66079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 220.824290][T14222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14222 comm=syz.8.2377 [ 220.916626][ T6034] e1000 0000:00:06.0 eth0: Reset adapter [ 221.033615][ T5972] Bluetooth: hci6: command 0x041b tx timeout [ 221.974571][T10907] vhci_hcd: vhci_device speed not set [ 222.658997][ T5972] Bluetooth: hci0: command tx timeout [ 223.172874][ T6034] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 233.312671][T14270] input: syz1 as /devices/virtual/input/input45 [ 233.364088][ T40] audit: type=1400 audit(222.501:1120): avc: denied { setattr } for pid=14267 comm="syz.8.2381" name="cuse" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 234.191350][T14267] [U]  [ 241.149418][T14277] __nla_validate_parse: 9 callbacks suppressed [ 241.149428][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2383'. [ 241.155274][T14277] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2383'. [ 241.163412][T14279] trusted_key: encrypted_key: hex blob is missing [ 241.212117][T14288] comedi comedi3: comedi_config --init_data is deprecated [ 241.406729][T14294] netlink: 'syz.9.2392': attribute type 10 has an invalid length. [ 241.410242][T14294] openvswitch: netlink: Flow key attr not present in new flow. [ 241.430392][T14300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.431217][T10908] usb 13-1: new high-speed USB device number 21 using dummy_hcd [ 241.434294][T14300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.463439][ T6034] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 241.493784][T14300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.496768][T14300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.592416][T10908] usb 13-1: Using ep0 maxpacket: 32 [ 241.597444][T10908] usb 13-1: config 5 has an invalid interface number: 23 but max is 3 [ 241.600928][T10908] usb 13-1: config 5 has an invalid interface number: 40 but max is 3 [ 241.604311][T10908] usb 13-1: config 5 has an invalid interface number: 49 but max is 3 [ 241.607666][T10908] usb 13-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config [ 241.612824][T10908] usb 13-1: config 5 has 3 interfaces, different from the descriptor's value: 4 [ 241.616617][T10908] usb 13-1: config 5 has no interface number 0 [ 241.619218][T10908] usb 13-1: config 5 has no interface number 1 [ 241.621887][T10908] usb 13-1: config 5 has no interface number 2 [ 241.624958][T10908] usb 13-1: config 5 interface 23 altsetting 1 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 241.629522][T10908] usb 13-1: config 5 interface 23 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 241.634136][T10908] usb 13-1: config 5 interface 23 altsetting 1 endpoint 0x9 has invalid wMaxPacketSize 0 [ 241.634338][ T6034] usb 7-1: Using ep0 maxpacket: 16 [ 241.638418][T10908] usb 13-1: config 5 interface 23 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 15 [ 241.640994][ T6034] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 241.645930][T10908] usb 13-1: too many endpoints for config 5 interface 40 altsetting 96: 225, using maximum allowed: 30 [ 241.645969][T10908] usb 13-1: config 5 interface 40 altsetting 96 has a duplicate endpoint with address 0x9, skipping [ 241.645988][T10908] usb 13-1: config 5 interface 40 altsetting 96 has an invalid descriptor for endpoint zero, skipping [ 241.646008][T10908] usb 13-1: config 5 interface 40 altsetting 96 has an invalid descriptor for endpoint zero, skipping [ 241.646026][T10908] usb 13-1: config 5 interface 40 altsetting 96 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 241.646048][T10908] usb 13-1: config 5 interface 40 altsetting 96 has a duplicate endpoint with address 0x7, skipping [ 241.646067][T10908] usb 13-1: config 5 interface 40 altsetting 96 has 6 endpoint descriptors, different from the interface descriptor's value: 225 [ 241.646105][T10908] usb 13-1: config 5 interface 49 altsetting 107 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 241.646127][T10908] usb 13-1: config 5 interface 23 has no altsetting 0 [ 241.646142][T10908] usb 13-1: config 5 interface 40 has no altsetting 0 [ 241.646157][T10908] usb 13-1: config 5 interface 49 has no altsetting 0 [ 241.648033][T10908] usb 13-1: Dual-Role OTG device on HNP port [ 241.649469][ T6034] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 241.649493][ T6034] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 241.649511][ T6034] usb 7-1: config 0 interface 0 has no altsetting 0 [ 241.651325][ T6034] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 241.654477][T10908] usb 13-1: New USB device found, idVendor=0eab, idProduct=c893, bcdDevice=21.6b [ 241.658681][ T6034] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.658702][ T6034] usb 7-1: Product: syz [ 241.658714][ T6034] usb 7-1: Manufacturer: syz [ 241.663221][T10908] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.663248][T10908] usb 13-1: Product: 麑乨浍먭橈ᝰ杛ᆬ碮఍诵㦊䟄솵ᜨ䫗⁉酁났ㅽࡸ૛㽉勮咧⚳累⑯蚍녨仕䱽每㹑凌辜ꊯ젒≕ٴ⭙⠀꺖ù⠕艮퐟隆幺쁟狙增碑洬Ჹ⪷ᷠ댗⣒欌ԏ섌饓継䰩匡觜筻ِ཯呩࿥鴁⧘ᢙ틧祧璎ㆉ逽첂Ἤ艹Ӛ [ 241.663274][T10908] usb 13-1: Manufacturer: 禭ꂺ✋䋳ꦔϕ烥 [ 241.663289][T10908] usb 13-1: SerialNumber: 馠櫀钳᧲瑭ꭽ㕱䫯妒垎臂알葶펆㥈蘛賑쒝²ⵚ⽕缞ᐡ䬩눞婞௥脥磝꫌䩾䐎藅봿쿛ꉕՔ殪쾁才窖苐㻘๯綾᳐ⴺ鏍㒃㞸詉쿛勭㾑ᩉ߄늤❢ʉ뚤管䱂釄웬괁䬫䛁헛ꮙ訋䑢ﶶ翪묫乻作⢩郮렉䌴龔⬇镻᳅㢂䉾ⳗ⢣ꨜ凧輯㿇 [ 241.677159][ T5658] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 241.681813][ T6034] usb 7-1: SerialNumber: syz [ 241.764428][ T6034] usb 7-1: config 0 descriptor?? [ 241.848286][ T5658] usb 14-1: Using ep0 maxpacket: 16 [ 241.852005][ T5658] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 241.858116][ T5658] usb 14-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 241.862223][ T5658] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.866025][ T5658] usb 14-1: Product: syz [ 241.868154][ T5658] usb 14-1: Manufacturer: syz [ 241.870748][ T5658] usb 14-1: SerialNumber: syz [ 241.874210][ T5658] usb 14-1: config 0 descriptor?? [ 241.878216][ T5658] hub 14-1:0.0: bad descriptor, ignoring hub [ 241.880987][ T5658] hub 14-1:0.0: probe with driver hub failed with error -5 [ 241.885614][ T5658] input: syz syz as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/input/input46 [ 241.893841][T10908] option 13-1:5.23: GSM modem (1-port) converter detected [ 241.896924][ T5658] input: failed to attach handler mousedev to device input46, error: -5 [ 241.900814][T10908] option 13-1:5.40: GSM modem (1-port) converter detected [ 241.906595][T10908] option 13-1:5.49: GSM modem (1-port) converter detected [ 241.915992][T10908] usb 13-1: USB disconnect, device number 21 [ 241.929198][T10908] option 13-1:5.23: device disconnected [ 241.938583][T10908] option 13-1:5.40: device disconnected [ 241.942861][T10908] option 13-1:5.49: device disconnected [ 241.983139][ T6034] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input47 [ 241.988110][ T6034] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 241.993245][ T5364] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 241.999385][ T6034] input: failed to attach handler mousedev to device input47, error: -5 [ 242.003276][ T5364] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 242.006924][ T5364] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 242.028003][ T8888] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 242.034505][ T5364] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 242.037855][ T5364] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 242.126496][T14305] 9pnet_rdma: rdma_create_trans (14305): problem binding to privport: 13 [ 242.168274][T14307] openvswitch: netlink: Missing valid actions attribute. [ 242.171394][T14307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.252806][T14314] gfs2: Unknown parameter 'discardput/event#' [ 242.326556][T14316] overlay: Bad value for 'uuid' [ 242.355281][T14318] input: syz0 as /devices/virtual/input/input48 [ 242.519588][T14331] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.523159][T14331] syzkaller1: entered promiscuous mode [ 242.524994][T14331] syzkaller1: entered allmulticast mode [ 242.676086][T14343] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2408'. [ 242.679160][T14343] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2408'. [ 242.731784][T14349] overlayfs: missing 'workdir' [ 242.779102][T14360] overlayfs: invalid origin (0000) [ 242.811831][ T5972] Bluetooth: Unknown LE signaling command 0x00 [ 242.814114][ T5972] Bluetooth: Wrong link type (-22) [ 242.898724][T14373] netlink: 'syz.9.2417': attribute type 12 has an invalid length. [ 242.991279][T14385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2421'. [ 242.996453][T14385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2421'. [ 243.011209][T14388] cgroup: subsys name conflicts with all [ 243.055973][T14391] use of bytesused == 0 is deprecated and will be removed in the future, [ 243.059708][T14391] use the actual size instead. [ 243.069059][T14395] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2423'. [ 243.078293][T14386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.081748][T14386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.227819][T10902] usb 14-1: USB disconnect, device number 11 [ 243.232846][ T29] usb 7-1: USB disconnect, device number 6 [ 243.366372][T10902] usb 14-1: new low-speed USB device number 12 using dummy_hcd [ 243.430884][T14410] SELinux: failed to load policy [ 243.484553][T14417] overlay: ./bus is not a directory [ 243.485186][ T40] audit: type=1804 audit(231.976:1121): pid=14415 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2430" name="/newroot/66/bus/bus" dev="overlay" ino=391 res=1 errno=0 [ 243.519100][T14419] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2431'. [ 243.522115][T14419] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2431'. [ 243.605081][T14432] netlink: 33 bytes leftover after parsing attributes in process `syz.4.2435'. [ 243.797327][T14448] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 243.817359][T14448] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 243.834298][T14450] syz.4.2441 uses old SIOCAX25GETINFO [ 243.836297][T14450] nbd: device at index 64 is going down [ 243.925145][T14459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.929365][T14459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.963087][ T1152] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.965983][ T1152] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.968772][ T1152] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.971824][ T1152] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.975002][ T1152] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.979176][ T1152] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.982352][ T1152] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.983890][ T40] audit: type=1400 audit(232.435:1122): avc: denied { setopt } for pid=14468 comm="syz.9.2444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 243.985305][ T1152] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.006439][ T5379] udevd[5379]: worker [10060] terminated by signal 33 (Unknown signal 33) [ 244.010192][ T5379] udevd[5379]: worker [10060] failed while handling '/devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0012:00/ndbus0/region0/namespace0.0/block/pmem0' [ 244.067081][ T40] audit: type=1400 audit(232.519:1123): avc: denied { bind } for pid=14470 comm="syz.9.