last executing test programs: 3m38.149836765s ago: executing program 2 (id=61): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ac56b6c582f237a0bbe1e636e05af496b0dab8f38589fa54ae722e076e478f6fcebbc923aefcbf745c8d23be53a08b524856f104aa7e0bef6c62dfeaa9a57be1311f984202d6598d371cbf812c9063b4d341923bf7b42bda66b32ef838c23309da86ea0e2621c6ed7d9c069b4aba0ecbaba4160a2ec68cf666b5ce3cc70eb5918e94b89460cca412ca3966010450837a54c9257c79629e7eb27befe0b4ceb5571a913e5ee3c150d48b78540d76e7b2eb0e54fcd632204213b32214c93c83e85e8473fa7684a2e9c009aee2c3da5e3bbdb590b5819889075d", 0xd8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000006c0)='tracefs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = syz_open_dev$dri(&(0x7f0000002500), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000002640)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000340)={0x0, 0x0, {0xffffffffffffffff}, {0xee00}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000", @ANYRES32=r7, @ANYBLOB], 0x28}, 0x1, 0x6c00}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB=';\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000128bd7000fcdbdf255e00000008000300", @ANYRES32=r7, @ANYBLOB="0c00990004000000690000000800a0000100000008009f0007000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) chdir(&(0x7f00000003c0)='./bus\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) accept4(r0, 0x0, 0x0, 0x0) (async) r9 = accept4(r0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122cc2) (async) r11 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122cc2) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000001ac0)={r10, 0x0, {0x0, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="60020000", @ANYRES16=r3, @ANYBLOB="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"], 0x260}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="60020000", @ANYRES16=r3, @ANYBLOB="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"], 0x260}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x16) writev(r9, &(0x7f0000000540)=[{&(0x7f00000000c0)="af74", 0x2}], 0x1) (async) writev(r9, &(0x7f0000000540)=[{&(0x7f00000000c0)="af74", 0x2}], 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x430400) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x430400) 3m38.082259939s ago: executing program 2 (id=65): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x80000001, 0x0, 0x0, 0x200, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x96]}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r11], 0x1, r9, r10, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r13, 0xc048aec8, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x5, 0x5, 0x8, 0x0, [{0x1, 0x81, 0x1, '\x00', 0x4}, {0xfe, 0x3, 0x0, '\x00', 0x6}, {0x7, 0xff, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x2}, {0xf, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x4, '\x00', 0x6}, {0x8, 0x9, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0xff}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0xa}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0xff, 0x6, '\x00', 0x9}, {0x7, 0x1b, 0xff, '\x00', 0x3}, {0x2, 0xa, 0x5, '\x00', 0x7f}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x4, 0x60, 0x4, '\x00', 0x12}, {0xb, 0x8, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0xff}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r14 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r15 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r16 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r16, 0x6, 0x0, 0x0, 0x0) fsmount(r16, 0x0, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r16, 0xf518, 0x0) sendfile(r15, r14, 0x0, 0x80009) 3m37.002227284s ago: executing program 2 (id=73): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000140001000000000000000000e00000020000000000000003000000000000000000000000000000000000ff8003000000000000000a"], 0xb8}}, 0x0) 3m37.001729105s ago: executing program 2 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/net\x00') capset(&(0x7f0000000040)={0x20080522, r0}, &(0x7f0000000080)={0x789, 0x4, 0x836, 0x0, 0x1, 0x5}) 3m36.882560362s ago: executing program 2 (id=75): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x20000000, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423f, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffa, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x0, 0x8, 0x5f, {0x0, 0x5}, 0x7}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$MSR(0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x6e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000100)=[@mss, @sack_perm, @timestamp, @timestamp, @window, @window={0x3, 0x0, 0xfffc}, @sack_perm, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 3m35.842013412s ago: executing program 2 (id=92): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000140001000000000000000000e0000002000000000000000300000000000000000000000000000000000000b803000000000000000a"], 0xb8}}, 0x0) 3m35.796691637s ago: executing program 32 (id=92): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000140001000000000000000000e0000002000000000000000300000000000000000000000000000000000000b803000000000000000a"], 0xb8}}, 0x0) 3m27.299717155s ago: executing program 3 (id=246): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000080)={0x17e}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000140)={0x17e}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x64}}, 0x0) accept4(r3, 0x0, &(0x7f0000000000), 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x810}, 0x20008851) 3m26.339796959s ago: executing program 3 (id=264): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04070620"], 0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000002680)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(r4, r2, r5) (async) setresuid(r4, r2, r5) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000100)=""/230, &(0x7f0000000200)=0xe6) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r7) (async) r8 = dup(r7) setns(r8, 0x10000000) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000300)) read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) syz_clone(0x11200000, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r7, 0xa0) r9 = socket(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x1) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r9, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) 3m26.274261146s ago: executing program 3 (id=265): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000140001000000000000000000e00000020000000000000003000000000000000000000000000000000000000003000e00000000000a"], 0xb8}}, 0x0) 3m26.190840849s ago: executing program 3 (id=267): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) mount(&(0x7f0000000000)=@sr0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='hpfs\x00', 0x11, 0x0) 3m26.190082517s ago: executing program 3 (id=269): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) (async) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x8, 0x6, 0x698, 0x390, 0xd0, 0x4a8, 0xd0, 0x0, 0x5c8, 0x5c8, 0x5c8, 0x5c8, 0x5c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private2, [], [], 'pimreg0\x00', 'nicvf0\x00', {}, {}, 0x6}, 0x0, 0x178, 0x1c0, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {}, 'netpci0\x00', {}, 0x0, 0x15}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'gretap0\x00', {}, 0x0, 0x10}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private1, 0xe, 0x25, 0xb}}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'dvmrp1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f8) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x8, 0x6, 0x698, 0x390, 0xd0, 0x4a8, 0xd0, 0x0, 0x5c8, 0x5c8, 0x5c8, 0x5c8, 0x5c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private2, [], [], 'pimreg0\x00', 'nicvf0\x00', {}, {}, 0x6}, 0x0, 0x178, 0x1c0, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {}, 'netpci0\x00', {}, 0x0, 0x15}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'gretap0\x00', {}, 0x0, 0x10}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private1, 0xe, 0x25, 0xb}}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'dvmrp1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f8) rmdir(&(0x7f0000000100)='./file1\x00') chdir(&(0x7f0000000140)='./bus\x00') socket$caif_stream(0x25, 0x1, 0x4) (async) r1 = socket$caif_stream(0x25, 0x1, 0x4) readv(r1, &(0x7f0000003d80)=[{&(0x7f0000002cc0)=""/4096, 0x1000}], 0x1) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280), &(0x7f0000000380)=@sha1={0x1, "e4a3186656e05fab9468f405313ac4c83f286a14"}, 0x15, 0x1) (async) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280), &(0x7f0000000380)=@sha1={0x1, "e4a3186656e05fab9468f405313ac4c83f286a14"}, 0x15, 0x1) 3m26.09350601s ago: executing program 3 (id=274): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000440), &(0x7f0000000480)=0x4) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x1}, 0x2) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000200), 0x2) (async) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000200), 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x7, 0xffffffff, 0x34324241, 0x2, 0x81, 0x6, 0x2, 0xa, 0x0, 0x8, 0x0, 0x7}}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) (async) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f00000004c0)={0x6, 'nicvf0\x00', {0x80}, 0xffff}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f00000004c0)={0x6, 'nicvf0\x00', {0x80}, 0xffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x1e8, 0xa8, 0xfeffffff, 0xa8, 0xa8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {}, 0x88}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/237, 0xe}], 0x4) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000e09e01001c0012800900010001006e64000000000c0002800500110001000000b8065b24c2760cdbc97c15ad2436f892ab410a473e5935fcd322b9fc08816d9219d439b883906e026a36038a6fabe7c5953c8cb98218e8c03fe40576d6a0ac366cd9eb74ec970d63fbd9210bc69309d0440b0721995e95016fc006e96449cdcc296f2325f8c6c3ecdfbb5dcb"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000e09e01001c0012800900010001006e64000000000c0002800500110001000000b8065b24c2760cdbc97c15ad2436f892ab410a473e5935fcd322b9fc08816d9219d439b883906e026a36038a6fabe7c5953c8cb98218e8c03fe40576d6a0ac366cd9eb74ec970d63fbd9210bc69309d0440b0721995e95016fc006e96449cdcc296f2325f8c6c3ecdfbb5dcb"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f00000003c0)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x67a}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1400000000000000290000003400000007000000000000002400000000000000290000003200000000000000000000000000ffffac1414", @ANYBLOB="29d3ca"], 0x40}}], 0x1, 0x8004) 3m23.741332685s ago: executing program 4 (id=319): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r1, &(0x7f0000000280), &(0x7f0000000340)=""/140}, 0x20) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/193) 3m23.688029594s ago: executing program 4 (id=321): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_io_uring_setup(0x29ab, &(0x7f0000000380)={0x0, 0x5888, 0x10000, 0x1, 0x1c1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r1, 0x3519, 0xc2de, 0x8, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0xd8}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f000047f000/0x4000)=nil, 0x4000}, 0x2}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00005fc000/0x3000)=nil, 0x3000, 0x3) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 3m23.581110733s ago: executing program 4 (id=322): socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port0\x00', 0xe3, 0x1b1c07}) (async) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) (async) close_range(r0, r0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x9417f, 0x0) 3m23.572434447s ago: executing program 4 (id=323): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x1f, &(0x7f0000000300)) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000740)=""/384, 0x200008c0) timer_create(0x6, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={&(0x7f0000000040)="37bf29a677a2e4bbb3b6773edec1326ac21e12f51f01b12d3d4ae642d9cf52f522d26bf6dc1719bb06caf50624c3a0a9367b7aee0bb9fcc0ded5eafb600c0741dd28878bfc37f4cf", &(0x7f0000000140)="335270939cf3de90f2a5c8fd809959a6dacef64dcfad89832a47f78f8acb8dfa2ca4a1eafccf3a736688cb3208d858fe3efe7f73e5dce48bc63a2a5848c806ad21486482e7f4c10072c20eead56b445d84fc3f14528d336f962ae78a60c95a1500c3f14527c8b0f5fab2200000e172396aa7d40d65a81841798d26f6bb9bd5ea599ce4e18452a6bca7bd83defffa35ca285b727ef5af94"}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fanotify_init(0x200, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x3, 0xa000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3m22.29355932s ago: executing program 4 (id=339): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e657665000034000280050009"], 0x6c}}, 0x0) (async) r1 = msgget(0x0, 0x40) r2 = geteuid() (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) r6 = getuid() (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000140)={0x8e54}, 0x10) recvmmsg(r9, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x102, 0x0) (async) write(r9, &(0x7f00000000c0)="1800000016005f0214fffffffffffff8070000000e000000", 0x18) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000180)={{0x2, r2, 0x0, r6, r7, 0x100, 0x4}, 0x0, 0x0, 0x5, 0x9, 0x6, 0x2, 0x9, 0x3, 0x2, 0x401, 0xffffffffffffffff, r10}) 3m22.052904571s ago: executing program 4 (id=346): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000080)) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r3, 0x0, 0x0}, 0x10) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000000)={0x1, 0x1}, 0x2) (async) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000000)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0), 0x2) (async) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0), 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)={0x4c, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{*#-.\x00'}]}]}]}]}, 0x4c}}, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f00000001c0)={0x1, 0x80}, 0x2) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000040)={@any, 0x2}) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) (async) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1, 0x2}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) (async) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) close(r1) 3m9.807843256s ago: executing program 33 (id=274): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000440), &(0x7f0000000480)=0x4) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x1}, 0x2) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000200), 0x2) (async) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000200), 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x7, 0xffffffff, 0x34324241, 0x2, 0x81, 0x6, 0x2, 0xa, 0x0, 0x8, 0x0, 0x7}}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) (async) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f00000004c0)={0x6, 'nicvf0\x00', {0x80}, 0xffff}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f00000004c0)={0x6, 'nicvf0\x00', {0x80}, 0xffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x1e8, 0xa8, 0xfeffffff, 0xa8, 0xa8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {}, 0x88}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/237, 0xe}], 0x4) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000e09e01001c0012800900010001006e64000000000c0002800500110001000000b8065b24c2760cdbc97c15ad2436f892ab410a473e5935fcd322b9fc08816d9219d439b883906e026a36038a6fabe7c5953c8cb98218e8c03fe40576d6a0ac366cd9eb74ec970d63fbd9210bc69309d0440b0721995e95016fc006e96449cdcc296f2325f8c6c3ecdfbb5dcb"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000e09e01001c0012800900010001006e64000000000c0002800500110001000000b8065b24c2760cdbc97c15ad2436f892ab410a473e5935fcd322b9fc08816d9219d439b883906e026a36038a6fabe7c5953c8cb98218e8c03fe40576d6a0ac366cd9eb74ec970d63fbd9210bc69309d0440b0721995e95016fc006e96449cdcc296f2325f8c6c3ecdfbb5dcb"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f00000003c0)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x67a}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1400000000000000290000003400000007000000000000002400000000000000290000003200000000000000000000000000ffffac1414", @ANYBLOB="29d3ca"], 0x40}}], 0x1, 0x8004) 3m5.7831313s ago: executing program 34 (id=346): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000080)) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r3, 0x0, 0x0}, 0x10) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000000)={0x1, 0x1}, 0x2) (async) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000000)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0), 0x2) (async) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0), 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)={0x4c, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{*#-.\x00'}]}]}]}]}, 0x4c}}, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f00000001c0)={0x1, 0x80}, 0x2) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000040)={@any, 0x2}) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) (async) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1, 0x2}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) (async) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) close(r1) 2m46.709249025s ago: executing program 1 (id=727): setreuid(0x0, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000000100000bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff00000000ae04020000000000be400300000000006504030001ed00007b130000000000004d44000000080000630a04fe0000000071330000000000009f030000000000009500000000000000023bc065b7a379d17cf9333379fc05000000912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554d1b583c587e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9a0200000000000000e3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f645679c294392cf538b07ce2646cb7798b3e6440c2fbdb00a3e35208b0bb1d2cd871c5548930be3835f2554b4a28610643a98d9ec21ead2ed51b104d4d91af25b84550a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e4a9e231d512381e7a78afcb913466aae7f6df70252e79166d858fc152b659da074e1320060d0b11008e59a5923906f88b53987ad1714e72ba7a5b74f0c33d39000d06a59ff61622cfd9aa58fe8d485ae2c0cc65c2a36aaec2477584b6a89adaf17b0a6041bde4cc3ed54d27f777e92b87496e6649cf728d236619074d6ebdf098bc908c423d228a40f9411fe7226a40409d6e37c4f46756d31cb46761bade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18de0ae564162a27afea62d84f3a10746443d64364f56e24e6d21053d901204a1deeed41556175cbd4041b7d301bcb72652d950ad31928b0b093778b68e2e9853c02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f98928d5e9b94ff9ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595bcf50ab32d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063b59261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8c3a13596c2ea3e2e04cfdce669e51731b2875353193f82ade69d0540059fe6c7fe7c00fb7502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abd47b64a1b304502dda787343ce3c95300000000010000003baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022af46667cf25c5d3038816106dec28eaeb88343261a48a18f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfeff59d54d1f92ecc4e95dd2d18383117c03987d198899b212c55318294270a1ad10d30fef7c24b78b29d83238273f4fc87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead8eaf68b0c5dda0467d35a3807000000b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ea1e717d29135753208165b9cdbae037f315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d7012c1b45f6ada1ee7baa5b6a686b50f09b7f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac4d73a008364e0602a594817031fc2ff2c32a1989e00f52f8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a3c3e6e4fd2e016820f78b796a825b3dad9ce7b37507e0b83c3ecd01549bca6a016b3e18a00c748894dc3bfe5efda8b0a477d6a6562fdee45eb16e276dee992094ba9830f6c164179e7d532d86060bea930118d3cae1b8f916b9671b7000000000040f4bee5ad2dea2d14e195265504c05bba38b095e1679f96ddef65ba5de9c8cfb6465ae4165c0689a314a6eb6b36aa705b957edef3035e14b879d4e7dc00624708042e00bf9a7f7ae5f308744770759558e4fcb99c0dc957521ef255362bf2f3966f3754e81fb9bdef22c19f5a49147b85343f9f36bcda9f64b7a5c5b2f5452f5b1de02e6f15c5640bf89d4a74d51dc233dee628c1dfbb5566b98478c174b34eb234481547e484c6af101396b6977dd668b401391c1dc54f2edccf1cabe6be9868d383eb937efdfd9ade018106f544f04fc07ad525497f65fbad3cf145396acf3b0d38e6b46e28d86880fd6f62c373000000000000000000005d194c27cd4d8f6727f59c71dc84311c0f1fb6c87081c7be9355288610c32c2d8c18bf2027212182903687f48262aea54c5f8a315c9aa4a5af1aa2c4007d1baae38c270012b7eb9411ae451204dba30f8321b07a18db97c3e0cf6a15170e515b1cc463a67a5b2b23ec5662ccfa898b8d5075647bdfb390cde56efb8fd42df12c5c8f66bdc58449ec2b38bf12f5f0a49dcbcf4e6f11c47d23fa34793a0000a1cbb1e06e9a8d2449451d7a05ec0a0d3c9716f505ddeba488c60ebf44cac05c2739694359c925148137376dd3f1330ed0e9211f73ee279cc0b5c298422395ce438f48a39ff569375e609f9e904aacc3d8011326d5e4d654c74501cf16bbf72d3984f9b4ef000000003a8a3d49fc837001e4622e58e3a4ef6b55a8dd0680d951cdb6e54ed92a9a6a0e5e494b7b7b0ef4b4bafc5d964551b2a22bfd12b0761ef07a103e51e84917ee44f860b9785e264343f6a80e9318edecf73df6940856cd56c56eb3831445833c701044aaa49439a44a624267580b3c0980d7f87437bf498f6e1915450400000000000000564a02552c0a5fedbcf4da0db6ed03b9dbc224ee76d20aaf1ac74bcb7eb6f202209e64cc4d130dcf6ab3df8ae4911deb4bb5c7df97fc348d151e834be73915f854272f69d88123f666448b6a8e73322b04fffea9cc05e4129debf311c73b4d1a244b1e5b9943028745a0b6477686740ab877315e35624d791e6f71adb1acd3e22cf472ff7e048b16c11c84da9a3b16b92665912132a4dba680052919c20e191311d8092a09f3c609823fed1bd651ce1c34de105790ba2ca3afa26647f66efbf97b109e7226c74e32beb14ff3fd6918e255fc9b42f86b0188cf885afcc9bb77a7fc3ca7ec1015af494add960f8a11422ca005f24006867cd156e0350022943e301b2c07f4d37d07b05ac2fa1f1d5a0d6eb7e992b076bd77509c26034d2a740d578476410b413591884136259693effaf27e7bcfb58efa92625fb9bd68ecca42047f6e7d24b0446ea16a310073c163d1c6aa3ba1fe76b4e88d5f98cc05c6d033e2c28b4990892230d6b4e5c083a601a25145eb22f4f77313117f8147810d95c64fb78b0a000000000000000000000000e92ba8b066e4bd82bb6003d5da8791d838bcd6eefb13000000000000000000000000000000b652ff6fbad82da75114742bc6a27cba894ef490531be709a3a3c81b267dfafa55e6f855200b4e7518682c30f40808cd5bb8f00beb63b4989cc01d8e75a182337b9f9e08430ccec9bda0134d07a9f54b60033182f5d2bb61fd130d65e68bf148d26470060c707a8cf750ca954ee63c78cd975c7f565783383f02edcb7ce4a9ed0c511d18fe32352276d72eefe0d566f97ccae16b3492f60b96574aac4f1862fb6e4932c181dbf8c68ca16b765de9edba0bf5bfb9c4950d19c0bc31db02f374ce62141160436639d4b6cb0033a47ffdc54d55f1136743b1b26946f200000000000000007590ab8f29c7accd9d11786c4ca1271cd2293b572f14a3dfcaa3467f2783fc09e3eee3fa4b82b7b6ce904e05fa797a2f7ff63e4f874bd870821f6460904e05d7a3f8295a9a5fba1e3587b9d9e878c86ba9b66c4491fcff607d9cbf156f3fc0fb8c827d4e6cac493a3e2746bd5f0f8bc024352200a4250785cdca4fe3c546972d0a56e3905d1e72c33d64f6591fe25f312f47e7ec6b4640f1f6dc4efee4b8d3cfbfcbf77bfd52f0a99adc7d359233cfea0a11f5dcb87603885f08d633e842644988d2f45a1824361b5df707f726fad22d53727b4396b3d05df34933262fdb09f19837fdc2af1c721b17d54076e25ab625ae0a4c9cd900"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m46.709082712s ago: executing program 1 (id=728): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f0000000000002e000000000800040001000000", 0x24) 2m46.645419882s ago: executing program 1 (id=730): r0 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000d00)={'ip6gre0\x00', &(0x7f0000000c80)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x6, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x700, 0x18, 0x4}}) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = gettid() tkill(r2, 0x14) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0xb7815000) 2m46.643282507s ago: executing program 1 (id=731): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) syz_emit_ethernet(0x1c6, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "922ff5", 0x190, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, @hopopts={0x11, 0x23, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @generic={0x0, 0xe3, "9a406896431cf8cebb1379b1cfca3ce3334fb0cd81c12766ff8351be2d961c40ce922dd8423e2de93ba96a5c90f772216e5e60c7d2a67cbcbc1d3b195d538eb920fc058775cc06baf8a87b4736fa0cf5161d47d4416aa6a1099c3aa4a927c4d93bcf1f4a781cbde0ee829f1276818415e192376437a6d4854c3c3ad346c7df7dfea9cd0463aa441a1b9cd514fedb8172d54cbf1353cf5f63fe58465c2d0e165df05ada44174919aaffc29df43606f9d49bcc571525c7aecc77ad523da96156400a63d03f15e4254c95ecb66cda9310041006d9d10e6b8a38bbdcac75348fe624c73bd8"}]}, @hopopts={0x0, 0x0, '\x00', [@enc_lim]}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "114f84", 0x0, "8e269c"}, "c52104e4fbd8be11e86055d5cec119bfa161827fb675e43744d104b96e26ecb84a318c4c1d7b4f70305e74abd64694eddc8e552b811b2a1c63e32b811f4e8296"}}}}}}, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a3d01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e20"], 0xd6) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000500)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') 2m46.527751663s ago: executing program 1 (id=732): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000580)={{0x1ff, 0xfffb}, 'syz0\x00', 0xd}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) epoll_create1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e26, @loopback}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000ffffff80850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e24, 0x20, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x9}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000300)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0}) r8 = socket$key(0xf, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={r7, 0x3, r8, 0x4}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x0}) ioctl$EVIOCSFF(r9, 0x40304580, &(0x7f0000000000)={0x51, 0xe000, 0x104, {0xfff, 0x8002}, {0x4, 0x6}, @ramp={0x5a, 0x6, {0x0, 0x8, 0x48, 0x9}}}) 2m46.527334503s ago: executing program 1 (id=733): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000240)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)={0x88, r5, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x50, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x1a8, 0x1, @void, @val, @void, @val={0x4, 0x6, {0x3, 0x7, 0x7f, 0xfc}}, @void, @val={0x5, 0x3, {0x8, 0x76, 0x1}}, @val={0x25, 0x3, {0x0, 0x24, 0x4}}, @val={0x2a, 0x1, {0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x8}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x52ec}, @NL80211_ATTR_PBSS={0x4}]}, 0x88}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x100000000, 0x8000000002, 0xfffffffffffffffe}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = dup(r0) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r10, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000002c0), &(0x7f0000000500)=0x8) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) 2m46.474981569s ago: executing program 35 (id=733): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000ffffffd40700002000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032b75649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a6e5e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b6eb3c325d5687644a4c0a1d44d9dfd82896f56bdfa0790406984c123e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5da1c1dba7046f4d12fc65085302f333516804d9f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000240)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)={0x88, r5, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x50, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x1a8, 0x1, @void, @val, @void, @val={0x4, 0x6, {0x3, 0x7, 0x7f, 0xfc}}, @void, @val={0x5, 0x3, {0x8, 0x76, 0x1}}, @val={0x25, 0x3, {0x0, 0x24, 0x4}}, @val={0x2a, 0x1, {0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x8}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x52ec}, @NL80211_ATTR_PBSS={0x4}]}, 0x88}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x100000000, 0x8000000002, 0xfffffffffffffffe}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = dup(r0) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r10, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000002c0), &(0x7f0000000500)=0x8) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) 1m31.137115431s ago: executing program 6 (id=1809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="60010000", @ANYRES16=r1, @ANYBLOB="000128bd7000fedbdf25120000000c009900090000007a0000000600140104000000050029000c000000050013010100000008001400", @ANYRES32=r5, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0xc040}, 