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 244.574452][ T1171] block nbd1: Possible stuck request ffff888027c65080: control (read@0,1024B). Runtime 90 seconds [ 244.577790][ T1171] block nbd1: Possible stuck request ffff888027c65240: control (read@1024,1024B). Runtime 90 seconds [ 244.581114][ T1171] block nbd1: Possible stuck request ffff888027c65400: control (read@2048,1024B). Runtime 90 seconds [ 244.584457][ T1171] block nbd1: Possible stuck request ffff888027c655c0: control (read@3072,1024B). Runtime 90 seconds [ 244.912466][T14491] bond0 (unregistering): left allmulticast mode [ 244.916411][T14491] bond_slave_0: left allmulticast mode [ 244.919205][T14491] bond_slave_1: left allmulticast mode [ 244.920948][T14491] mac80211_hwsim hwsim29 wlan1: left allmulticast mode [ 244.932025][T14491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.936491][T14491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.941110][T14491] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 244.947695][T14491] bond0 (unregistering): Released all slaves [ 245.173114][ T5658] usb 14-1: new high-speed USB device number 13 using dummy_hcd [ 245.207299][T14526] sctp: [Deprecated]: syz.4.2458 (pid 14526) Use of int in max_burst socket option deprecated. [ 245.207299][T14526] Use struct sctp_assoc_value instead [ 245.250031][T14528] input: syz0 as /devices/virtual/input/input49 [ 245.259061][T14528] overlayfs: failed to resolve './file1': -2 [ 245.259579][ T40] audit: type=1400 audit(233.632:1124): avc: denied { mounton } for pid=14527 comm="syz.2.2459" path="/bus" dev="ramfs" ino=66521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 245.320617][T14535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64016 sclass=netlink_route_socket pid=14535 comm=syz.2.2461 [ 245.341896][ T40] audit: type=1400 audit(233.707:1125): avc: denied { setopt } for pid=14545 comm="syz.4.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 245.349574][ T40] audit: type=1326 audit(233.716:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14542 comm="syz.8.2463" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f221fb8ebe9 code=0x0 [ 245.360317][ T5658] usb 14-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.364676][ T5658] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 245.369107][ T5658] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 245.372685][ T5658] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 245.377688][ T5658] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.380842][ T5658] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.384874][ T5658] usb 14-1: config 0 descriptor?? [ 245.394345][T14559] bridge_slave_0: left allmulticast mode [ 245.396250][T14559] bridge_slave_0: left promiscuous mode [ 245.399904][T14559] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.412011][T14559] bridge_slave_1: left allmulticast mode [ 245.414149][T14559] bridge_slave_1: left promiscuous mode [ 245.416050][T14559] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.424740][T14559] team0: Port device team_slave_0 removed [ 245.432241][T14559] team0: Port device team_slave_1 removed [ 245.435163][T14559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.437627][T14559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.441109][T14559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.443528][T14559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.468874][T14574] ipvlan2: entered promiscuous mode [ 245.470965][T14574] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 245.473282][T12215] Bluetooth: hci7: Frame reassembly failed (-84) [ 245.529783][T14578] netdevsim netdevsim4: Direct firmware load for . [ 245.529783][T14578] failed with error -2 [ 245.534209][T14578] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 245.534209][T14578] [ 245.819933][ T5658] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 245.824028][ T5658] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 246.007000][ T6112] usb 13-1: new full-speed USB device number 22 using dummy_hcd [ 246.093639][T14496] xt_socket: unknown flags 0x20 [ 246.096164][ T6034] usb 14-1: USB disconnect, device number 13 [ 246.189167][T14603] netlink: 'syz.8.2478': attribute type 1 has an invalid length. [ 246.201373][T14603] 8021q: adding VLAN 0 to HW filter on device bond4 [ 246.212940][T14603] bond4: (slave ip6gretap1): making interface the new active one [ 246.216201][T14603] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 246.223487][ T6112] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 246.226072][ T6112] usb 13-1: can't read configurations, error -71 [ 246.627373][T14607] /dev/sr0: Can't open blockdev [ 246.816440][ T40] audit: type=1400 audit(235.082:1127): avc: denied { ioctl } for pid=14631 comm="syz.2.2488" path="socket:[69773]" dev="sockfs" ino=69773 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 246.877014][ T40] audit: type=1400 audit(235.147:1128): avc: denied { listen } for pid=14635 comm="syz.2.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 246.877194][T14636] __nla_validate_parse: 8 callbacks suppressed [ 246.877203][T14636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2489'. [ 247.002850][ T40] audit: type=1400 audit(235.269:1129): avc: denied { watch } for pid=14641 comm="syz.9.2491" path="/150/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 247.011232][ T40] audit: type=1400 audit(235.269:1130): avc: denied { watch_sb watch_reads } for pid=14641 comm="syz.9.2491" path="/150/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 247.043645][T14645] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2492'. [ 247.117794][T14652] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2495'. [ 247.121086][T14652] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2495'. [ 247.255977][T14667] netlink: 666 bytes leftover after parsing attributes in process `syz.8.2500'. [ 247.277080][T14667] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.279498][T14667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.309336][T14667] mac80211_hwsim hwsim23 syzkaller0: entered promiscuous mode [ 247.314615][T14667] mac80211_hwsim hwsim23 syzkaller0: entered allmulticast mode [ 247.604250][T14692] QAT: failed to copy from user cfg_data. [ 247.632083][ T5981] Bluetooth: hci7: command 0x1003 tx timeout [ 247.632258][ T5972] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 247.677976][T14708] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2507'. [ 247.879288][T14725] mac80211_hwsim hwsim23 syzkaller0: left promiscuous mode [ 247.881628][T14725] mac80211_hwsim hwsim23 syzkaller0: left allmulticast mode [ 247.885005][T14725] tipc: Started in network mode [ 247.888511][T14725] tipc: Node identity 080211000001, cluster identity 4711 [ 247.890904][T14725] tipc: Enabled bearer , priority 0 [ 247.893501][T14726] tipc: Enabling of bearer rejected, already enabled [ 247.919259][T14730] No control pipe specified [ 247.947140][T14732] Bluetooth: MGMT ver 1.23 [ 247.998891][T14734] sp0: Synchronizing with TNC [ 248.217534][T14752] tmpfs: Unknown parameter 'quo srquota_inrdeghardlimit' [ 248.282043][T14759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2525'. [ 248.316254][T14761] "syz.2.2527" (14761) uses obsolete ecb(arc4) skcipher [ 248.381351][T14767] xt_time: unknown flags 0xbc [ 248.383180][T14768] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2530'. [ 248.425655][T14771] binder: BC_ACQUIRE_RESULT not supported [ 248.427581][T14771] binder: 14770:14771 ioctl c0306201 2000000001c0 returned -22 [ 248.468548][T14782] Device name not specified. [ 248.468548][T14782] [ 248.520837][T14788] netlink: 6032 bytes leftover after parsing attributes in process `syz.9.2539'. [ 248.545948][T14790] netlink: 'syz.9.2540': attribute type 2 has an invalid length. [ 248.551888][T14790] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2540'. [ 248.693339][ T5972] Bluetooth: Unexpected start frame (len 304) [ 248.695831][ T5972] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 248.697988][ T5972] Bluetooth: Wrong link type (-22) [ 248.717411][T14820] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14820 comm=syz.4.2551 [ 248.721265][T14820] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14820 comm=syz.4.2551 [ 248.725955][T14820] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14820 comm=syz.4.2551 [ 248.730402][T14820] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14820 comm=syz.4.2551 [ 248.759233][T14822] vcan1: entered allmulticast mode [ 249.107080][ T29] tipc: Node number set to 134418688 [ 249.231349][T14837] overlayfs: upper fs does not support file handles, falling back to index=off. [ 249.481964][T14851] : entered promiscuous mode [ 249.485004][T14851] gfs2: gfs2 mount does not exist [ 249.655823][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 249.655834][ T40] audit: type=1800 audit(237.748:1136): pid=14871 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2567" name="/" dev="9p" ino=2 res=0 errno=0 [ 249.656794][T14871] syz_tun: entered allmulticast mode [ 249.702062][T14872] Sensor A: ================= START STATUS ================= [ 249.704558][T14872] Sensor A: Test Pattern: 75% Colorbar [ 249.706447][T14872] Sensor A: Show Information: All [ 249.708125][T14872] Sensor A: Vertical Flip: false [ 249.709819][T14872] Sensor A: Horizontal Flip: false [ 249.711477][T14872] Sensor A: Brightness: 128 [ 249.712986][T14872] Sensor A: Contrast: 255 [ 249.714365][T14872] Sensor A: Hue: 0 [ 249.715640][T14872] Sensor A: Saturation: 4 [ 249.717124][T14872] Sensor A: ================== END STATUS ================== [ 249.738434][T14871] syz_tun: left allmulticast mode [ 249.805254][T14875] XFS (nullb0): Invalid superblock magic number [ 249.986275][ T40] audit: type=1400 audit(238.056:1137): avc: denied { mount } for pid=14886 comm="syz.4.2570" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 249.993124][ T40] audit: type=1400 audit(238.056:1138): avc: denied { remount } for pid=14886 comm="syz.4.2570" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 250.283079][ T61] usb 14-1: new high-speed USB device number 14 using dummy_hcd [ 250.411218][T14901] syz.8.2575 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 250.455405][ T61] usb 14-1: Using ep0 maxpacket: 8 [ 250.458753][ T61] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 250.461375][ T61] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 250.464454][ T61] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 250.467743][ T61] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 250.471084][ T61] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.475198][ T61] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 250.478243][ T61] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.594689][ T5972] Bluetooth: hci5: unexpected event 0x31 length: 8 > 6 [ 250.654029][T14921] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.666894][T14923] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 250.679579][T14923] bridge0: port 4(macvlan4) entered blocking state [ 250.682566][T14923] bridge0: port 4(macvlan4) entered disabled state [ 250.685378][T14923] macvlan4: entered allmulticast mode [ 250.687562][T14923] bridge0: entered allmulticast mode [ 250.693546][T14923] macvlan4: left allmulticast mode [ 250.696091][T14923] bridge0: left allmulticast mode [ 250.696090][T14925] netlink: 'syz.2.2584': attribute type 39 has an invalid length. [ 250.701203][ T61] usb 14-1: usb_control_msg returned -32 [ 250.701221][ T61] usbtmc 14-1:16.0: can't read capabilities [ 250.770776][ T40] audit: type=1400 audit(238.786:1139): avc: denied { unmount } for pid=13494 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 250.792008][T14928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14928 comm=syz.4.2585 [ 250.795980][T14928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14928 comm=syz.4.2585 [ 250.821768][T14933] netlink: 'syz.4.2587': attribute type 1 has an invalid length. [ 250.833739][T14933] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 250.837912][T14933] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 250.888176][T14949] gretap1: entered promiscuous mode [ 250.891226][T14949] bond0: (slave gretap1): making interface the new active one [ 250.894210][T14949] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 250.900336][T14949] macvlan2: entered promiscuous mode [ 250.902076][T14949] macvlan2: entered allmulticast mode [ 250.904634][T14949] bond0: entered promiscuous mode [ 250.906711][T14949] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 250.910446][T14949] bond0: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 250.917319][T14949] bond0: left promiscuous mode [ 250.919697][T14953] netlink: 'syz.2.2593': attribute type 2 has an invalid length. [ 251.362794][ T6112] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 251.524116][ T6112] usb 7-1: Using ep0 maxpacket: 8 [ 251.527066][ T6112] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 251.529433][ T6112] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 251.532983][ T6112] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 251.536702][ T6112] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 251.540488][ T6112] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 251.544083][ T6112] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 251.547993][ T6112] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 251.552613][ T6112] usb 7-1: config 168 interface 0 has no altsetting 0 [ 251.556108][ T6112] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 251.558848][ T6112] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 251.562441][ T6112] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 251.566251][ T6112] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 251.570054][ T6112] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 251.573557][ T6112] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 251.577493][ T6112] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 251.581690][ T6112] usb 7-1: config 168 interface 0 has no altsetting 0 [ 251.584561][ T6112] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 251.587007][ T6112] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 251.590687][ T6112] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 251.594362][ T6112] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 251.598159][ T6112] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 251.601652][ T6112] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 251.605298][ T6112] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 251.609558][ T6112] usb 7-1: config 168 interface 0 has no altsetting 0 [ 251.614090][ T6112] usb 7-1: string descriptor 0 read error: -22 [ 251.616081][ T6112] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 251.618930][ T6112] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.626924][ T6112] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 251.840589][ T6112] usb 7-1: USB disconnect, device number 7 [ 251.870022][T15003] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.880257][T15003] gretap2: entered allmulticast mode [ 251.882719][T15003] bridge0: port 4(gretap2) entered blocking state [ 251.884845][T15003] bridge0: port 4(gretap2) entered disabled state [ 251.887918][T15003] gretap2: entered promiscuous mode [ 251.890060][T15003] bridge0: port 4(gretap2) entered blocking state [ 251.892126][T15003] bridge0: port 4(gretap2) entered forwarding state [ 251.897220][T15003] netlink: 'syz.8.2600': attribute type 25 has an invalid length. [ 252.005865][T15017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.346457][T10907] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 252.519405][T10907] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 252.522849][T10907] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.526843][T10907] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.530999][T10907] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 252.535937][T10907] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 252.539752][T10907] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 252.542508][T10907] usb 9-1: Manufacturer: syz [ 252.544782][T10907] usb 9-1: config 0 descriptor?? [ 252.601809][T15029] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 252.606477][T15029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15029 comm=syz.2.2607 [ 253.012685][T10907] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 253.016296][T10907] appleir 0003:05AC:8243.0009: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 253.063934][T15048] veth1_vlan: left promiscuous mode [ 253.290609][ T29] usb 9-1: USB disconnect, device number 18 [ 253.316810][ T40] audit: type=1400 audit(241.162:1140): avc: denied { getopt } for pid=15068 comm="syz.8.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.323839][ T40] audit: type=1400 audit(241.162:1141): avc: denied { getopt } for pid=15068 comm="syz.8.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 253.844672][T15071] kvm: user requested TSC rate below hardware speed [ 253.877814][T15076] tmpfs: Bad value for 'mpol' [ 253.992733][ T40] audit: type=1400 audit(241.798:1142): avc: denied { read } for pid=15090 comm="syz.8.2626" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 254.003772][T15098] fuse: Bad value for 'fd' [ 254.006502][T15098] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 254.028617][ T40] audit: type=1400 audit(241.835:1143): avc: denied { search } for pid=15103 comm="syz.8.2629" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 254.035474][ T40] audit: type=1400 audit(241.835:1144): avc: denied { search } for pid=15103 comm="syz.8.2629" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 254.042360][ T40] audit: type=1400 audit(241.835:1145): avc: denied { search } for pid=15103 comm="syz.8.2629" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 254.205018][T15130] __nla_validate_parse: 15 callbacks suppressed [ 254.205030][T15130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2637'. [ 254.830688][T15140] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20004 [ 255.146481][T15175] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 255.298868][T15188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2654'. [ 255.301925][T15188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2654'. [ 255.528211][T15221] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2660'. [ 255.531226][T15221] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 255.534636][T15221] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 255.543023][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 255.543034][ T40] audit: type=1400 audit(243.248:1153): avc: denied { remount } for pid=15220 comm="syz.2.2660" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 255.612930][T15226] autofs4:pid:15226:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 255.665652][T15233] syzkaller0: entered promiscuous mode [ 255.667570][T15233] syzkaller0: entered allmulticast mode [ 255.967074][T15235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=15235 comm=syz.8.2664 [ 256.190373][T15247] bridge0: port 1(syz_tun) entered blocking state [ 256.192504][T15247] bridge0: port 1(syz_tun) entered disabled state [ 256.194828][T15247] syz_tun: entered allmulticast mode [ 256.197808][T15247] syz_tun: entered promiscuous mode [ 256.868605][T14964] usbtmc 14-1:16.0: usb_control_msg returned -110 [ 256.877404][T10907] usb 14-1: USB disconnect, device number 14 [ 256.927332][T15272] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2674'. [ 256.942685][T15276] netlink: 14560 bytes leftover after parsing attributes in process `syz.8.2675'. [ 257.048055][T15306] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2685'. [ 257.271744][T15326] fuse: Bad value for 'fd' [ 257.694183][T15328] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2692'. [ 257.891678][ T40] audit: type=1400 audit(245.446:1154): avc: denied { setopt } for pid=15350 comm="syz.8.2698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 257.914009][T15357] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 258.031125][T15370] netlink: 'syz.8.2703': attribute type 3 has an invalid length. [ 258.035936][T15370] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2703'. [ 258.076464][T15300] comedi comedi2: reset error (fatal) [ 258.264764][T15388] overlayfs: failed to resolve './file0': -2 [ 258.571532][T15414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.631715][T15416] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2717'. [ 258.639993][T15416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.649770][T15416] bond1: (slave batadv1): Opening slave failed [ 258.750191][ T5981] Bluetooth: hci7: command 0x1003 tx timeout [ 258.750221][ T5972] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 258.931709][T15441] usb usb8: usbfs: process 15441 (syz.2.2724) did not claim interface 0 before use [ 258.958970][T15444] bridge: RTM_NEWNEIGH with invalid ether address [ 258.961318][T15444] netlink: 'syz.2.2725': attribute type 4 has an invalid length. [ 258.965824][T15444] netlink: 'syz.2.2725': attribute type 4 has an invalid length. [ 259.010892][ T40] audit: type=1400 audit(246.494:1155): avc: denied { relabelfrom } for pid=15447 comm="syz.2.2727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 259.011782][T15449] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 259.016920][ T40] audit: type=1400 audit(246.494:1156): avc: denied { relabelto } for pid=15447 comm="syz.2.2727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 259.231069][T10902] usb 