0x40000) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="60010000", @ANYRES16=r1, @ANYBLOB="000128bd7000fedbdf25120000000c009900090000007a0000000600140104000000050029000c000000050013010100000008001400", @ANYRES32=r5, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0xc040}, 0x40000) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) (async) 1m31.043518896s ago: executing program 6 (id=1815): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x800, 0x2b, @loopback}}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xc}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000440)='./bus\x00', 0x0, 0x8c7c88, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x42203, 0x13d) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8040) close_range(r1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000021b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}}, 0x0) getpid() socket$key(0xf, 0x3, 0x2) msgget(0x3, 0x710) msgget(0x2, 0x624) msgget(0x1, 0x240) msgctl$IPC_RMID(0x0, 0x0) msgget(0x3, 0x606) msgget(0x0, 0x200) r3 = shmget(0x1, 0x1000, 0x10, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000000)=""/162) 1m30.131794666s ago: executing program 6 (id=1849): r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0xe1, 0x28c201) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x80984120, &(0x7f0000000080)) syz_open_dev$sndpcmc(&(0x7f0000000040), 0xe1, 0x28c201) (async) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x80984120, &(0x7f0000000080)) (async) 1m30.057584029s ago: executing program 6 (id=1850): r0 = syz_open_dev$I2C(&(0x7f0000002780), 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2008000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) write$eventfd(r1, 0x0, 0x1f) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x10) r3 = socket(0x10, 0x803, 0x0) r4 = syz_open_dev$I2C(&(0x7f00000000c0), 0x9f0, 0x101000) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x0, 0x1000, 0xe7, &(0x7f0000000440)="f85d1d9b7cec732ef53692d7abb82a724ab53a2b2ba4475e6f9ca6c0bced30b104a30f22e30f8506cd465b15243212b0f0c1cab73f32b299467477cebbc0eba764c737e1f86c65c97723cddc0f487ff08d612aea7128d2fb9d67a9997ad3ecfdf1938f5c386e505644647ae2735adbc870ea22e0631c9434772688f0b64d97787046fda168194e46333aed4ecab69976598a03d24603923adcf18b89e657100af1d5c05611b427c66973e2a0c8355966877312c65eafb0904a8c134da73cfe1426c886feb91a69efcfe1fa732eb76403f2e518fb558685871908d6d42d810354c2b020378ed9d6", 0xe2, 0x0, &(0x7f0000000540)="7945e3df0bf40cb95cda0bb21f57701cd94c5b16e403fd17d6b0b3f537bf6763070fa134534e513c62f2abdc88d754490708ca929dd47b1fdc1e4c14b8bbccade6d908de8e983350285ab17989fce7c2623bdd068e49b99cbcb855af03ffc73e3578f754c4379123c9b582f203f21c9f3c4770f5ae861dccf6e0ab3049c081ed478874e83fe9fe405707f473e2a063cf39675ed8735bcdd7b6a877de2f4d1604fc08c3635b8f936fc4708d7b8c8c273716444c010b597b165e7912849513e731ded4f90ea475373cfdb03e87c2f7c11be99cd554bff2f30f550559e544734a80a8fc"}) ioctl$I2C_RETRIES(r4, 0x701, 0x8) write(r3, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 1m30.049692226s ago: executing program 6 (id=1855): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a00000000000000000000001400050000000000000000000000000000000002"], 0x30}, 0x1, 0x11}, 0x3f00000000000000) 1m29.896441528s ago: executing program 6 (id=1860): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x0, 0x18, 0x70, 0xfd}}]}}]}}, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x6, 0xb8, 0x6f}, {0x400, 0x6, 0x8e, 0x2}, {0x7, 0xc2, 0x7, 0x40}, {0x40, 0x5, 0x4, 0x80000000}, {0x2, 0x4, 0x8, 0xffff}]}) sendfile(r0, r1, 0x0, 0x8000002b) 1m29.849554586s ago: executing program 36 (id=1860): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x0, 0x18, 0x70, 0xfd}}]}}]}}, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x6, 0xb8, 0x6f}, {0x400, 0x6, 0x8e, 0x2}, {0x7, 0xc2, 0x7, 0x40}, {0x40, 0x5, 0x4, 0x80000000}, {0x2, 0x4, 0x8, 0xffff}]}) sendfile(r0, r1, 0x0, 0x8000002b) 50.521244188s ago: executing program 5 (id=2715): r0 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@index_on}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_emit_ethernet(0x36, &(0x7f0000001680)={@random="9de05b7bd0c8", @random="2b89a1b7a248", @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "2a85ae", 0x0, 0x73, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2}}}}, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x8000a0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x20}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000009a80)='/proc/crypto\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000100)=r3, 0x1) statfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/248) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x2, 0xfffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) syz_emit_ethernet(0x1c6, &(0x7f00000002c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "922ff5", 0x190, 0x21, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, @hopopts={0x11, 0x23, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @generic={0x0, 0xe3, "9a406896431cf8cebb1379b1cfca3ce3334fb0cd81c12766ff8351be2d961c40ce922dd8423e2de93ba96a5c90f772216e5e60c7d2a67cbcbc1d3b195d538eb920fc058775cc06baf8a87b4736fa0cf5161d47d4416aa6a1099c3aa4a927c4d93bcf1f4a781cbde0ee829f1276818415e192376437a6d4854c3c3ad346c7df7dfea9cd0463aa441a1b9cd514fedb8172d54cbf1353cf5f63fe58465c2d0e165df05ada44174919aaffc29df43606f9d49bcc571525c7aecc77ad523da96156400a63d03f15e4254c95ecb66cda9310041006d9d10e6b8a38bbdcac75348fe624c73bd8"}]}, @hopopts={0x0, 0x0, '\x00', [@enc_lim]}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "114f84", 0x0, "8e269c"}, "c52104e4fbd8be11e86055d5cec119bfa161827fb675e43744d104b96e26ecb84a318c4c1d7b4f70305e74abd64694eddc8e552b811b2a1c63e32b811f4e8296"}}}}}}, 0x0) sendfile(r0, r3, 0x0, 0x1000000003fffff) 50.40417465s ago: executing program 5 (id=2717): setreuid(0x0, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 50.309224513s ago: executing program 5 (id=2718): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000140001000000000000000000e00000020000000000000003000000000000000000000000000000000000000003000000000000000a"], 0xb8}, 0x1, 0xff9e}, 0x0) 50.298059163s ago: executing program 5 (id=2719): setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x2108003, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="a18340"], 0x130}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32=r5, @ANYBLOB="04227061", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x48}}, 0x4000010) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x14, 0x30, 0x1, 0x40000004}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x440c0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r6, 0xedaa7000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)=[{&(0x7f0000000340)={0xd4, 0x3c, 0x300, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x8, 0x104, 0x0, 0x1, [@generic, @nested={0x4, 0xa9}]}, @nested={0xb9, 0x85, 0x0, 0x1, [@generic="fa295c90cdc872ff7e6edc8a95a1d3b53ce9a1496cbf99c8aa7c9f135c56d7777ac0bbd9dccb833ea93615c79ca438ca0202d005960f5b446ec3414461928180aad59f84cbefae4b63db7d1acaf96c60d58895b9de740291ef58fc6ad9447c8a2742dceaa6db6643aa094790fda8c67e350ca028dd692df4d409ba67418eef9d22846051e55fe50c562ce01685a7e6ee09096aec6a23ebc2f85189d78d33cc6e04", @typed={0xc, 0xcc, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0xce, 0x0, 0x0, @u32=0x8}]}]}, 0xd4}, {&(0x7f0000001b40)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="04003a80060086007b00000008000000", @ANYRES32=r5, @ANYBLOB="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"], 0x136c}], 0x2, &(0x7f00000001c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60, 0x4000}, 0x1) mkdir(&(0x7f0000000600)='./file0\x00', 0xe8) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='hpfs\x00', 0x11, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000340), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000140)={0x16, 0x1, 0x3, "18e889d15b38429faa8ff62438eaed752e68f3a6d09382b392b049e33958b16c"}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1, 0x0, 0x0, 0x4044}, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ppoll(&(0x7f0000000280)=[{r9, 0x540}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001940)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 49.806221893s ago: executing program 5 (id=2723): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "d7"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchmod(r2, 0x504) mkdir(&(0x7f0000000300)='./file0\x00', 0x80) 49.431624327s ago: executing program 5 (id=2728): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2000, &(0x7f0000000180)='usrquotaB|I\x9b\xbb\x02\\\xff\x0eK\x8a\xd7\xec\xb1&+uB\xd2\xddO\xac\x80\a\x84\xd5\x02\xadEf\xdd\x03\xf4U\xecAU\xa3\xb0)j\xfb\x1b\xf6o') chdir(&(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, &(0x7f0000000040)={0xfffdfffffffffff9, 0x4, 0x0, 0x4}) mknodat(r0, &(0x7f0000000140)='./bus\x00', 0x400, 0x9) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000500)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000580)={0xc, r2}) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000540)={0x8, r2}) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f00000000c0)) 49.368651655s ago: executing program 37 (id=2728): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2000, &(0x7f0000000180)='usrquotaB|I\x9b\xbb\x02\\\xff\x0eK\x8a\xd7\xec\xb1&+uB\xd2\xddO\xac\x80\a\x84\xd5\x02\xadEf\xdd\x03\xf4U\xecAU\xa3\xb0)j\xfb\x1b\xf6o') chdir(&(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, &(0x7f0000000040)={0xfffdfffffffffff9, 0x4, 0x0, 0x4}) mknodat(r0, &(0x7f0000000140)='./bus\x00', 0x400, 0x9) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000500)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000580)={0xc, r2}) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000540)={0x8, r2}) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f00000000c0)) 4.446333357s ago: executing program 7 (id=3383): setreuid(0x0, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000000100000bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff00000000ae04020000000000be400300000000006504030001ed00007b130000000000004d44000000000e00630a04fe0000000071330000000000009f030000000000009500000000000000023bc065b7a379d17cf9333379fc05000000912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554d1b583c587e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9a0200000000000000e3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f645679c294392cf538b07ce2646cb7798b3e6440c2fbdb00a3e35208b0bb1d2cd871c5548930be3835f2554b4a28610643a98d9ec21ead2ed51b104d4d91af25b84550a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e4a9e231d512381e7a78afcb913466aae7f6df70252e79166d858fc152b659da074e1320060d0b11008e59a5923906f88b53987ad1714e72ba7a5b74f0c33d39000d06a59ff61622cfd9aa58fe8d485ae2c0cc65c2a36aaec2477584b6a89adaf17b0a6041bde4cc3ed54d27f777e92b87496e6649cf728d236619074d6ebdf098bc908c423d228a40f9411fe7226a40409d6e37c4f46756d31cb46761bade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18de0ae564162a27afea62d84f3a10746443d64364f56e24e6d21053d901204a1deeed41556175cbd4041b7d301bcb72652d950ad31928b0b093778b68e2e9853c02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f98928d5e9b94ff9ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595bcf50ab32d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063b59261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8c3a13596c2ea3e2e04cfdce669e51731b2875353193f82ade69d0540059fe6c7fe7c00fb7502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abd47b64a1b304502dda787343ce3c95300000000010000003baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022af46667cf25c5d3038816106dec28eaeb88343261a48a18f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfeff59d54d1f92ecc4e95dd2d18383117c03987d198899b212c55318294270a1ad10d30fef7c24b78b29d83238273f4fc87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead8eaf68b0c5dda0467d35a3807000000b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ea1e717d29135753208165b9cdbae037f315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d7012c1b45f6ada1ee7baa5b6a686b50f09b7f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac4d73a008364e0602a594817031fc2ff2c32a1989e00f52f8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a3c3e6e4fd2e016820f78b796a825b3dad9ce7b37507e0b83c3ecd01549bca6a016b3e18a00c748894dc3bfe5efda8b0a477d6a6562fdee45eb16e276dee992094ba9830f6c164179e7d532d86060bea930118d3cae1b8f916b9671b7000000000040f4bee5ad2dea2d14e195265504c05bba38b095e1679f96ddef65ba5de9c8cfb6465ae4165c0689a314a6eb6b36aa705b957edef3035e14b879d4e7dc00624708042e00bf9a7f7ae5f308744770759558e4fcb99c0dc957521ef255362bf2f3966f3754e81fb9bdef22c19f5a49147b85343f9f36bcda9f64b7a5c5b2f5452f5b1de02e6f15c5640bf89d4a74d51dc233dee628c1dfbb5566b98478c174b34eb234481547e484c6af101396b6977dd668b401391c1dc54f2edccf1cabe6be9868d383eb937efdfd9ade018106f544f04fc07ad525497f65fbad3cf145396acf3b0d38e6b46e28d86880fd6f62c373000000000000000000005d194c27cd4d8f6727f59c71dc84311c0f1fb6c87081c7be9355288610c32c2d8c18bf2027212182903687f48262aea54c5f8a315c9aa4a5af1aa2c4007d1baae38c270012b7eb9411ae451204dba30f8321b07a18db97c3e0cf6a15170e515b1cc463a67a5b2b23ec5662ccfa898b8d5075647bdfb390cde56efb8fd42df12c5c8f66bdc58449ec2b38bf12f5f0a49dcbcf4e6f11c47d23fa34793a0000a1cbb1e06e9a8d2449451d7a05ec0a0d3c9716f505ddeba488c60ebf44cac05c2739694359c925148137376dd3f1330ed0e9211f73ee279cc0b5c298422395ce438f48a39ff569375e609f9e904aacc3d8011326d5e4d654c74501cf16bbf72d3984f9b4ef000000003a8a3d49fc837001e4622e58e3a4ef6b55a8dd0680d951cdb6e54ed92a9a6a0e5e494b7b7b0ef4b4bafc5d964551b2a22bfd12b0761ef07a103e51e84917ee44f860b9785e264343f6a80e9318edecf73df6940856cd56c56eb3831445833c701044aaa49439a44a624267580b3c0980d7f87437bf498f6e1915450400000000000000564a02552c0a5fedbcf4da0db6ed03b9dbc224ee76d20aaf1ac74bcb7eb6f202209e64cc4d130dcf6ab3df8ae4911deb4bb5c7df97fc348d151e834be73915f854272f69d88123f666448b6a8e73322b04fffea9cc05e4129debf311c73b4d1a244b1e5b9943028745a0b6477686740ab877315e35624d791e6f71adb1acd3e22cf472ff7e048b16c11c84da9a3b16b92665912132a4dba680052919c20e191311d8092a09f3c609823fed1bd651ce1c34de105790ba2ca3afa26647f66efbf97b109e7226c74e32beb14ff3fd6918e255fc9b42f86b0188cf885afcc9bb77a7fc3ca7ec1015af494add960f8a11422ca005f24006867cd156e0350022943e301b2c07f4d37d07b05ac2fa1f1d5a0d6eb7e992b076bd77509c26034d2a740d578476410b413591884136259693effaf27e7bcfb58efa92625fb9bd68ecca42047f6e7d24b0446ea16a310073c163d1c6aa3ba1fe76b4e88d5f98cc05c6d033e2c28b4990892230d6b4e5c083a601a25145eb22f4f77313117f8147810d95c64fb78b0a000000000000000000000000e92ba8b066e4bd82bb6003d5da8791d838bcd6eefb13000000000000000000000000000000b652ff6fbad82da75114742bc6a27cba894ef490531be709a3a3c81b267dfafa55e6f855200b4e7518682c30f40808cd5bb8f00beb63b4989cc01d8e75a182337b9f9e08430ccec9bda0134d07a9f54b60033182f5d2bb61fd130d65e68bf148d26470060c707a8cf750ca954ee63c78cd975c7f565783383f02edcb7ce4a9ed0c511d18fe32352276d72eefe0d566f97ccae16b3492f60b96574aac4f1862fb6e4932c181dbf8c68ca16b765de9edba0bf5bfb9c4950d19c0bc31db02f374ce62141160436639d4b6cb0033a47ffdc54d55f1136743b1b26946f200000000000000007590ab8f29c7accd9d11786c4ca1271cd2293b572f14a3dfcaa3467f2783fc09e3eee3fa4b82b7b6ce904e05fa797a2f7ff63e4f874bd870821f6460904e05d7a3f8295a9a5fba1e3587b9d9e878c86ba9b66c4491fcff607d9cbf156f3fc0fb8c827d4e6cac493a3e2746bd5f0f8bc024352200a4250785cdca4fe3c546972d0a56e3905d1e72c33d64f6591fe25f312f47e7ec6b4640f1f6dc4efee4b8d3cfbfcbf77bfd52f0a99adc7d359233cfea0a11f5dcb87603885f08d633e842644988d2f45a1824361b5df707f726fad22d53727b4396b3d05df34933262fdb09f19837fdc2af1c721b17d54076e25ab625ae0a4c9cd900"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.445851248s ago: executing program 7 (id=3385): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0b45545, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe99}) syz_emit_ethernet(0x36, &(0x7f0000000140)={@multicast, @random="5f1c092d9536", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "9fbbb0", 0x0, 0x5e, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0xb5, 0x8000) r3 = gettid() r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r4, 0x0) accept4$bt_l2cap(r4, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x2cc002) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$TIOCCONS(r1, 0x541d) 3.541191258s ago: executing program 7 (id=3412): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000880)={0x3ff, 0xffff}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f00000008c0)={{r0}, "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"}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) sendfile(r0, r0, &(0x7f00000018c0)=0x4f, 0x8) r1 = syz_clone(0x2280, &(0x7f0000001900)="246e7f9d1fb2bc911c758922f643473464661ea08e642a23a1418fc118c5366e5ed70381fa7a849d92fa213651eda573a0f54a0dbc465d5298d689e234901a5e8987bc0c4441e8c302adabb58c9e1fdd9111fe6190a9ecd8d82bd1d25cac02414142994c5d847fb357b76ca722fe88516611325a5755fcb7b599a818f2e0a5947bbe67f5b2e4b167b67df3f2be0f456b2ec0bd310747f8efef161cf91ab83c7448e34516b2ec17", 0xa7, &(0x7f00000019c0), &(0x7f0000001a00), &(0x7f0000001a40)="43a65f0e8e2db8466e4f78d557a82526f16a34d01349cce7d4b896c1abd8bdf1221e28f71422f24256c4a0255566ba0177047764dbf85b1c3bfe8088dc578bf1cc2015faf1aa72de32c46c3cf816") capset(&(0x7f0000001ac0)={0x20080522, r1}, &(0x7f0000001b00)={0x0, 0x1, 0xb, 0xfea, 0x67, 0x6d42574}) r2 = openat$cgroup_ro(r0, &(0x7f0000001b40)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r0, r0, &(0x7f0000001b80)=0x3, 0x4dcb) r3 = syz_open_dev$audion(&(0x7f0000001bc0), 0x8, 0x68180) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r3, 0x4068aea3, &(0x7f0000001c00)) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000001dc0)={0x9, &(0x7f0000001c80)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @local}, {}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}]}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001e00), 0x103000, 0x0) ioctl$FBIOGET_FSCREENINFO(r4, 0x4602, &(0x7f0000001e40)) mount$bind(&(0x7f0000001ec0)='./file0\x00', &(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40), 0x41, 0x0) recvmsg$can_j1939(r0, &(0x7f0000003680)={&(0x7f0000001f80)=@can, 0x80, &(0x7f00000035c0)=[{&(0x7f0000002000)=""/207, 0xcf}, {&(0x7f0000002100)=""/6, 0x6}, {&(0x7f0000002140)=""/198, 0xc6}, {&(0x7f0000002240)=""/7, 0x7}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/112, 0x70}, {&(0x7f0000002400)=""/46, 0x2e}, {&(0x7f0000002440)=""/176, 0xb0}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/182, 0xb6}], 0xa}, 0x20) get_robust_list(r1, &(0x7f0000003780)=&(0x7f0000003740)={&(0x7f0000003700)={&(0x7f00000036c0)}}, &(0x7f00000037c0)=0x18) umount2(&(0x7f0000003800)='./file0\x00', 0x1) ptrace(0x4207, r1) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000003840)={0x57, 0x1}) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000003880)={0xf4, "66af20df8edadb945743287f4185da83e2b30e31b7965eb9e92c240938a44f5198ccf3a546ef2e6d7528aed12d60231616c80b66815057a6e33be758692f35f7"}) wait4(r1, &(0x7f0000003900), 0x1, &(0x7f0000003940)) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000003a40), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000003c00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003a80)={0x110, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x27, 0xa9, @random="2adf3f91ad88a8b63c562313ef95175fa3b234ef715ee4c094360749ad9e6953006e80"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xffffffffffffffda}, @DEVLINK_ATTR_RATE_NODE_NAME={0xb3, 0xa8, @random="f7d81c8dbc74409782a66788ca870422a0e8b1770e9f46f4aeae18a706572436ea636e95f28d785c6a1929a38d00fdd46df7205bd395e5bfd839dab0e6facdac15e66be73ef7d60bfad8b75f1d61e757f95c9a5c2eb5c479bb826d6770793a5c4c0261ef1caca6d01a29b0d203b8636f38ed142fc0f2872824d3e834cfa852ef22bac0233969e6c5be643856475184135060b256417ec437cee83fc87f11e6d6f9c9e71606247ceff6faed8ad90460"}]}, 0x110}, 0x1, 0x0, 0x0, 0x4004840}, 0x4040840) mknodat(r3, &(0x7f0000003c40)='./file0\x00', 0x0, 0x2) move_mount(r2, &(0x7f0000003c80)='./file0\x00', r3, &(0x7f0000003cc0)='./file0\x00', 0x41) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000003d00)={0x9eb, "88ba04156af874a19b9c3ca4ad1ced32e0f7066ae3575f4b8b8f1b71fcac0b68", 0x5, 0x20, 0xce6, 0x401, 0x18, 0x4, 0x2}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000003d80), 0x3c5000, 0x0) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000003dc0)=0x2c15) 3.419947434s ago: executing program 7 (id=3417): setreuid(0x0, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.419693693s ago: executing program 7 (id=3418): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%-010d \x00'}, 0x20) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@float={0x6, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x0, 0x5f, 0x61]}}, &(0x7f0000000580)=""/37, 0x29, 0x25, 0x0, 0x80000001, 0x10000, @value}, 0x28) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x272c, 0x30}, 0xc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0400000000002000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f00000008c0)={0xc0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x25, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xf}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xa1ac}, @exit, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd3b}}, @call={0x85, 0x0, 0x0, 0xbd}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x81}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x91b6, 0x45, &(0x7f0000000500)=""/69, 0x41100, 0x20, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000600)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0xe, 0x6f, 0x5}, 0x10, 0x5e07, 0xffffffffffffffff, 0x1, &(0x7f0000000740)=[r5, r6, r8], &(0x7f0000000780)=[{0x2, 0x2, 0x2, 0xd}], 0x10, 0x8000, @void, @value}, 0x94) 154.470363ms ago: executing program 8 (id=3428): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24) 154.238392ms ago: executing program 9 (id=3429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000697dd8e64300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x9}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x564}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) uname(&(0x7f0000000200)=""/4096) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001200)={0x2, 0x12, 0x8, 0x0, 0xd, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e20, 0x8000, @empty, 0x6}, @in={0x2, 0x4e23, @private=0xa010102}}, @sadb_address={0x3, 0x6, 0xff, 0xa2d62dd55dec0fe6, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e23}]}, 0x68}}, 0x4000) 154.14963ms ago: executing program 8 (id=3430): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r3, 0x400455c8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5556ec412e7c4a5dcaa18c98625008c2ae24cf9f24bcaf1f293d7cf3bb7488dd0ef72370cec638fd847dcd978d1ffade0a00dc71d72444d53034437153544749f4288cfdbfd245ea07a65b0fa1cfbd69b25ab23453444b8d9c1d2e51364f365b390c66aff6487b0e0cc062ae32547ad1fee3274d2c9610478e0dbd39aa6f5bd9b5ae270f496d5b67d4c25d99a2ee83abfc64203c1f65b1b8ceb3ee61e53aac30ba46797e53aaa8fa4036983126c1cc70cd4c4d3a503d076b0af3db2f13adbc0c2f837738939364b0f9c13ae4e5ff6b7364a6e0461729dc54e9ffd39a29b38e8c4c6ffea42d27967edfeadc3713b2f6e2cd737f648502e72b"], 0x14}}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbdaa1861751f8630bba4e30c7000fcdb7c000000000000000d0009000000080004000a0101020c00830000000000000000000c00030002040000000000000c000300020000000000000008000400ac1414aa0800040064010102080004000a"], 0x68}, 0x1, 0x0, 0x0, 0x8005}, 0x2004055) 153.93429ms ago: executing program 9 (id=3431): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000203d008b0900000000000000000001000000040000001c000180180010800c000f00890000000000000008000f00e0000001080002002e483691ae1f26b9cb425cabda6f988013ef8e7573c243e482e80a5e791f51072bdf9b1f42565d0888fa5f4a22cf59c67306753ae53226e6201d45612e1722d27d3b9fe26cfa72f8bb40f74828e891490d7c246f6672da00a11281fe021e429a827277336a2130270c684655a877d158ca5a95dd5ef2e2830a4482f75e92163ae7b9cab884966d9d7b588b4611d082af8dcbf172", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 153.750968ms ago: executing program 0 (id=3432): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 140.082782ms ago: executing program 0 (id=3433): r0 = memfd_secret(0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x284d, 0x0, 0xfa2, 0x0}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) (async) syz_io_uring_setup(0x5e2b, &(0x7f0000000080)={0x0, 0x399f, 0x2000, 0x0, 0xfffffffe}, 0x0, 0x0) 139.90671ms ago: executing program 7 (id=3434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (rerun: 32) ioctl$int_in(r1, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)) (async, rerun: 32) r2 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r3 = dup(r0) (async, rerun: 32) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) (rerun: 32) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) (async) ioctl$TCXONC(r4, 0x89f1, 0x0) r5 = fcntl$dupfd(r1, 0x406, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r3}) 138.079842ms ago: executing program 8 (id=3435): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000140001000000000000000000e00000020000000000000003000000000000000000000000000000000000000003000000000000000a"], 0xb8}, 0x1, 0x0, 0xf00}, 0x0) 137.726552ms ago: executing program 9 (id=3436): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b80000000000000008000d000d000000", 0x24) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r2}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r2}, 0x38) 83.661345ms ago: executing program 0 (id=3437): setreuid(0x0, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 83.410853ms ago: executing program 8 (id=3438): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async, rerun: 32) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (rerun: 32) unshare(0x100) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000002380)="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", 0x1000, 0x400c881, 0x0, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000, 0x2000, 0x0, 0x0) 83.039275ms ago: executing program 0 (id=3439): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) pselect6(0x95, &(0x7f00000001c0)={0x3f, 0xffffffffffffff7e, 0xfffffffffffffffe, 0x6, 0xfffffffffffffffd, 0x3, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) close_range(r1, 0xffffffffffffffff, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000940)=ANY=[@ANYBLOB="0b00000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000080030010b9ffff0700000001f0ffffc117db230000000000"], 0x118) fcntl$lock(r2, 0x6, &(0x7f0000000580)={0x0, 0x0, 0x10, 0x81}) write$FUSE_BMAP(r1, &(0x7f0000000180)={0x18, 0xfffffffffffffff5, 0x0, {0x1}}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 82.986305ms ago: executing program 9 (id=3440): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24) 6.765943ms ago: executing program 8 (id=3441): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 6.194632ms ago: executing program 9 (id=3442): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x3, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001f40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x93bc, @loopback, 0xb0}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)="7eb6", 0x2}], 0x1}}], 0x1, 0x4005) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000004980)={0x94a, 0xf, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)}], 0x2}}], 0x2, 0x0) 6.024511ms ago: executing program 0 (id=3443): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) migrate_pages(0x0, 0x6, 0x0, &(0x7f0000000100)=0x9) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0x9, 0x5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x484}, 0x10) 1.645327ms ago: executing program 8 (id=3444): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)={r0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x1) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x1, 0xd, 0x5, &(0x7f0000000000)={0xc, "90f541a4e64f61909103f1fb288ff6ff03ee6a69d7061c986eb5e52829e7b38393"}}) 112.216µs ago: executing program 9 (id=3445): r0 = socket(0x10, 0x3, 0x2000) write(r0, &(0x7f00000000c0)="1b0000001e005f0214f6fffffffffff80700"/27, 0x1b) 0s ago: executing program 0 (id=3446): writev(0xffffffffffffffff, &(0x7f00000026c0), 0x0) (async) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) (async, rerun: 32) sendto$packet(r1, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) (rerun: 32) kernel console output (not intermixed with test programs): 7 failed: -110 [ 211.452987][T14363] team0: Port