14-1: new high-speed USB device number 15 using dummy_hcd [ 259.282836][T15455] netlink: 'syz.2.2728': attribute type 8 has an invalid length. [ 259.391434][T10902] usb 14-1: Using ep0 maxpacket: 16 [ 259.394351][T10902] usb 14-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 259.397549][T10902] usb 14-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 259.400713][T10902] usb 14-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.404929][T10902] usb 14-1: config 1 interface 0 has no altsetting 0 [ 259.408759][T10902] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 259.411711][T10902] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.414488][T10902] usb 14-1: Product: syz [ 259.415935][T10902] usb 14-1: Manufacturer: syz [ 259.417454][T10902] usb 14-1: SerialNumber: syz [ 259.635904][T10902] usblp 14-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 259.637923][ T5972] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 259.703086][T10902] usb 14-1: USB disconnect, device number 15 [ 259.709805][T10902] usblp0: removed [ 259.873177][T15488] netlink: 96 bytes leftover after parsing attributes in process `syz.9.2736'. [ 259.874482][T15487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2735'. [ 259.900276][T15492] ./cgroup: Can't lookup blockdev [ 259.907229][T15492] netlink: 'syz.2.2738': attribute type 23 has an invalid length. [ 259.955415][T15501] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2740'. [ 259.959403][T15501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2740'. [ 259.999924][T15513] Invalid source name [ 260.001437][T15513] UBIFS error (pid: 15513): cannot open "ubifs", error -22 [ 260.026102][T15521] program syz.2.2744 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.147893][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2747'. [ 260.150916][T15541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2747'. [ 260.153846][T15541] netlink: 'syz.2.2747': attribute type 7 has an invalid length. [ 260.162997][T15555] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2751'. [ 260.326323][T15572] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 260.331050][ T5972] Bluetooth: hci4: unexpected event for opcode 0x2002 [ 260.417757][ T6060] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 260.479814][T15585] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2761'. [ 260.496545][T12222] Bluetooth: hci7: Frame reassembly failed (-84) [ 260.530729][T15592] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2763'. [ 260.578128][ T6060] usb 9-1: Using ep0 maxpacket: 32 [ 260.581838][ T6060] usb 9-1: config 1 interface 0 altsetting 29 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 260.585404][ T6060] usb 9-1: config 1 interface 0 has no altsetting 0 [ 260.589267][ T6060] usb 9-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.40 [ 260.592247][ T6060] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.594800][ T6060] usb 9-1: Product: Ы [ 260.596200][ T6060] usb 9-1: Manufacturer:   [ 260.597707][ T6060] usb 9-1: SerialNumber: syz [ 260.734422][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2767'. [ 260.789714][T15611] netlink: 'syz.8.2768': attribute type 32 has an invalid length. [ 260.820022][ T6060] usbhid 9-1:1.0: can't add hid device: -71 [ 260.821944][ T6060] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 260.828014][ T6060] usb 9-1: USB disconnect, device number 19 [ 261.107821][ T40] audit: type=1400 audit(248.458:1157): avc: denied { getopt } for pid=15648 comm="syz.2.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 261.312400][ T40] audit: type=1400 audit(248.645:1158): avc: denied { listen } for pid=15673 comm="syz.2.2779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 261.313906][T15674] binder: 15673:15674 ioctl c0306201 0 returned -14 [ 261.327348][T15674] binder: 15673:15674 ioctl 4018620d 0 returned -22 [ 261.373117][T15677] syz.4.2780: attempt to access beyond end of device [ 261.373117][T15677] sr0: rw=2048, sector=0, nr_sectors = 4 limit=0 [ 261.377242][T15677] hfsplus: unable to find HFS+ superblock [ 261.440805][T15675] sctp: [Deprecated]: syz.2.2779 (pid 15675) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.440805][T15675] Use struct sctp_sack_info instead [ 261.515461][T15684] lo speed is unknown, defaulting to 1000 [ 261.517601][T15684] lo speed is unknown, defaulting to 1000 [ 261.519966][T15684] lo speed is unknown, defaulting to 1000 [ 261.522836][T15684] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 261.526497][T15684] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 261.533462][T15684] lo speed is unknown, defaulting to 1000 [ 261.535636][T15684] lo speed is unknown, defaulting to 1000 [ 261.537792][T15684] lo speed is unknown, defaulting to 1000 [ 261.539959][T15684] lo speed is unknown, defaulting to 1000 [ 261.542557][T15684] lo speed is unknown, defaulting to 1000 [ 261.544652][T15684] lo speed is unknown, defaulting to 1000 [ 261.546745][T15684] lo speed is unknown, defaulting to 1000 [ 261.548825][T15684] lo speed is unknown, defaulting to 1000 [ 261.551072][T15684] lo speed is unknown, defaulting to 1000 [ 261.587120][ T40] audit: type=1400 audit(248.907:1159): avc: denied { lock } for pid=15688 comm="syz.8.2784" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=73418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 261.670296][T15695] netlink: 'syz.8.2785': attribute type 1 has an invalid length. [ 261.683545][T15695] 8021q: adding VLAN 0 to HW filter on device bond6 [ 261.686335][T15695] bond5: (slave bond6): making interface the new active one [ 261.688869][T15695] bond5: (slave bond6): Enslaving as an active interface with an up link [ 261.694380][T15694] 8021q: adding VLAN 0 to HW filter on device bond5 [ 261.718704][T15699] overlayfs: missing 'lowerdir' [ 261.803834][T15710] cgroup: subsys name conflicts with all [ 262.684270][ T5972] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 262.786757][T15737] SELinux: policydb string length 8200 does not match expected length 8 [ 262.789414][T15737] SELinux: failed to load policy [ 262.866822][T15755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=15755 comm=syz.8.2800 [ 262.893431][T15763] netlink: 'syz.8.2801': attribute type 1 has an invalid length. [ 262.965782][T15778] bond7: (slave bridge5): making interface the new active one [ 262.968414][T15778] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 263.364787][T15862] No control pipe specified [ 264.003339][T15879] macvlan1: renamed from ip_vti0 (while UP) [ 264.006088][T15879] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 264.194059][T15892] netlink: 'syz.8.2817': attribute type 9 has an invalid length. [ 264.304272][ T40] audit: type=1400 audit(251.442:1160): avc: denied { connect } for pid=15895 comm="syz.9.2819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 264.328165][T15899] dvmrp17: entered allmulticast mode [ 264.333783][T15901] batadv_slave_1: entered promiscuous mode [ 264.338457][T15899] dvmrp17: left allmulticast mode [ 264.338935][T15904] overlayfs: missing 'lowerdir' [ 264.620178][T15907] batadv_slave_1: left promiscuous mode [ 264.645344][T12231] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.655327][ T40] audit: type=1400 audit(251.779:1161): avc: denied { setopt } for pid=15913 comm="syz.4.2826" lport=37845 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 264.665089][ T40] audit: type=1400 audit(251.779:1162): avc: denied { ioctl } for pid=15913 comm="syz.4.2826" path="socket:[74853]" dev="sockfs" ino=74853 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 264.703604][T12231] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.792872][ T5981] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 264.795292][ T5981] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 264.795513][T15928] overlayfs: missing 'lowerdir' [ 264.796492][T15927] overlayfs: missing 'lowerdir' [ 264.797674][ T5981] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 264.803913][ T5981] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 264.806529][ T5981] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 264.819901][T15924] lo speed is unknown, defaulting to 1000 [ 264.841392][T12231] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.892054][T15924] chnl_net:caif_netlink_parms(): no params data found [ 264.925487][T12231] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.933577][ T40] audit: type=1400 audit(252.031:1163): avc: denied { getopt } for pid=15934 comm="syz.2.2830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 264.954732][T15924] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.957225][T15924] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.959745][T15924] bridge_slave_0: entered allmulticast mode [ 264.962688][T15924] bridge_slave_0: entered promiscuous mode [ 264.965489][T15924] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.967753][T15924] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.970420][T15924] bridge_slave_1: entered allmulticast mode [ 264.974366][T15924] bridge_slave_1: entered promiscuous mode [ 264.993039][ T40] audit: type=1400 audit(252.087:1164): avc: denied { mount } for pid=15958 comm="syz.8.2838" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 264.994402][T15924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.006246][T15924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.027490][T15924] team0: Port device team_slave_0 added [ 265.030828][T15924] team0: Port device team_slave_1 added [ 265.056604][T15924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.059497][T15924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.070059][T15924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.079206][T15924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.082579][T15924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.091560][T15924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.122619][T15924] hsr_slave_0: entered promiscuous mode [ 265.124785][T15924] hsr_slave_1: entered promiscuous mode [ 265.126838][T15924] debugfs: 'hsr0' already exists in 'hsr' [ 265.128651][T15924] Cannot create hsr debugfs directory [ 265.141146][T12231] bridge_slave_1: left allmulticast mode [ 265.143142][T12231] bridge_slave_1: left promiscuous mode [ 265.145090][T12231] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.149194][T12231] bridge_slave_0: left allmulticast mode [ 265.151032][T12231] bridge_slave_0: left promiscuous mode [ 265.152868][T12231] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.412580][T12231] bond0 (unregistering): Released all slaves [ 265.419121][T12231] bond1 (unregistering): Released all slaves [ 265.477356][T15924] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.551653][T15924] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.593658][T12231] hsr_slave_0: left promiscuous mode [ 265.595877][T12231] hsr_slave_1: left promiscuous mode [ 