device team_slave_0 added [ 211.459211][T14363] team0: Port device team_slave_1 added [ 211.483235][T14363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.485294][T14363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.489774][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.492949][T14363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.499692][T14363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.501983][T14363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.509188][T14363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.540847][T14363] hsr_slave_0: entered promiscuous mode [ 211.543139][T14363] hsr_slave_1: entered promiscuous mode [ 211.545036][T14363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.547292][T14363] Cannot create hsr debugfs directory [ 211.648159][T14363] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.692521][ T58] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 211.740490][T14363] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.831104][T14363] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.854548][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 211.857483][ T58] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 211.860316][ T58] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 211.863871][ T58] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 211.866861][ T58] usb 5-1: config 250 has no interface number 0 [ 211.868642][ T58] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 211.871930][ T58] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 211.875971][ T58] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 211.880019][ T58] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 211.882351][T14381] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2599'. [ 211.884722][ T58] usb 5-1: config 250 interface 228 has no altsetting 0 [ 211.891539][ T58] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 211.894826][ T58] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 211.899448][ T58] usb 5-1: Product: syz [ 211.900985][ T58] usb 5-1: SerialNumber: syz [ 211.906964][ T58] hub 5-1:250.228: bad descriptor, ignoring hub [ 211.909340][ T58] hub 5-1:250.228: probe with driver hub failed with error -5 [ 211.924555][T14363] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.074381][T14363] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 212.079473][T14363] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 212.084096][T14363] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 212.088012][T14363] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 212.106396][T14363] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.108418][T14363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.110628][T14363] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.112519][T14363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.123312][ T58] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 37 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 212.141039][T14363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.154084][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.158656][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.177256][T14363] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.186991][ T8147] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.189375][ T8147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.196813][ T8156] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.199026][ T8156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.320916][T14363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.336381][ T39] audit: type=1400 audit(2000000022.028:2115): avc: denied { read write } for pid=14378 comm="syz.0.2598" name="lp0" dev="devtmpfs" ino=3033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 212.354041][ T39] audit: type=1400 audit(2000000022.028:2116): avc: denied { open } for pid=14378 comm="syz.0.2598" path="/dev/usb/lp0" dev="devtmpfs" ino=3033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 212.440982][T14363] veth0_vlan: entered promiscuous mode [ 212.445695][T14363] veth1_vlan: entered promiscuous mode [ 212.462435][T14363] veth0_macvtap: entered promiscuous mode [ 212.467489][T14363] veth1_macvtap: entered promiscuous mode [ 212.474024][T14363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.476851][T14363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.479547][T14363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.482341][T14363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.485538][T14363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.488332][T14363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.490915][T14363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.493658][T14363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.498160][T14363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.504511][T14363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.507850][T14363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.510456][T14363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.513210][T14363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.516383][T14363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.519172][T14363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.521768][T14363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.524543][T14363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.527202][T14363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.529981][T14363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.533509][T14363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.539147][T14363] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.541493][T14363] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.543862][T14363] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.546204][T14363] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.583934][T14399] bpf: Bad value for 'uid' [ 212.586574][ T39] audit: type=1400 audit(2000000022.262:2117): avc: denied { mounton } for pid=14398 comm="syz.7.2602" path="/470/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 212.593486][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.595671][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.615517][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.617668][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.675370][ T39] audit: type=1326 audit(2000000022.337:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14403 comm="syz.5.2593" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f014798cde9 code=0x0 [ 212.698708][T14406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2604'. [ 212.754014][T14407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.756962][T14407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.760079][T14407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.762780][T14407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.765353][T14407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.768396][T14407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.771768][T14407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.775149][T14407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.778522][T14407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.788672][T14379] usb 5-1: reset high-speed USB device number 37 using dummy_hcd [ 213.130788][T14425] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2610'. [ 213.194206][ C2] usblp0: nonzero read bulk status received: -71 [ 213.274848][T14436] xt_hashlimit: max too large, truncated to 1048576 [ 213.382334][ T5943] Bluetooth: hci3: command tx timeout [ 213.400755][T14379] usblp0: error -71 reading from printer [ 213.407583][ C1] usblp0: nonzero read bulk status received: -71 [ 213.607465][T14461] netlink: 'syz.5.2621': attribute type 7 has an invalid length. [ 213.627597][ T5949] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 213.633423][ T5943] Bluetooth: hci0: command 0x1407 tx timeout [ 213.636206][ T5949] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 214.004022][T14480] ./cgroup: Can't lookup blockdev [ 214.009129][T14480] overlay: ./file0 is not a directory [ 214.028782][T14480] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 214.112785][ T6016] usb 5-1: USB disconnect, device number 37 [ 214.126518][ T6016] usblp0: removed [ 214.155685][T14492] afs: Unknown parameter 'fowner>00000000000000049663' [ 214.207523][T14495] pim6reg0: tun_chr_ioctl cmd 1074025678 [ 214.209512][T14495] pim6reg0: group set to 6 [ 214.364102][T14504] netlink: 'syz.8.2635': attribute type 29 has an invalid length. [ 214.368391][T14504] netlink: 'syz.8.2635': attribute type 29 has an invalid length. [ 214.371443][T14504] netlink: 500 bytes leftover after parsing attributes in process `syz.8.2635'. [ 214.377239][T14504] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2635'. [ 214.411091][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2636'. [ 214.413997][ T39] audit: type=1400 audit(2000000023.964:2119): avc: denied { map } for pid=14507 comm="syz.8.2636" path="socket:[55811]" dev="sockfs" ino=55811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.448534][T14512] ./cgroup: Can't lookup blockdev [ 214.455361][T14512] overlay: ./file0 is not a directory [ 214.469211][T14512] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 214.646971][T14530] netlink: 'syz.8.2643': attribute type 16 has an invalid length. [ 214.649242][T14530] netlink: 'syz.8.2643': attribute type 17 has an invalid length. [ 214.667272][T14530] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.669401][T14530] bridge0: port 2(bridge_slave_1) entered listening state [ 214.671946][T14530] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.674045][T14530] bridge0: port 1(bridge_slave_0) entered listening state [ 214.725913][T14535] mkiss: ax0: crc mode is auto. [ 214.766599][T14538] ./cgroup: Can't lookup blockdev [ 214.770841][T14538] overlay: ./file0 is not a directory [ 214.804904][T14538] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 214.919904][T14551] 9pnet_fd: Insufficient options for proto=fd [ 215.007380][T14563] netlink: 'syz.7.2659': attribute type 29 has an invalid length. [ 215.010153][T14563] netlink: 'syz.7.2659': attribute type 29 has an invalid length. [ 215.019264][ T5943] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 215.023760][T14554] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 215.054986][ T39] audit: type=1326 audit(2000000024.563:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14568 comm="syz.7.2660" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f253cd8cde9 code=0x0 [ 215.310575][T14602] kAFS: No cell specified [ 215.313657][T14602] overlayfs: overlapping lowerdir path [ 215.412442][T14614] overlay: Bad value for 'workdir' [ 215.420395][ T39] audit: type=1400 audit(2000000024.909:2121): avc: denied { lock } for pid=14615 comm="syz.8.2677" path="socket:[56322]" dev="sockfs" ino=56322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 215.566138][T14629] netlink: 'syz.8.2683': attribute type 10 has an invalid length. [ 215.581832][T14629] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.586903][T14629] bond0: (slave team0): Enslaving as an active interface with an up link [ 215.594579][ T5943] Bluetooth: hci3: command tx timeout [ 215.641037][T14635] __nla_validate_parse: 10 callbacks suppressed [ 215.641051][T14635] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2685'. [ 215.764256][T14651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2691'. [ 215.785386][T14656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14656 comm=syz.8.2692 [ 215.792057][T14656] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2692'. [ 215.851814][ T5949] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 215.854374][ T5943] Bluetooth: hci0: command 0x1407 tx timeout [ 215.856243][ T5949] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 215.903889][T14663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2695'. [ 216.009392][T14667] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2697'. [ 216.099498][T14673] fuse: Bad value for 'fd' [ 216.102404][T14673] set match dimension is over the limit! [ 216.105697][T14673] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2700'. [ 216.156791][T14675] netlink: 'syz.7.2701': attribute type 16 has an invalid length. [ 216.159140][T14675] netlink: 25522 bytes leftover after parsing attributes in process `syz.7.2701'. [ 216.399836][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2705'. [ 216.484335][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 216.484347][ T39] audit: type=1400 audit(2000000025.910:2126): avc: denied { map } for pid=14704 comm="syz.7.2709" path="pipe:[56038]" dev="pipefs" ino=56038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 216.668490][T14725] lo speed is unknown, defaulting to 1000 [ 216.694239][T14725] lo: entered promiscuous mode [ 216.697133][T14725] tunl0: entered promiscuous mode [ 216.699151][ T39] audit: type=1326 audit(2000000026.107:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14728 comm="syz.7.2712" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f253cd8cde9 code=0x0 [ 216.707251][T14725] gre0: entered promiscuous mode [ 216.710809][T14725] gretap0: entered promiscuous mode [ 216.857398][T14746] overlayfs: missing 'lowerdir' [ 216.908000][T14748] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 216.908027][ T1147] bond0: (slave bond_slave_0): interface is now down [ 216.918864][ T1147] bond0: (slave bond_slave_1): interface is now down [ 216.920968][ T1147] bond0: (slave batadv0): interface is now down [ 216.934642][ T1147] bond0: now running without any active interface! [ 216.948772][T14748] lo speed is unknown, defaulting to 1000 [ 217.001558][T14757] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2718'. [ 217.186013][T14760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2719'. [ 217.217277][T14770] net_ratelimit: 947 callbacks suppressed [ 217.217295][T14770] netlink: zone id is out of range [ 217.224314][T14770] netlink: zone id is out of range [ 217.225933][T14770] netlink: zone id is out of range [ 217.227453][T14770] netlink: zone id is out of range [ 217.229196][T14770] netlink: zone id is out of range [ 217.233678][T14769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.258332][T14767] hpfs: Bad magic ... probably not HPFS [ 217.261046][ T39] audit: type=1400 audit(2000000026.621:2128): avc: denied { map } for pid=14759 comm="syz.5.2719" path="/21" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 217.351130][T14775] input: syz0 as /devices/virtual/input/input30 [ 217.354210][T14775] input: failed to attach handler leds to device input30, error: -6 [ 217.654889][ T39] audit: type=1400 audit(2000000026.995:2129): avc: denied { execute_no_trans } for pid=14778 comm="syz.0.2724" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A6DE0202864656C6574656429 dev="hugetlbfs" ino=56184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 217.710523][T14781] overlay: Bad value for 'workdir' [ 217.770942][T14784] tmpfs: Group quota block hardlimit too large. [ 217.775659][ T5985] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 217.875389][ T39] audit: type=1326 audit(2000000027.210:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14787 comm="syz.7.2727" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f253cd8cde9 code=0x0 [ 217.946468][ T5985] usb 13-1: Using ep0 maxpacket: 8 [ 217.949434][ T5985] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 217.951910][ T5985] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 217.955509][ T5985] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.963597][ T5985] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 217.966791][ T5985] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 217.971901][ T5985] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 217.974129][ T5985] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 217.977155][ T5985] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.982895][ T5985] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 217.986129][ T5985] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 217.990121][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.994600][ T5985] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 217.997532][ T5985] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 218.004019][ T5985] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.007332][ T5985] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 218.012848][ T5985] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 218.019880][ T5985] usb 13-1: string descriptor 0 read error: -22 [ 218.024646][ T5985] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 218.027327][ T5985] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.041339][ T5985] adutux 13-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 218.085512][ T5943] Bluetooth: hci0: command 0x1407 tx timeout [ 218.086547][ T5949] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 218.140127][ T8697] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.140821][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.155952][ T5945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.162458][ T5945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.166924][ T5945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.170888][ T5945] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.173150][ T5945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.198104][T14793] lo speed is unknown, defaulting to 1000 [ 218.231470][ T8697] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.316670][T14805] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 218.319389][ T8697] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.319430][T14805] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 218.325951][T14805] overlayfs: missing 'lowerdir' [ 218.344069][T14793] chnl_net:caif_netlink_parms(): no params data found [ 218.428412][ T8697] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.455211][T14793] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.457443][T14793] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.460829][T14793] bridge_slave_0: entered allmulticast mode [ 218.463215][T14793] bridge_slave_0: entered promiscuous mode [ 218.466110][T14793] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.468302][T14793] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.470619][T14793] bridge_slave_1: entered allmulticast mode [ 218.472934][T14793] bridge_slave_1: entered promiscuous mode [ 218.500582][T14793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.504799][T14793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.544197][T14793] team0: Port device team_slave_0 added [ 218.549071][T14793] team0: Port device team_slave_1 added [ 218.607366][T14793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.609482][T14793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.616433][T14793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.624683][T14793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.626698][T14793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.634237][T14793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.637690][ T8697] bridge_slave_1: left allmulticast mode [ 218.639435][ T8697] bridge_slave_1: left promiscuous mode [ 218.641330][ T8697] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.647270][ T8697] bridge_slave_0: left allmulticast mode [ 218.649035][ T8697] bridge_slave_0: left promiscuous mode [ 218.651029][ T8697] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.831231][T14814] tty tty34: ldisc open failed (-12), clearing slot 33 [ 219.114173][ T8697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.118434][ T8697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.122926][ T8697] bond0 (unregistering): Released all slaves [ 219.212822][T14793] hsr_slave_0: entered promiscuous mode [ 219.216586][T14793] hsr_slave_1: entered promiscuous mode [ 219.221530][T14793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.223860][T14793] Cannot create hsr debugfs directory [ 219.402090][T14793] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 219.405730][T14793] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 219.409028][T14793] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 219.416819][T14793] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 219.443123][T14828] netlink: 'syz.0.2739': attribute type 10 has an invalid length. [ 219.462936][T14828] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 219.489722][ T8697] hsr_slave_0: left promiscuous mode [ 219.492074][ T8697] hsr_slave_1: left promiscuous mode [ 219.494039][ T8697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.496806][ T8697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.499484][ T8697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.501521][ T8697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.527379][ T8697] veth1_macvtap: left promiscuous mode [ 219.529180][ T8697] veth0_macvtap: left promiscuous mode [ 219.531269][ T8697] veth1_vlan: left promiscuous mode [ 219.532722][ T8697] veth0_vlan: left promiscuous mode [ 220.306936][ T5943] Bluetooth: hci0: command 0x1407 tx timeout [ 220.309254][ T5949] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 220.401167][ T5949] Bluetooth: hci3: command tx timeout [ 220.644166][ T25] usb 13-1: USB disconnect, device number 5 [ 221.061943][ T8697] team0 (unregistering): Port device team_slave_1 removed [ 221.257467][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.299522][ T8697] team0 (unregistering): Port device team_slave_0 removed [ 222.464556][T14834] __nla_validate_parse: 3 callbacks suppressed [ 222.464575][T14834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2740'. [ 222.471192][T14834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2740'. [ 222.494400][T14793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.505661][T14793] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.512360][ T8155] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.515239][ T8155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.523186][ T5949] Bluetooth: hci0: command 0x1407 tx timeout [ 222.524291][ T8147] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.526984][ T8147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.618374][ T5949] Bluetooth: hci3: command tx timeout [ 222.641837][T14793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.746192][T14859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2749'. [ 222.748876][T14859] bridge_slave_1: left allmulticast mode [ 222.750498][T14859] bridge_slave_1: left promiscuous mode [ 222.752112][T14859] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.780588][T14859] bridge_slave_0: left allmulticast mode [ 222.782392][T14859] bridge_slave_0: left promiscuous mode [ 222.784628][T14859] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.925326][T14878] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 223.019425][T14793] veth0_vlan: entered promiscuous mode [ 223.027616][T14793] veth1_vlan: entered promiscuous mode [ 223.055300][T14793] veth0_macvtap: entered promiscuous mode [ 223.068824][T14793] veth1_macvtap: entered promiscuous mode [ 223.078794][T14793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.082545][T14793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.086072][T14793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.090659][T14793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.094277][T14793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.097996][T14793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.101655][T14793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.105450][T14793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.110217][T14793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.117642][T14793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.121417][T14793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.124917][T14793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.128754][T14793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.132370][T14793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.136110][T14793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.139688][T14793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.143508][T14793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.146993][T14793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.150995][T14793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.155993][T14793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.161750][T14793] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.165194][T14793] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.168391][T14793] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.171510][T14793] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.225822][ T8155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.232821][ T8155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.244510][ T8697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.246799][ T8697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.279985][T14891] exFAT-fs (nullb0): invalid boot record signature [ 223.282711][T14891] exFAT-fs (nullb0): failed to read boot sector [ 223.284622][T14891] exFAT-fs (nullb0): failed to recognize exfat type [ 223.288001][T14891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=14891 comm=syz.8.2758 [ 223.304981][T14893] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2729'. [ 223.348459][ T8153] bridge_slave_1: left promiscuous mode [ 223.350784][ T8153] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.356485][ T8153] bridge_slave_0: left allmulticast mode [ 223.358879][ T8153] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.540948][T14912] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2767'. [ 224.012462][ T8153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.018930][ T8153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.023268][ T8153] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 224.037684][ T8153] bond0 (unregistering): (slave team0): Releasing backup interface [ 224.051772][ T8153] bond0 (unregistering): Released all slaves [ 224.056381][ T8153] bond1 (unregistering): Released all slaves [ 224.061082][ T8153] bond2 (unregistering): Released all slaves [ 224.257957][ T39] audit: type=1800 audit(2000000033.159:2131): pid=14930 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.2773" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 224.331915][ T8153] bond3 (unregistering): Released all slaves [ 224.420510][T14933] input: syz0 as /devices/virtual/input/input31 [ 224.432171][T14936] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2774'. [ 224.500225][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.536132][T14936] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2774'. [ 224.598277][T14945] xt_nat: multiple ranges no longer supported [ 224.712130][T14951] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 224.756143][ T5949] Bluetooth: hci0: command 0x1407 tx timeout [ 224.831892][ T5949] Bluetooth: hci3: command tx timeout [ 224.835043][T14962] netlink: 'syz.7.2785': attribute type 1 has an invalid length. [ 224.837364][T14962] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2785'. [ 224.840195][T14965] netlink: 'syz.7.2785': attribute type 1 has an invalid length. [ 224.847654][T14965] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2785'. [ 224.879491][ T8153] hsr_slave_0: left promiscuous mode [ 224.881636][ T8153] hsr_slave_1: left promiscuous mode [ 224.883557][ T8153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.892929][ T8153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.895154][ T8153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.924775][ T8153] veth1_to_bridge: left promiscuous mode [ 224.927876][ T8153] veth1_macvtap: left promiscuous mode [ 224.930123][ T8153] veth0_macvtap: left promiscuous mode [ 226.230482][ T8153] team0 (unregistering): Port device team_slave_1 removed [ 226.362648][ T8153] team0 (unregistering): Port device team_slave_0 removed [ 227.068940][ T5949] Bluetooth: hci3: command tx timeout [ 227.500034][ T39] audit: type=1400 audit(2000000036.209:2132): avc: denied { read } for pid=14989 