265.598343][T12231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.600764][T12231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.605261][T12231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.607946][T12231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.614979][T12231] veth1_macvtap: left promiscuous mode [ 265.617008][T12231] veth0_macvtap: left promiscuous mode [ 265.619338][T12231] veth1_vlan: left promiscuous mode [ 265.621645][T12231] veth0_vlan: left promiscuous mode [ 265.663065][T12231] pimreg3 (unregistering): left allmulticast mode [ 265.708648][T16001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=16001 comm=syz.4.2844 [ 265.718979][T12231] team0 (unregistering): Port device team_slave_1 removed [ 265.730661][T12231] team0 (unregistering): Port device team_slave_0 removed [ 265.787291][T12231] team0 (unregistering): Port device dummy0 removed [ 265.795562][T15989] __nla_validate_parse: 11 callbacks suppressed [ 265.795577][T15989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2844'. [ 265.806805][T15924] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.813536][T16001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2844'. [ 265.843329][T16014] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2849'. [ 265.919667][T15924] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.041476][T16051] Failed to get privilege flags for destination (handle=0x2:0x7ff) [ 266.044495][T15924] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 266.048295][T15924] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 266.053058][T15924] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 266.057828][T15924] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 266.070670][T16062] binder: BINDER_SET_CONTEXT_MGR already set [ 266.073301][T16062] binder: 16057:16062 ioctl 4018620d 200000000100 returned -16 [ 266.076725][T16063] binder_alloc: binder_alloc_mmap_handler: 16057 200000ffd000-200001000000 already mapped failed -16 [ 266.080584][T16062] binder_alloc: 16057: binder_alloc_buf, no vma [ 266.097852][T15924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.107146][T15924] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.111726][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.113979][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.119860][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.122202][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.193312][T15924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.207775][T15924] veth0_vlan: entered promiscuous mode [ 266.211667][T15924] veth1_vlan: entered promiscuous mode [ 266.222478][T15924] veth0_macvtap: entered promiscuous mode [ 266.226511][T15924] veth1_macvtap: entered promiscuous mode [ 266.233473][T15924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.238931][T15924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.243332][T12232] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.246246][T12232] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.249599][T12232] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.252456][T12232] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.271646][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.277332][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.285410][T12211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.288218][T12211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.301098][T12231] IPVS: stop unused estimator thread 0... [ 266.436646][T10902] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 266.510235][ T40] audit: type=1400 audit(253.509:1165): avc: denied { accept } for pid=16099 comm="syz.0.2864" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 266.513389][T16100] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 266.534166][T16115] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2867'. [ 266.596933][T10902] usb 7-1: Invalid ep0 maxpacket: 32 [ 266.610574][ T40] audit: type=1400 audit(253.603:1166): avc: denied { write } for pid=16120 comm="syz.8.2863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 266.631642][T16130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2870'. [ 266.654461][T16137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2873'. [ 266.657385][T16137] netlink: 'syz.4.2873': attribute type 30 has an invalid length. [ 266.658556][T16139] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2872'. [ 266.663585][ T60] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.666532][ T60] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.668542][ T40] audit: type=1804 audit(253.659:1167): pid=16117 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.2868" name="/newroot/6/file1" dev="fuse" ino=1 res=1 errno=0 [ 266.669328][ T60] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.677017][ T40] audit: type=1800 audit(253.659:1168): pid=16117 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2868" name="/" dev="fuse" ino=1 res=0 errno=0 [ 266.682639][ T60] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.698858][ T40] audit: type=1400 audit(253.687:1169): avc: denied { read } for pid=16143 comm="syz.8.2876" name="file0" dev="tmpfs" ino=2608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 266.709749][ T40] audit: type=1400 audit(253.696:1170): avc: denied { map } for pid=16140 comm="syz.4.2875" path="/dev/net/tun" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 266.736400][T10902] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 266.740373][T16149] 9pnet_virtio: no channels available for device syz [ 266.854833][T16163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2882'. [ 266.857700][T16163] bridge_slave_1: left allmulticast mode [ 266.859463][T16163] bridge_slave_1: left promiscuous mode [ 266.861318][T16163] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.865101][T16163] bridge_slave_0: left allmulticast mode [ 266.866939][T16163] bridge_slave_0: left promiscuous mode [ 266.868751][T16163] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.896235][T10902] usb 7-1: Invalid ep0 maxpacket: 32 [ 266.898131][T10902] usb usb7-port1: attempt power cycle [ 266.911496][ T29] hid-generic 0007:0100:0000.000A: unknown main item tag 0x6 [ 266.913937][ T29] hid-generic 0007:0100:0000.000A: unknown main item tag 0x2 [ 266.916282][ T29] hid-generic 0007:0100:0000.000A: item fetching failed at offset 33/159 [ 266.919252][ T29] hid-generic 0007:0100:0000.000A: probe with driver hid-generic failed with error -22 [ 266.943177][T16171] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 266.945675][T16171] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 266.948207][T16171] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 266.950904][T16171] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 266.959043][T16171] tmpfs: Unknown parameter '!SAƁ3>yQPfA44F ^Y4hKQF.' [ 266.971604][ T5972] Bluetooth: hci3: command tx timeout [ 266.991084][ T40] audit: type=1400 audit(253.958:1171): avc: denied { override_creds } for pid=16172 comm="syz.4.2885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 267.014752][T16175] block device autoloading is deprecated and will be removed. [ 267.092062][T16188] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2889'. [ 267.113631][ T40] audit: type=1400 audit(254.070:1172): avc: denied { append } for pid=16189 comm="syz.4.2890" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 267.151027][T16194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2892'. [ 267.233484][T16200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16200 comm=syz.4.2894 [ 267.238491][T16200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=16200 comm=syz.4.2894 [ 267.259763][T10902] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 267.261560][ T40] audit: type=1400 audit(254.211:1173): avc: denied { read } for pid=16201 comm="syz.4.2895" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 267.269307][ T40] audit: type=1400 audit(254.211:1174): avc: denied { open } for pid=16201 comm="syz.4.2895" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 267.281505][T10902] usb 7-1: Invalid ep0 maxpacket: 32 [ 267.349781][T16213] TCP: TCP_TX_DELAY enabled [ 267.420115][T10902] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 267.442213][T10902] usb 7-1: Invalid ep0 maxpacket: 32 [ 267.444087][T10902] usb usb7-port1: unable to enumerate USB device [ 267.449875][T16235] netlink: 'syz.8.2908': attribute type 1 has an invalid length. [ 267.458490][T16235] 8021q: adding VLAN 0 to HW filter on device bond8 [ 267.471288][T16235] bond8: (slave wlan0): Enslaving as an active interface with a down link [ 267.746000][T16268] Bluetooth: MGMT ver 1.23 [ 267.838525][T16272] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 267.980493][T16278] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 268.243545][T10902] usb 9-1: new low-speed USB device number 20 using dummy_hcd [ 268.407725][T10902] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 268.411205][T10902] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 268.414450][T10902] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 268.512017][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.699952][ T5972] Bluetooth: hci4: unexpected event 0x2f length: 1017 > 260 [ 268.700015][ T5972] Bluetooth: hci4: unexpected event 0x2f length: 1017 > 260 [ 268.702618][ T5972] Bluetooth: hci4: unexpected event 0x2f length: 1017 > 260 [ 268.705896][ T5972] Bluetooth: hci4: unexpected event 0x2f length: 1017 > 260 [ 268.708250][ T5972] Bluetooth: hci4: unexpected event 0x2f length: 1017 > 260 [ 268.710578][ T5972] Bluetooth: hci4: unexpected event 0x2f length: 1017 > 260 [ 268.712870][ T5972] Bluetooth: hci4: unexpected event 0x2f length: 1017 > 260 [ 268.715476][ T5972] Bluetooth: hci4: unexpected event 0x2f length: 1017 > 260 [ 268.717751][ T5972] Bluetooth: hci4: unexpected event 0x2f length: 1017 > 260 [ 268.720015][ T5972] Bluetooth: hci4: unexpected event 0x2f length: 1017 > 260 [ 269.184301][ T5981] Bluetooth: hci3: command tx timeout [ 269.212151][ T5981] Bluetooth: hci3: connection err: -111 [ 269.272291][T16317] netlink: 'syz.0.2938': attribute type 1 has an invalid length. [ 269.333518][T16320] gretap1: entered promiscuous mode [ 269.341512][T16322] 9pnet_fd: Insufficient options for proto=fd [ 269.411277][T16328] openvswitch: netlink: Flow key attribute not present in set flow. [ 269.423380][T16330] 8021q: adding VLAN 0 to HW filter on device bond3 [ 269.624693][T16345] cgroup: No subsys list or none specified [ 270.370745][ T61] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 270.532510][ T61] usb 7-1: Using ep0 maxpacket: 16 [ 270.542407][ T61] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 270.545272][ T61] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 270.547776][ T61] usb 7-1: Product: syz [ 270.549097][ T61] usb 7-1: Manufacturer: syz [ 270.550532][ T61] usb 7-1: SerialNumber: syz [ 270.553205][ T61] usb 7-1: config 0 descriptor?? [ 270.559378][T16365] overlayfs: failed to clone