comm="syz.9.2791" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 227.514718][ T39] audit: type=1400 audit(2000000036.209:2133): avc: denied { open } for pid=14989 comm="syz.9.2791" path="/7/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 227.543176][T14990] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 227.609753][ T39] audit: type=1326 audit(2000000036.312:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15001 comm="syz.9.2794" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9f118cde9 code=0x0 [ 227.624083][ T5949] Bluetooth: hci2: ISO packet for unknown connection handle 3379 [ 227.626359][ T5949] Bluetooth: hci2: ISO packet for unknown connection handle 3379 [ 227.671578][T15016] netlink: 'syz.7.2799': attribute type 10 has an invalid length. [ 227.686990][T15016] batman_adv: batadv0: Adding interface: team0 [ 227.688971][T15016] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.697809][T15016] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 227.701849][T15016] netlink: 'syz.7.2799': attribute type 10 has an invalid length. [ 227.704590][T15016] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2799'. [ 227.705610][ T39] audit: type=1400 audit(2000000036.396:2135): avc: denied { listen } for pid=15015 comm="syz.8.2800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.710507][T15017] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 227.718584][T15017] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 227.721591][T15017] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 227.724755][T15017] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 227.728562][T15017] geneve2: entered promiscuous mode [ 227.739495][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.749809][T15017] geneve2: entered allmulticast mode [ 227.755224][T15016] team0: entered promiscuous mode [ 227.758662][T15016] team_slave_0: entered promiscuous mode [ 227.768085][T15016] team_slave_1: entered promiscuous mode [ 227.774136][T15016] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.776767][T15016] batman_adv: batadv0: Interface activated: team0 [ 227.779377][T15016] batman_adv: batadv0: Interface deactivated: team0 [ 227.782438][T15016] batman_adv: batadv0: Removing interface: team0 [ 227.786088][T15016] bridge0: port 3(team0) entered blocking state [ 227.788687][T15016] bridge0: port 3(team0) entered disabled state [ 227.791217][T15016] team0: entered allmulticast mode [ 227.794846][T15016] team_slave_0: entered allmulticast mode [ 227.796874][T15016] team_slave_1: entered allmulticast mode [ 227.805261][T15026] netlink: 'syz.8.2802': attribute type 10 has an invalid length. [ 227.810958][T15026] team0: entered promiscuous mode [ 227.813115][T15026] team_slave_0: entered promiscuous mode [ 227.819540][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 227.823138][T15026] team_slave_1: entered promiscuous mode [ 227.833047][T15026] bond0: (slave team0): Releasing backup interface [ 227.838962][T15026] bridge0: port 3(team0) entered blocking state [ 227.841367][T15026] bridge0: port 3(team0) entered disabled state [ 227.843972][T15026] team0: entered allmulticast mode [ 227.845969][T15026] team_slave_0: entered allmulticast mode [ 227.848092][T15026] team_slave_1: entered allmulticast mode [ 227.894142][ T8153] IPVS: stop unused estimator thread 0... [ 227.964021][T15042] xt_hashlimit: size too large, truncated to 1048576 [ 227.966737][T15042] xt_hashlimit: max too large, truncated to 1048576 [ 227.973662][ T39] audit: type=1400 audit(2000000036.648:2136): avc: denied { listen } for pid=15039 comm="syz.8.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 227.981362][ T39] audit: type=1400 audit(2000000036.648:2137): avc: denied { accept } for pid=15039 comm="syz.8.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 228.574122][T15072] lo speed is unknown, defaulting to 1000 [ 228.936927][T15108] netlink: 'syz.8.2824': attribute type 1 has an invalid length. [ 228.949581][T15108] bond3: entered promiscuous mode [ 228.951260][T15108] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.975451][T15108] 8021q: adding VLAN 0 to HW filter on device bond4 [ 228.978144][T15108] bond3: (slave bond4): making interface the new active one [ 228.988919][T15108] bond4: entered promiscuous mode [ 228.993947][T15108] bond3: (slave bond4): Enslaving as an active interface with an up link [ 229.042590][T15122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.046304][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.070209][ T39] audit: type=1400 audit(2000000037.677:2138): avc: denied { getopt } for pid=15124 comm="syz.9.2830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 229.079173][T15122] tmpfs: Unknown parameter 'jM皪Q)jlG$' [ 229.113522][T15122] IPVS: Unknown mcast interface: ip6erspan0 [ 229.336532][T15154] ptrace attach of "/syz-executor exec"[15155] was attempted by "/syz-executor exec"[15154] [ 229.381692][T15161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.384293][T15161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.390936][T15140] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 229.393402][T15140] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 229.393783][T15161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.399999][T15140] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 229.411073][T15140] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 229.417086][T15140] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 229.418066][T15163] sit0: entered promiscuous mode [ 229.423315][T15163] netlink: 'syz.8.2840': attribute type 1 has an invalid length. [ 229.423363][T15160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.425537][T15163] __nla_validate_parse: 2 callbacks suppressed [ 229.425565][T15163] netlink: 1 bytes leftover after parsing attributes in process `syz.8.2840'. [ 229.428206][T15140] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 229.428976][T15160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.443661][T15140] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 229.448522][T15140] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 229.451194][T15140] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 229.461190][T15140] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 229.541750][ T39] audit: type=1400 audit(2000000038.117:2139): avc: denied { mount } for pid=15168 comm="syz.8.2843" name="/" dev="rpc_pipefs" ino=60722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 229.543901][T15169] xt_TCPMSS: Only works on TCP SYN packets [ 229.584054][ T39] audit: type=1400 audit(2000000038.154:2140): avc: denied { unmount } for pid=12254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 229.715347][T15183] netlink: 'syz.8.2849': attribute type 9 has an invalid length. [ 229.731661][T15183] netlink: 201384 bytes leftover after parsing attributes in process `syz.8.2849'. [ 229.759766][T15189] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2852'. [ 229.763793][T15189] netlink: 'syz.8.2852': attribute type 1 has an invalid length. [ 229.780319][T15189] team0: No ports can be present during mode change [ 229.801643][T15189] netlink: 860 bytes leftover after parsing attributes in process `syz.8.2852'. [ 229.809590][ T39] audit: type=1804 audit(2000000038.370:2141): pid=15189 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.2852" name="/newroot/218/bus/file0" dev="overlay" ino=1187 res=1 errno=0 [ 229.818361][ T39] audit: type=1800 audit(2000000038.370:2142): pid=15189 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.2852" name="file0" dev="overlay" ino=1187 res=0 errno=0 [ 229.835964][T15191] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 229.841236][T15191] syzkaller0: entered promiscuous mode [ 229.842922][T15191] syzkaller0: entered allmulticast mode [ 230.929397][T15210] net_ratelimit: 2 callbacks suppressed [ 230.929415][T15210] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 230.992407][ T39] audit: type=1400 audit(2000000039.473:2143): avc: denied { read } for pid=15209 comm="syz.9.2861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 231.005339][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 231.005929][ T8147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.009525][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 231.018715][T14981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.022678][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.511356][ T5949] Bluetooth: hci0: command 0x1407 tx timeout [ 231.598438][ T5949] Bluetooth: hci3: command 0x0c1a tx timeout [ 231.598631][ T5943] Bluetooth: hci2: command 0x0c1a tx timeout [ 231.600564][ T5949] Bluetooth: hci1: command 0x0c1a tx timeout [ 232.285475][T15215] tmpfs: Unknown parameter 'm:' [ 232.346626][ T39] audit: type=1400 audit(2000000040.736:2144): avc: denied { create } for pid=15220 comm="syz.8.2866" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 232.347577][T15221] o2cb: This node has not been configured. [ 232.353656][T15221] o2cb: Cluster check failed. Fix errors before retrying. [ 232.353736][T15221] (syz.8.2866,15221,3):user_dlm_register:674 ERROR: status = -22 [ 232.359853][T15221] (syz.8.2866,15221,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 232.478373][T15219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15219 comm=syz.9.2865 [ 232.681553][T15247] fuse: Invalid rootmode [ 232.699506][ T835] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 232.873291][ T835] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 232.876267][ T835] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 232.879149][ T835] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 232.881752][ T835] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.886738][T15233] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 232.891517][ T835] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 233.053924][T15264] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2880'. [ 233.054316][ T2301] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 233.153203][ T835] usb 13-1: USB disconnect, device number 6 [ 233.223382][ T2301] usb 12-1: Using ep0 maxpacket: 16 [ 233.236352][ T2301] usb 12-1: config 255 has an invalid interface number: 8 but max is 2 [ 233.239444][ T2301] usb 12-1: config 255 has an invalid interface number: 215 but max is 2 [ 233.242506][ T2301] usb 12-1: config 255 has an invalid interface number: 170 but max is 2 [ 233.252977][ T2301] usb 12-1: config 255 has an invalid interface number: 4 but max is 2 [ 233.255479][ T2301] usb 12-1: config 255 contains an unexpected descriptor of type 0x1, skipping [ 233.258058][ T2301] usb 12-1: config 255 has an invalid interface number: 6 but max is 2 [ 233.260327][ T2301] usb 12-1: config 255 has an invalid interface number: 53 but max is 2 [ 233.262651][ T2301] usb 12-1: config 255 has 6 interfaces, different from the descriptor's value: 3 [ 233.265188][ T2301] usb 12-1: config 255 has no interface number 0 [ 233.267089][ T2301] usb 12-1: config 255 has no interface number 1 [ 233.268775][ T2301] usb 12-1: config 255 has no interface number 2 [ 233.270449][ T2301] usb 12-1: config 255 has no interface number 3 [ 233.272072][ T2301] usb 12-1: config 255 has no interface number 5 [ 233.277990][ T2301] usb 12-1: config 255 interface 8 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 233.281482][ T2301] usb 12-1: too many endpoints for config 255 interface 215 altsetting 16: 217, using maximum allowed: 30 [ 233.284334][ T2301] usb 12-1: config 255 interface 215 altsetting 16 has a duplicate endpoint with address 0xE, skipping [ 233.287148][ T2301] usb 12-1: config 255 interface 215 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 217 [ 233.290843][ T2301] usb 12-1: too many endpoints for config 255 interface 170 altsetting 250: 253, using maximum allowed: 30 [ 233.293936][ T2301] usb 12-1: config 255 interface 170 altsetting 250 has an endpoint descriptor with address 0x1C, changing to 0xC [ 233.297180][ T2301] usb 12-1: config 255 interface 170 altsetting 250 has a duplicate endpoint with address 0xC, skipping [ 233.300430][ T2301] usb 12-1: config 255 interface 170 altsetting 250 has a duplicate endpoint with address 0xC, skipping [ 233.303561][ T2301] usb 12-1: config 255 interface 170 altsetting 250 has 6 endpoint descriptors, different from the interface descriptor's value: 253 [ 233.307283][ T2301] usb 12-1: config 255 interface 4 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 233.311961][ T2301] usb 12-1: too many endpoints for config 255 interface 6 altsetting 1: 32, using maximum allowed: 30 [ 233.314967][ T2301] usb 12-1: config 255 interface 6 altsetting 1 endpoint 0x5 has invalid maxpacket 1064, setting to 64 [ 233.317985][ T2301] usb 12-1: config 255 interface 6 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 233.321222][ T2301] usb 12-1: config 255 interface 6 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 233.324190][ T2301] usb 12-1: config 255 interface 6 altsetting 1 endpoint 0x9 has invalid maxpacket 8885, setting to 64 [ 233.327184][ T2301] usb 12-1: config 255 interface 6 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 233.330569][ T2301] usb 12-1: config 255 interface 6 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 233.333588][ T2301] usb 12-1: config 255 interface 6 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 233.336558][ T2301] usb 12-1: config 255 interface 6 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 233.339522][ T2301] usb 12-1: config 255 interface 6 altsetting 1 endpoint 0x3 has an invalid bInterval 141, changing to 7 [ 233.343189][ T2301] usb 12-1: config 255 interface 6 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 32 [ 233.346811][ T2301] usb 12-1: config 255 interface 53 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 233.349800][ T2301] usb 12-1: config 255 interface 53 altsetting 8 has an endpoint descriptor with address 0x27, changing to 0x7 [ 233.353174][ T2301] usb 12-1: config 255 interface 53 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 233.356073][ T2301] usb 12-1: config 255 interface 53 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 