upperpath [ 270.705912][T16369] lo speed is unknown, defaulting to 1000 [ 270.898652][ T6060] usb 7-1: USB disconnect, device number 12 [ 271.015858][ T5981] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 271.080432][T16387] overlayfs: failed to clone upperpath [ 271.125863][ T5981] Bluetooth: hci4: Malformed Event: 0x13 [ 271.151388][T16393] bond0: entered promiscuous mode [ 271.153008][T16393] bond_slave_0: entered promiscuous mode [ 271.154840][T16393] bond_slave_1: entered promiscuous mode [ 271.156640][T16393] mac80211_hwsim hwsim23 wlan1: entered promiscuous mode [ 271.158867][T16393] bond0: entered allmulticast mode [ 271.160476][T16393] bond_slave_0: entered allmulticast mode [ 271.162522][T16393] bond_slave_1: entered allmulticast mode [ 271.165498][T16393] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 271.188640][T16395] batadv_slave_0: entered promiscuous mode [ 271.191027][T16395] erspan0: entered promiscuous mode [ 271.195602][T10902] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.198450][T10902] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.202010][T10902] usb 9-1: can't set config #1, error -71 [ 271.204268][T10902] usb 9-1: USB disconnect, device number 20 [ 271.205148][T16397] gfs2: not a GFS2 filesystem [ 271.285669][T16402] : entered promiscuous mode [ 271.288541][T16402] : left promiscuous mode [ 271.393588][T16412] dvmrp1: entered allmulticast mode [ 271.409218][ T5981] Bluetooth: hci3: command tx timeout [ 271.604003][T16439] __nla_validate_parse: 7 callbacks suppressed [ 271.604013][T16439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2980'. [ 271.613538][T16439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2980'. [ 271.794954][T16445] tls_set_device_offload_rx: netdev not found [ 271.816218][T16450] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2983'. [ 271.857339][T10908] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 271.920108][T16454] sp0: Synchronizing with TNC [ 271.924373][T16454] sp0: Found TNC [ 271.926000][T16453] [U] ` [ 272.005648][T16456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2986'. [ 272.015732][T16456] team0: Port device team_slave_0 removed [ 272.029463][T10908] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 272.032276][T10908] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 272.035873][T10908] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 272.039060][T10908] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 272.042539][T10908] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 272.047524][T10908] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 272.050935][T10908] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 272.053746][T10908] usb 7-1: Product: syz [ 272.055148][T10908] usb 7-1: Manufacturer: syz [ 272.058665][T10908] cdc_wdm 7-1:1.0: skipping garbage [ 272.060690][T10908] cdc_wdm 7-1:1.0: skipping garbage [ 272.063373][T10908] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 272.065429][T10908] cdc_wdm 7-1:1.0: Unknown control protocol [ 272.163372][T16461] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 272.166065][T16461] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 272.250816][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 272.250830][ T40] audit: type=1326 audit(258.878:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16463 comm="syz.8.2989" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f221fb8ebe9 code=0x0 [ 272.274447][ T40] audit: type=1400 audit(258.906:1181): avc: denied { read write } for pid=16436 comm="syz.2.2979" name="cdc-wdm0" dev="devtmpfs" ino=3516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 272.274881][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 272.281616][ T40] audit: type=1400 audit(258.906:1182): avc: denied { open } for pid=16436 comm="syz.2.2979" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 272.283578][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 272.283776][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 272.295715][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 272.297874][ T6112] usb 7-1: USB disconnect, device number 13 [ 272.299957][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 272.299978][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 272.299989][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 272.357494][ T40] audit: type=1326 audit(258.972:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.0.2991" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f574058ebe9 code=0x0 [ 272.940224][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880347d4000: rx timeout, send abort [ 272.942965][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff8880347d4000: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 272.949790][ T40] audit: type=1400 audit(259.533:1184): avc: denied { read } for pid=5361 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 272.956544][ T40] audit: type=1400 audit(259.533:1185): avc: denied { search } for pid=5361 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.963213][ T40] audit: type=1400 audit(259.533:1186): avc: denied { search } for pid=5361 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.969974][ T40] audit: type=1400 audit(259.533:1187): avc: denied { add_name } for pid=5361 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.977968][ T40] audit: type=1400 audit(259.533:1188): avc: denied { create } for pid=5361 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 272.986260][ T40] audit: type=1400 audit(259.533:1189): avc: denied { append open } for pid=5361 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 273.090838][T16494] comedi: valid board names for 8255 driver are: [ 273.093483][T16494] 8255 [ 273.094784][T16494] comedi: valid board names for vmk80xx driver are: [ 273.098126][T16494] vmk80xx [ 273.099654][T16494] comedi: valid board names for usbduxsigma driver are: [ 273.102815][T16494] usbduxsigma [ 273.104358][T16494] comedi: valid board names for usbduxfast driver are: [ 273.107213][T16494] usbduxfast [ 273.108785][T16494] comedi: valid board names for usbdux driver are: [ 273.111356][T16494] usbdux [ 273.112782][T16494] comedi: valid board names for ni6501 driver are: [ 273.115485][T16494] ni6501 [ 273.116808][T16494] comedi: valid board names for dt9812 driver are: [ 273.119808][T16494] dt9812 [ 273.121130][T16494] comedi: valid board names for ni_labpc_cs driver are: [ 273.123876][T16494] ni_labpc_cs [ 273.125314][T16494] comedi: valid board names for ni_daq_700 driver are: [ 273.128134][T16494] ni_daq_700 [ 273.129848][T16494] comedi: valid board names for labpc_pci driver are: [ 273.132662][T16494] labpc_pci [ 273.134041][T16494] comedi: valid board names for adl_pci9118 driver are: [ 273.136938][T16494] pci9118dg [ 273.138261][T16494] pci9118hg [ 273.139719][T16494] pci9118hr [ 273.141091][T16494] comedi: valid board names for 8255_pci driver are: [ 273.143819][T16494] 8255_pci [ 273.145144][T16494] comedi: valid board names for s526 driver are: [ 273.147811][T16494] s526 [ 273.148994][T16494] comedi: valid board names for multiq3 driver are: [ 273.151924][T16494] multiq3 [ 273.153320][T16494] comedi: valid board names for pcmuio driver are: [ 273.155340][T16494] pcmuio48 [ 273.156355][T16494] pcmuio96 [ 273.157381][T16494] comedi: valid board names for pcmmio driver are: [ 273.159360][T16494] pcmmio [ 273.160294][T16494] comedi: valid board names for pcmda12 driver are: [ 273.163234][T16494] pcmda12 [ 273.164616][T16494] comedi: valid board names for pcmad driver are: [ 273.167275][T16494] pcmad12 [ 273.168443][T16494] pcmad16 [ 273.169633][T16494] comedi: valid board names for ni_labpc driver are: [ 273.171812][T16494] lab-pc-1200 [ 273.172974][T16494] lab-pc-1200ai [ 273.174315][T16494] lab-pc+ [ 273.175266][T16494] comedi: valid board names for atmio16 driver are: [ 273.177260][T16494] atmio16 [ 273.178311][T16494] atmio16d [ 273.179289][T16494] comedi: valid board names for ni_at_ao driver are: [ 273.181587][T16494] at-ao-6 [ 273.182733][T16494] at-ao-10 [ 273.183761][T16494] comedi: valid board names for ni_at_a2150 driver are: [ 273.186462][T16494] ni_at_a2150 [ 273.187545][T16494] comedi: valid board names for adq12b driver are: [ 273.189751][T16494] adq12b [ 273.190701][T16494] comedi: valid board names for mpc624 driver are: [ 273.192785][T16494] mpc624 [ 273.193835][T16494] comedi: valid board names for c6xdigio driver are: [ 273.196352][T16494] c6xdigio [ 273.197639][T16494] comedi: valid board names for aio_iiro_16 driver are: [ 273.199959][T16494] aio_iiro_16 [ 273.201075][T16494] comedi: valid board names for aio_aio12_8 driver are: [ 273.203171][T16494] aio_aio12_8 [ 273.204323][T16494] aio_ai12_8 [ 273.205394][T16494] aio_ao12_4 [ 273.206567][T16494] comedi: valid board names for fl512 driver are: [ 273.208513][T16494] fl512 [ 273.209436][T16494] comedi: valid board names for dmm32at driver are: [ 273.211452][T16494] dmm32at [ 273.212479][T16494] comedi: valid board names for dt282x driver are: [ 273.214580][T16494] dt2821 [ 273.215506][T16494] dt2821-f [ 273.216881][T16494] dt2821-g [ 273.218287][T16494] dt2823 [ 273.219241][T16494] dt2824-pgh [ 273.220301][T16494] dt2824-pgl [ 273.221347][T16494] dt2825 [ 273.222253][T16494] dt2827 [ 273.223232][T16494] dt2828 [ 273.224162][T16494] dt2829 [ 273.225301][T16494] dt21-ez [ 273.226310][T16494] dt23-ez [ 273.227464][T16494] dt24-ez [ 273.228448][T16494] dt24-ez-pgl [ 273.229504][T16494] comedi: valid board names for dt2817 driver are: [ 273.231438][T16494] dt2817 [ 273.232364][T16494] comedi: valid board names for dt2815 driver are: [ 273.234348][T16494] dt2815 [ 273.235281][T16494] comedi: valid board names for dt2814 driver are: [ 273.237336][T16494] dt2814 [ 273.238464][T16494] comedi: valid board names for dt2811 driver are: [ 273.240450][T16494] dt2811-pgh [ 273.241491][T16494] dt2811-pgl [ 273.242757][T16494] comedi: valid board names for dt2801 driver are: [ 273.244751][T16494] dt2801 [ 273.245759][T16494] comedi: valid board names for das6402 driver are: [ 273.247949][T16494] das6402-12 [ 273.249278][T16494] das6402-16 [ 273.250333][T16494] comedi: valid board names for das1800 driver are: [ 273.252318][T16494] das-1701st [ 273.252512][T16533] sctp: [Deprecated]: syz.2.3004 (pid 16533) Use of int in maxseg socket option. [ 273.252512][T16533] Use struct sctp_assoc_value instead [ 273.253355][T16494] das-1701st-da [ 273.253362][T16494] das-1702st [ 273.253366][T16494] das-1702st-da [ 273.253370][T16494] das-1702hr [ 273.253374][T16494] das-1702hr-da [ 273.259026][T16523] sctp: [Deprecated]: syz.2.3004 (pid 16523) Use of int in maxseg socket option. [ 273.259026][T16523] Use struct sctp_assoc_value instead [ 273.259398][T16494] das-1701ao [ 273.265530][T16537] SELinux: failed to load policy [ 273.271283][T16494] das-1702ao [ 273.271294][T16494] das-1801st [ 273.271300][T16494] das-1801st-da [ 273.271305][T16494] das-1802st [ 273.271311][T16494] das-1802st-da [ 273.271316][T16494] das-1802hr [ 273.271322][T16494] das-1802hr-da [ 273.271328][T16494] das-1801hc [ 273.271334][T16494] das-1802hc [ 273.271340][T16494] das-1801ao [ 273.271345][T16494] das-1802ao [ 273.271351][T16494] comedi: valid board names for das800 driver are: [ 273.271359][T16494] das-800 [ 273.271365][T16494] cio-das800 [ 273.271371][T16494] das-801 [ 273.271376][T16494] cio-das801 [ 273.271381][T16494] das-802 [ 273.271386][T16494] cio-das802 [ 273.271392][T16494] cio-das802/16 [ 273.271398][T16494] comedi: valid board names for isa-das08 driver are: [ 273.271406][T16494] isa-das08 [ 273.271412][T16494] das08-pgm [ 273.271419][T16494] das08-pgh [ 273.271425][T16494] das08-pgl [ 273.271430][T16494] das08-aoh [ 273.271436][T16494] das08-aol [ 273.271441][T16494] das08-aom [ 273.271445][T16494] das08/jr-ao [ 273.271450][T16494] das08jr-16-ao [ 273.271456][T16494] pc104-das08 [ 273.271461][T16494] das08jr/16 [ 273.271466][T16494] comedi: valid board names for das16m1 driver are: [ 273.271473][T16494] das16m1 [ 273.271479][T16494] comedi: valid board names for dac02 driver are: [ 273.271486][T16494] dac02 [ 273.271492][T16494] comedi: valid board names for rti802 driver are: [ 273.271499][T16494] rti802 [ 273.271505][T16494] comedi: valid board names for rti800 driver are: [ 273.271512][T16494] rti800 [ 273.271518][T16494] rti815 [ 273.271524][T16494] comedi: valid board names for pcm3724 driver are: [ 273.271530][T16494] pcm3724 [ 273.271535][T16494] comedi: valid board names for pcl818 driver are: [ 273.271542][T16494] pcl818l [ 273.271547][T16494] pcl818h [ 273.271553][T16494] pcl818hd [ 273.271558][T16494] pcl818hg [ 273.271562][T16494] pcl818 [ 273.271567][T16494] pcl718 [ 273.271572][T16494] pcm3718 [ 273.271577][T16494] comedi: valid board names for pcl816 driver are: [ 273.271584][T16494] pcl816 [ 273.271589][T16494] pcl814b [ 273.271594][T16494] comedi: valid board names for pcl812 driver are: [ 273.271601][T16494] pcl812 [ 273.271606][T16494] pcl812pg [ 273.271611][T16494] acl8112pg [ 273.271616][T16494] acl8112dg [ 273.271621][T16494] acl8112hg [ 273.271626][T16494] a821pgl [ 273.271631][T16494] a821pglnda [ 273.271636][T16494] a821pgh [ 273.271642][T16494] a822pgl [ 273.271648][T16494] a822pgh [ 273.271653][T16494] a823pgl [ 273.271658][T16494] a823pgh [ 273.271663][T16494] pcl813 [ 273.271668][T16494] pcl813b [ 273.271673][T16494] acl8113 [ 273.271678][T16494] iso813 [ 273.271683][T16494] acl8216 [ 273.271689][T16494] a826pg [ 273.271694][T16494] comedi: valid board names for pcl730 driver are: [ 273.271701][T16494] pcl730 [ 273.271707][T16494] iso730 [ 273.271713][T16494] acl7130 [ 273.271718][T16494] pcm3730 [ 273.271723][T16494] pcl725 [ 273.271729][T16494] p8r8dio [ 273.271735][T16494] acl7225b [ 273.271741][T16494] p16r16dio [ 273.271746][T16494] pcl733 [ 273.271751][T16494] pcl734 [ 273.271756][T16494] opmm-1616-xt [ 273.271762][T16494] pearl-mm-p [ 273.271767][T16494] ir104-pbf [ 273.271772][T16494] comedi: valid board names for pcl726 driver are: [ 273.271778][T16494] pcl726 [ 273.271783][T16494] pcl727 [ 273.271788][T16494] pcl728 [ 273.271794][T16494] acl6126 [ 273.271800][T16494] acl6128 [ 273.271807][T16494] comedi: valid board names for pcl724 driver are: [ 273.271813][T16494] pcl724 [ 273.271819][T16494] pcl722 [ 273.271824][T16494] pcl731 [ 273.271830][T16494] acl7122 [ 273.271836][T16494] acl7124 [ 273.271841][T16494] pet48dio [ 273.271846][T16494] pcmio48 [ 273.271852][T16494] onyx-mm-dio [ 273.271857][T16494] comedi: valid board names for pcl711 driver are: [ 273.271864][T16494] pcl711 [ 273.271870][T16494] pcl711b [ 273.271876][T16494] acl8112hg [ 273.271882][T16494] acl8112dg [ 273.271888][T16494] comedi: valid board names for amplc_pc263 driver are: [ 273.271896][T16494] pc263 [ 273.271901][T16494] comedi: valid board names for amplc_pc236 driver are: [ 273.271908][T16494] pc36at [ 273.271914][T16494] comedi: valid board names for amplc_dio200 driver are: [ 273.271921][T16494] pc212e [ 273.271927][T16494] pc214e [ 273.271932][T16494] pc215e [ 273.271937][T16494] pc218e [ 273.271942][T16494] pc272e [ 273.271948][T16494] comedi: valid board names for comedi_parport driver are: [ 273.271955][T16494] comedi_parport [ 273.271962][T16494] comedi: valid board names for comedi_test driver are: [ 273.271978][T16494] comedi_test [ 273.271984][T16494] comedi: valid board names for comedi_bond driver are: [ 273.271991][T16494] comedi_bond [ 273.303899][T16539] netlink: 'syz.8.3010': attribute type 4 has an invalid length. [ 273.306146][T16537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3009'. [ 273.307191][T16539] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3010'. [ 273.348250][T16542] lo speed is unknown, defaulting to 1000 [ 273.359911][T16549] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 273.368880][T16550] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 273.387826][T16554] dvmrp8: entered allmulticast mode [ 273.446853][T16542] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3011'. [ 273.547511][T16571] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3019'. [ 273.551123][T16571] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3019'. [ 273.554720][T16571] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3019'. [ 273.631576][ T5981] Bluetooth: hci3: command tx timeout [ 273.788137][T16589] tipc: Enabling of bearer rejected, already enabled [ 273.921501][T16600] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=16600 comm=syz.8.3031 [ 274.130006][T16625] bond9: entered allmulticast mode [ 274.250296][T16645] netlink: 'syz.8.3046': attribute type 1 has an invalid length. [ 274.454736][T16676] openvswitch: netlink: Key type 16144 is out of range max 32 [ 274.668338][ T6060] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 274.807316][ T6060] usb 5-1: device descriptor read/64, error -71 [ 275.064101][ T6060] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 275.224352][ T6060] usb 5-1: device descriptor read/64, error -71 [ 275.352827][ T6060] usb usb5-port1: attempt power cycle [ 275.737381][ T6060] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 275.770449][ T6060] usb 5-1: device descriptor read/8, error -71 [ 276.026068][ T6060] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 276.048051][ T6060] usb 5-1: device descriptor read/8, error -71 [ 276.098150][T16770] overlayfs: failed to resolve './file0': -2 [ 276.122294][T16772] nbd: must specify a size in bytes for the device [ 276.165292][ T6060] usb usb5-port1: unable to enumerate USB device [ 276.352187][T16786] lo speed is unknown, defaulting to 1000 [ 276.530656][T16798] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] SMP KASAN NOPTI [ 276.535328][T16798] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 276.540343][T16798] CPU: 3 UID: 0 PID: 16798 Comm: syz.8.3088 Not tainted syzkaller #0 PREEMPT(full) [ 276.544487][T16798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 276.548817][T16798] RIP: 0010:skb_segment+0x189c/0x3e20 [ 276.551026][T16798] Code: 00 00 fe e9 9b eb ff ff e8 21 0e 52 f8 48 8b 84 24 c8 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 09 3c 03 7f 05 e8 93 64 b8 f8 48 8b 84 24 c8 [ 276.558719][T16798] RSP: 0018:ffffc90004eee890 EFLAGS: 00010202 [ 276.561229][T16798] RAX: dffffc0000000000 RBX: 0000000000020048 RCX: ffffc90006669000 [ 276.564390][T16798] RDX: 000000000000000e RSI: ffffffff8969831f RDI: 0000000000000070 [ 276.567597][T16798] RBP: ffffc90004eee9d8 R08: 0000000000000005 R09: 000000000000ffff [ 276.570805][T16798] R10: 000000000000ffff R11: aaaa0aaaaaaaaaaa R12: ffff888060b5e540 [ 276.574155][T16798] R13: 000000000001fffe R14: 000000000001fffe R15: 000000000000ffff [ 276.577284][T16798] FS: 00007f2220a366c0(0000) GS:ffff8880d69bc000(0000) knlGS:0000000000000000 [ 276.580814][T16798] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.583543][T16798] CR2: 0000200000200000 CR3: 0000000040fbc000 CR4: 0000000000352ef0 [ 276.586808][T16798] Call Trace: [ 276.588219][T16798] [ 276.589446][T16798] tcp_gso_segment+0x3be/0x19e0 [ 276.591443][T16798] ? __pfx_tcp_wfree+0x10/0x10 [ 276.593407][T16798] tcp6_gso_segment+0x1ec/0x1140 [ 276.595419][T16798] ipv6_gso_segment+0x7f2/0x1d60 [ 276.597441][T16798] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 276.599610][T16798] ? lock_acquire+0x2cd/0x350 [ 276.601532][T16798] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 276.603933][T16798] skb_mac_gso_segment+0x2a8/0x650 [ 276.606041][T16798] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 276.608192][T16798] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 276.610443][T16798] ? unwind_next_frame+0x3f4/0x20a0 [ 276.612545][T16798] ? rcu_is_watching+0x12/0xc0 [ 276.614626][T16798] __skb_gso_segment+0x36e/0x700 [ 276.616617][T16798] validate_xmit_skb+0x662/0x1200 [ 276.618662][T16798] ? sch_direct_xmit+0xb2/0xcf0 [ 276.620614][T16798] validate_xmit_skb_list+0xc1/0x130 [ 276.622782][T16798] sch_direct_xmit+0x433/0xcf0 [ 276.624825][T16798] ? trace_irq_enable.constprop.0+0x41/0x120 [ 276.627219][T16798] ? read_tsc+0x9/0x20 [ 276.628934][T16798] ? ktime_get+0x1a7/0x310 [ 276.630708][T16798] ? __pfx_sch_direct_xmit+0x10/0x10 [ 276.632344][T16798] ? pie_process_dequeue+0x184/0x4e0 [ 276.634046][T16798] __qdisc_run+0x541/0x1bf0 [ 276.635490][T16798] ? rcu_is_watching+0x12/0xc0 [ 276.637047][T16798] __dev_queue_xmit+0x2b43/0x4490 [ 276.638674][T16798] ? selinux_ip_postroute+0x73a/0xde0 [ 276.640345][T16798] ? __pfx___dev_queue_xmit+0x10/0x10 [ 276.642000][T16798] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 276.643730][T16798] ? is_bpf_text_address+0x60/0x1a0 [ 276.645386][T16798] ? rcu_is_watching+0x12/0xc0 [ 276.646861][T16798] ? bpf_ksym_find+0x127/0x1c0 [ 276.648306][T16798] ? kernel_text_address+0x8d/0x100 [ 276.649900][T16798] ? __kernel_text_address+0xd/0x40 [ 276.651463][T16798] ? __ip6_finish_output+0x3cd/0x1010 [ 276.653160][T16798] ? rcu_is_watching+0x12/0xc0 [ 276.654645][T16798] ? rcu_is_watching+0x12/0xc0 [ 276.656179][T16798] ip6_finish_output2+0xe98/0x2020 [ 276.657900][T16798] __ip6_finish_output+0x3cd/0x1010 [ 276.659560][T16798] ip6_output+0x1ca/0x3e0 [ 276.660971][T16798] ip6_xmit+0x12d6/0x22f0 [ 276.662389][T16798] ? ip6_dst_check+0x352/0x950 [ 276.664015][T16798] ? __pfx_ip6_xmit+0x10/0x10 [ 276.665483][T16798] ? __sk_dst_check+0x40/0x350 [ 276.667000][T16798] ? inet6_csk_route_socket+0x703/0x1010 [ 276.668770][T16798] ? rcu_is_watching+0x12/0xc0 [ 276.670250][T16798] ? lock_acquire+0x2cd/0x350 [ 276.671754][T16798] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 276.673580][T16798] inet6_csk_xmit+0x3c7/0x740 [ 276.675054][T16798] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 276.676673][T16798] ? csum_ipv6_magic+0x299/0x320 [ 276.678208][T16798] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 276.679810][T16798] __tcp_transmit_skb+0x19bb/0x3df0 [ 276.681478][T16798] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 276.683164][T16798] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 276.685006][T16798] ? kfree_skbmem+0x16c/0x1f0 [ 276.686494][T16798] tcp_write_xmit+0x1274/0x84e0 [ 276.688013][T16798] __tcp_push_pending_frames+0xaf/0x390 [ 276.689755][T16798] tcp_rcv_established+0x90e/0x23f0 [ 276.691351][T16798] ? ip6_dst_check+0x352/0x950 [ 276.692834][T16798] ? __pfx_tcp_rcv_established+0x10/0x10 [ 276.694536][T16798] ? _copy_from_iter+0x37e/0x16f0 [ 276.696042][T16798] ? _copy_from_iter+0x15d/0x16f0 [ 276.697706][T16798] tcp_v6_do_rcv+0x895/0x1740 [ 276.699238][T16798] ? __release_sock+0xd4/0x400 [ 276.700764][T16798] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 276.702591][T16798] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 276.704128][T16798] __release_sock+0x14c/0x400 [ 276.705556][T16798] __sk_flush_backlog+0x27/0xc0 [ 276.707086][T16798] tcp_sendmsg_locked+0x3957/0x42a0 [ 276.708696][T16798] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 276.710445][T16798] ? do_raw_spin_lock+0x12c/0x2b0 [ 276.712003][T16798] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 276.713640][T16798] ? rcu_is_watching+0x12/0xc0 [ 276.715169][T16798] ? tcp_sendmsg+0x20/0x50 [ 276.716550][T16798] ? rcu_is_watching+0x12/0xc0 [ 276.718020][T16798] ? tcp_sendmsg+0x20/0x50 [ 276.719414][T16798] tcp_sendmsg+0x2e/0x50 [ 276.720762][T16798] ? __pfx_tcp_sendmsg+0x10/0x10 [ 276.722262][T16798] inet6_sendmsg+0xb9/0x140 [ 276.723686][T16798] __sys_sendto+0x376/0x520 [ 276.725078][T16798] ? __pfx___sys_sendto+0x10/0x10 [ 276.726610][T16798] ? rcu_is_watching+0x12/0xc0 [ 276.728062][T16798] ? kfree+0x24f/0x4d0 [ 276.729319][T16798] ? __pfx___x64_sys_futex+0x10/0x10 [ 276.730935][T16798] ? __sys_setsockopt+0x1c0/0x230 [ 276.732449][T16798] __x64_sys_sendto+0xe0/0x1c0 [ 276.734006][T16798] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 276.735864][T16798] do_syscall_64+0xcd/0x4c0 [ 276.737282][T16798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.739066][T16798] RIP: 0033:0x7f221fb8ebe9 [ 276.740505][T16798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.746395][T16798] RSP: 002b:00007f2220a36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 276.748958][T16798] RAX: ffffffffffffffda RBX: 00007f221fdb5fa0 RCX: 00007f221fb8ebe9 [ 276.751362][T16798] RDX: ffffffffffffff1d RSI: 00002000000000c0 RDI: 0000000000000003 [ 276.753744][T16798] RBP: 00007f221fc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 276.756134][T16798] R10: 0000000000000850 R11: 0000000000000246 R12: 0000000000000000 [ 276.758491][T16798] R13: 00007f221fdb6038 R14: 00007f221fdb5fa0 R15: 00007fff3757d4e8 [ 276.760905][T16798] [ 276.761841][T16798] Modules linked in: [ 276.763129][T16798] ---[ end trace 0000000000000000 ]--- [ 276.763204][ T1171] block nbd1: Possible stuck request ffff888027c65080: control (read@0,1024B). Runtime 120 seconds [ 276.764864][T16798] RIP: 0010:skb_segment+0x189c/0x3e20 [ 276.764887][T16798] Code: 00 00 fe e9 9b eb ff ff e8 21 0e 52 f8 48 8b 84 24 c8 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 09 3c 03 7f 05 e8 93 64 b8 f8 48 8b 84 24 c8 [ 276.764899][T16798] RSP: 0018:ffffc90004eee890 EFLAGS: 00010202 [ 276.764930][T16798] RAX: dffffc0000000000 RBX: 0000000000020048 RCX: ffffc90006669000 [ 276.769056][ T1171] block nbd1: Possible stuck request ffff888027c65240: control (read@1024,1024B). Runtime 120 seconds [ 276.770619][T16798] RDX: 000000000000000e RSI: ffffffff8969831f RDI: 0000000000000070 [ 276.770631][T16798] RBP: ffffc90004eee9d8 R08: 0000000000000005 R09: 000000000000ffff [ 276.770639][T16798] R10: 000000000000ffff R11: aaaa0aaaaaaaaaaa R12: ffff888060b5e540 [ 276.770646][T16798] R13: 000000000001fffe R14: 000000000001fffe R15: 000000000000ffff [ 276.778288][ T1171] block nbd1: Possible stuck request ffff888027c65400: control (read@2048,1024B). Runtime 120 seconds [ 276.780169][T16798] FS: 00007f2220a366c0(0000) GS:ffff8880d69bc000(0000) knlGS:0000000000000000 [ 276.780196][T16798] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.783365][ T1171] block nbd1: Possible stuck request ffff888027c655c0: control (read@3072,1024B). Runtime 120 seconds [ 276.786658][T16798] CR2: 0000200000200000 CR3: 0000000040fbc000 CR4: 0000000000352ef0 [ 276.786671][T16798] Kernel panic - not syncing: Fatal exception in interrupt [ 276.787616][T16798] Kernel Offset: disabled VM DIAGNOSIS: 16:52:16 Registers: info registers vcpu 0 CPU#0 RAX=0000000000332b54 RBX=0000000000000000 RCX=ffffffff8b939c29 RDX=ffffed100d486656 RSI=ffffffff8c162800 RDI=ffffffff81913321 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab4090 R15=0000000000000000 RIP=ffffffff8b93878f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2977a7 CR3=0000000040fbc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff3757d9f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff3757d9f6 00007fff3757d9fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f221fc12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f221fc12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f221fc12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f221fc12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f221fc12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f221fc12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6efb8702ea2467f6 b1c29b1c26e0fd59 bd82c68861b0c751 edf1a1c91bc63544 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e8e6cced997e9650 dc77c1f965aaa1b4 cbda682bcaa8af35 2144faab18c3d2ff ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 39c04a02c7927a96 5397549e6c855c90 1597c71a2c14cba9 6607adc1b931d41c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 378099cd0f450d90 e8e6cced997e9650 dc77c1f965aaa1b4 cbda682bcaa8af35 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000003172c4 RBX=0000000000000001 RCX=ffffffff8b939c29 RDX=ffffed100d4a6656 RSI=ffffffff8c162800 RDI=ffffffff81913321 RBP=ffffed1003bd5488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801deaa440 R14=ffffffff90ab4090 R15=0000000000000000 RIP=ffffffff8b93878f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000008000 CR3=00000000263c5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555591311e50 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555591314596 0000555591313e80 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055559131880a 0000555591318460 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008030180808084 0484000403140400 0003000800021000 141000060070f018 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0ab8030008000ab0 030e04000aac0318 04000aa803080400 0aa4030804000aa0 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000019003000800 0ad0030008000ac8 031004000ac40318 04000ac003000800 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0806060168e20008 0010e00300100010 d00300100010c003 02100010b00301d8 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0288080001000004 08060a016e8805ab e008000580030010 0010800401000006 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0108100005800440 0800028808000100 000408060a016e88 05abe00800058003 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010001080040100 00060806060168e2 00080010e0030010 0010d00300100010 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c00302100010b003 01d8100001900300 08000ad003000800 0ac8031004000ac4 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 031804000ac00300 08000ab803000800 0ab0030e04000aac 031804000aa80308 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6239666666666666 66660a35322e7965 6b5f5f2062203036 3739303362396666 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3739303362396666 6666666666660a36 322e79656b5f5f20 6220306137393033 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6220303238393033 6239666666666666 66660a37322e7965 6b5f5f2062203065 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6220306365643033 6239666666666666 66660a302e79656b 5f5f206220303865 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 646e616820622030 3066643033623966 666666666666660a 302e79656b5f5f20 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2062203034666430 3362396666666666 6666660a64695f74 656e5f656b616873 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6530336239666666 66666666660a6c62 7468736168725f65 6b616873646e6168 info registers vcpu 2 CPU#2 RAX=000000002a116f4f RBX=00000000f4d12752 RCX=0000000051f581ae RDX=000000007bc4ce0b RSI=0000000014433762 RDI=00000000ace7974d RBP=000000003e084626 RSP=ffffc9000eebf7d0 R8 =00000000a9494c32 R9 =00000000dc3987ba R10=00000000283a9a3a R11=00000000346c83e0 R12=000000005dd07327 R13=00000000e43d87f3 R14=0000000070c87f92 R15=00000000bf065ad3 RIP=ffffffff84e4706d RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055556e8c1808 CR3=00000000123bc000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000050 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcdf8c4cf6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcdf8c4cf6 00007ffcdf8c4cfc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9e8e12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9e8e12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9e8e12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9e8e12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9e8e12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9e8e12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9e8f874a8 00007ff9e8f874a0 00007ff9e8f87498 00007ff9e8f87470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9e9aed100 00007ff9e8f87460 00007ff9e8f80004 00080000000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9e8f874b8 00007ff9e8f874b0 00007ff9e8f874a8 00007ff9e8f874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85643980 RDI=ffffffff9b10e020 RBP=ffffffff9b10dfe0 RSP=ffffc90004eee1a8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff3621c56 R15=dffffc0000000000 RIP=ffffffff856439a7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2220a366c0 ffffffff 00c00000 GS =0000 ffff8880d69bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000200000 CR3=0000000040fbc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000002fefef8 Opmask02=0000000002fefefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff3757d9f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff3757d9f6 00007fff3757d9fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f221fc12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f221fc12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f221fc12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f221fc12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f221fc12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f221fc12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f221fd874a8 00007f221fd874a0 00007f221fd87498 00007f221fd87470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22208ed100 00007f221fd87460 00007f221fd87478 00007f221fd874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f221fd874b8 00007f221fd874b0 00007f221fd874a8 00007f221fd874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000