233.359152][ T2301] usb 12-1: config 255 interface 53 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 233.369843][ T2301] usb 12-1: config 255 interface 53 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 233.373231][ T2301] usb 12-1: config 255 interface 53 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 233.376832][ T2301] usb 12-1: config 255 interface 53 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 233.379745][ T2301] usb 12-1: config 255 interface 53 altsetting 8 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 233.383204][ T2301] usb 12-1: config 255 interface 53 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 233.387452][ T2301] usb 12-1: config 255 interface 53 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 233.391475][ T2301] usb 12-1: config 255 interface 53 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 233.395410][ T2301] usb 12-1: config 255 interface 53 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 233.399212][ T2301] usb 12-1: config 255 interface 53 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 233.402913][ T2301] usb 12-1: config 255 interface 53 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 233.406919][ T2301] usb 12-1: config 255 interface 53 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 233.410814][ T2301] usb 12-1: config 255 interface 53 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 233.414566][ T2301] usb 12-1: config 255 interface 53 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 16 [ 233.418418][ T2301] usb 12-1: config 255 interface 53 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 233.422561][ T2301] usb 12-1: config 255 interface 53 altsetting 8 has an endpoint descriptor with address 0x93, changing to 0x83 [ 233.425751][ T2301] usb 12-1: config 255 interface 53 altsetting 8 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 233.429939][ T2301] usb 12-1: config 255 interface 53 altsetting 8 has 19 endpoint descriptors, different from the interface descriptor's value: 16 [ 233.434629][ T2301] usb 12-1: config 255 interface 8 has no altsetting 0 [ 233.437451][ T2301] usb 12-1: config 255 interface 215 has no altsetting 0 [ 233.439769][ T2301] usb 12-1: config 255 interface 170 has no altsetting 0 [ 233.442238][ T2301] usb 12-1: config 255 interface 4 has no altsetting 0 [ 233.444553][ T2301] usb 12-1: config 255 interface 6 has no altsetting 0 [ 233.447112][ T2301] usb 12-1: config 255 interface 53 has no altsetting 0 [ 233.459490][ T2301] usb 12-1: New USB device found, idVendor=05c6, idProduct=904c, bcdDevice=55.96 [ 233.462596][ T2301] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.464999][ T2301] usb 12-1: Product: 昄䲱騑㞁렼狦㢇넷邮蜯ꮏ䈇ꭸ勺۱鿼㚅ﻃ耆Ľ붇ꘝ︨텞붓ऩ촑ꕧု젔 [ 233.468468][ T2301] usb 12-1: Manufacturer: 銶缗컓ম㢣圶녭涣藵䃪핐䍀悄흔㭹攴옺㯬ꉨ烙氘뷢ﳥ쇜甂훛椂嫈⺵첟㤥ꚿ韺溤텘寺㍗㘠ᡈ᪅冇ⵢ䯗楨ݷ뤆☢猒뒇ダ巉ꇖ瑞頀耰曝忋彑᭫⑿掅ꅁ [ 233.475943][ T2301] usb 12-1: SerialNumber: 떬ⶪꥎꋦ뜲䒒ꪙ谜੠䪴篗⟠滯ⅽ갺痽鸭퐞遏쇜孨咦측扡傕甴母첛É᭸唺쵮䎯袗ᅃ亦앨㋘諻밯똆褨幊咽饔阞⚄줲㶅䵿㿉㨯ᨒ慵煮곳๰㢀꿠韙迤㊭⢚ᾎ뮓㐴瀼唱ࢻ皰貃ﺠ䏉㹷ᡍ铪߆䴆菦㉽⢹鰛쪰꿂肦铇놃嫒兝䜋㞲淢∶勄ᙼ嫒莱놃ᶰൊ쮴웽߃ꐑ [ 233.582138][T15267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15267 comm=syz.8.2881 [ 233.647373][T15283] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 233.650580][T15283] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 233.659702][ T39] audit: type=1400 audit(2000000041.971:2145): avc: denied { read } for pid=15278 comm="syz.8.2885" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 233.668091][ T39] audit: type=1400 audit(2000000041.971:2146): avc: denied { open } for pid=15278 comm="syz.8.2885" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 233.677373][ T39] audit: type=1400 audit(2000000041.980:2147): avc: denied { search } for pid=15278 comm="syz.8.2885" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 233.685061][ T39] audit: type=1400 audit(2000000041.980:2148): avc: denied { getattr } for pid=15278 comm="syz.8.2885" name="saved_tgids" dev="tracefs" ino=1194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 233.728898][ T5949] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 233.734326][ T2301] usb 12-1: USB disconnect, device number 16 [ 233.736871][ T39] audit: type=1326 audit(2000000042.036:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.9.2886" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f118cde9 code=0x7ff00000 [ 233.748563][ T39] audit: type=1326 audit(2000000042.036:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.9.2886" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f118cde9 code=0x7ff00000 [ 233.770545][T15295] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2888'. [ 233.811270][ T5949] Bluetooth: hci2: command 0x0c1a tx timeout [ 233.822068][ T5949] Bluetooth: hci1: command 0x0c1a tx timeout [ 234.011976][T15298] fuse: Invalid rootmode [ 234.242724][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.297549][T15303] kAFS: No cell specified [ 234.520699][T15311] ptrace attach of "/syz-executor exec"[15315] was attempted by "/syz-executor exec"[15311] [ 234.668724][T15314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15314 comm=syz.7.2895 [ 234.740189][T15329] program syz.7.2900 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.762904][T15332] FAULT_INJECTION: forcing a failure. [ 234.762904][T15332] name failslab, interval 1, probability 0, space 0, times 0 [ 234.768752][T15332] CPU: 1 UID: 0 PID: 15332 Comm: syz.0.2901 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 234.768767][T15332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 234.768774][T15332] Call Trace: [ 234.768814][T15332] [ 234.768820][T15332] dump_stack_lvl+0x16c/0x1f0 [ 234.768924][T15332] should_fail_ex+0x50a/0x650 [ 234.768990][T15332] should_failslab+0xc2/0x120 [ 234.769022][T15332] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 234.769034][T15332] ? __alloc_skb+0x2b1/0x380 [ 234.769067][T15332] __alloc_skb+0x2b1/0x380 [ 234.769078][T15332] ? __pfx___alloc_skb+0x10/0x10 [ 234.769091][T15332] ? __alloc_skb+0x1fe/0x380 [ 234.769102][T15332] ? __pfx___alloc_skb+0x10/0x10 [ 234.769113][T15332] ? __pfx_lock_release+0x10/0x10 [ 234.769148][T15332] create_monitor_ctrl_event+0x3b/0x450 [ 234.769184][T15332] mgmt_cmd_complete+0x2db/0x550 [ 234.769199][T15332] get_clock_info+0x2dd/0x5b0 [ 234.769234][T15332] ? __pfx_get_clock_info+0x10/0x10 [ 234.769251][T15332] ? do_raw_read_unlock+0x44/0xe0 [ 234.769261][T15332] ? _raw_read_unlock+0x28/0x50 [ 234.769271][T15332] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 234.769286][T15332] hci_sock_sendmsg+0x1528/0x25e0 [ 234.769303][T15332] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 234.769320][T15332] sock_write_iter+0x4fe/0x5b0 [ 234.769338][T15332] ? __pfx_sock_write_iter+0x10/0x10 [ 234.769358][T15332] ? bpf_lsm_file_permission+0x9/0x10 [ 234.769369][T15332] ? security_file_permission+0x71/0x210 [ 234.769405][T15332] ? rw_verify_area+0xcf/0x680 [ 234.769421][T15332] vfs_write+0x5ae/0x1150 [ 234.769436][T15332] ? __pfx_sock_write_iter+0x10/0x10 [ 234.769454][T15332] ? __pfx_vfs_write+0x10/0x10 [ 234.769470][T15332] ? __fget_files+0x40/0x3a0 [ 234.769486][T15332] ksys_write+0x207/0x250 [ 234.769535][T15332] ? __pfx_ksys_write+0x10/0x10 [ 234.769556][T15332] do_syscall_64+0xcd/0x250 [ 234.769569][T15332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.769585][T15332] RIP: 0033:0x7f446ab8cde9 [ 234.769615][T15332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.769626][T15332] RSP: 002b:00007f446bab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 234.769653][T15332] RAX: ffffffffffffffda RBX: 00007f446ada5fa0 RCX: 00007f446ab8cde9 [ 234.769659][T15332] RDX: 000000000000000d RSI: 0000400000000000 RDI: 0000000000000004 [ 234.769665][T15332] RBP: 00007f446bab7090 R08: 0000000000000000 R09: 0000000000000000 [ 234.769671][T15332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.769677][T15332] R13: 0000000000000000 R14: 00007f446ada5fa0 R15: 00007ffd0b69d858 [ 234.769690][T15332] [ 234.859850][T15335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.867909][T15334] tmpfs: Unknown parameter 'usrquota i9x 񥉽J\ľ\KW&t{8żD' [ 235.004906][T15350] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2909'. [ 235.158367][ T39] kauditd_printk_skb: 14566 callbacks suppressed [ 235.158387][ T39] audit: type=1326 audit(2000000043.365:16717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.9.2886" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f118cde9 code=0x7ff00000 [ 235.170053][ T39] audit: type=1326 audit(2000000043.374:16718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.9.2886" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f118cde9 code=0x7ff00000 [ 235.177116][ T39] audit: type=1326 audit(2000000043.374:16719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.9.2886" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f118cde9 code=0x7ff00000 [ 235.184470][ T39] audit: type=1326 audit(2000000043.374:16720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.9.2886" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f118cde9 code=0x7ff00000 [ 235.191130][ T39] audit: type=1326 audit(2000000043.374:16721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.9.2886" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f118cde9 code=0x7ff00000 [ 235.197709][ T39] audit: type=1326 audit(2000000043.374:16722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.9.2886" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f118cde9 code=0x7ff00000 [ 235.204176][ T39] audit: type=1326 audit(2000000043.374:16723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.9.2886" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f118cde9 code=0x7ff00000 [ 235.210328][ T39] audit: type=1326 audit(2000000043.374:16724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.9.2886" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f118cde9 code=0x7ff00000 [ 235.216653][ T39] audit: type=1326 audit(2000000043.374:16725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.9.2886" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f118cde9 code=0x7ff00000 [ 235.222952][ T39] audit: type=1326 audit(2000000043.374:16726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.9.2886" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f118cde9 code=0x7ff00000 [ 235.347012][T15378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2915'. [ 235.349454][T15378] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2915'. [ 235.657219][T15380] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 235.663182][T15380] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 235.665438][T15380] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 235.676676][T15380] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 235.786062][T15390] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2919'. [ 235.850103][T15394] overlayfs: failed to resolve './file0': -2 [ 236.098155][T15410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2927'. [ 236.135487][T15410] cgroup: Unknown subsys name 'dont_appraise' [ 236.387212][T15418] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2931'. [ 236.474041][T15422] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2933'. [ 236.477775][T15422] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2933'. [ 236.480576][T15423] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2933'. [ 236.484453][ T58] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 236.644372][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 236.648823][ T58] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 236.653410][ T58] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 236.657603][ T58] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 236.661768][ T58] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.666863][ T58] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 236.670688][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.795147][T15426] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 236.797701][T15426] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 236.891519][ T58] usb 5-1: GET_CAPABILITIES returned 0 [ 236.893555][ T58] usbtmc 5-1:16.0: can't read capabilities [ 236.949306][T15428] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 236.955153][ T8153] Bluetooth: hci4: Frame reassembly failed (-84) [ 236.961090][T15428] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2935'. [ 236.965398][ T8153] Bluetooth: hci4: Frame reassembly failed (-84) [ 237.017898][T15428] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.104926][T15428] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.105829][T14981] usb 5-1: USB disconnect, device number 38 [ 237.181189][T15428] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.279062][ T5943] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 237.282386][T15428] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.378651][T15428] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.387270][T15428] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.398176][T15428] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.404207][T15428] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.491247][ T8155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.498117][ T7652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.502011][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.586480][ T834] lo speed is unknown, defaulting to 1000 [ 237.587585][T15459] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 237.649180][T15470] Invalid ELF header type: 3 != 1 [ 237.831670][ T5943] Bluetooth: hci2: command 0x0c1a tx timeout [ 237.832132][ T5945] Bluetooth: hci1: command 0x0c1a tx timeout [ 237.833720][ T5950] Bluetooth: hci3: command 0x0c1a tx timeout [ 237.893785][T15478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.130325][ T5943] Bluetooth: hci2: unexpected event for opcode 0x0803 [ 238.348044][T15462] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 238.350152][T15462] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 238.353752][T15462] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 238.355700][T15462] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 238.439072][T15505] overlayfs: failed to get inode (-116) [ 238.446178][T15505] overlayfs: failed to get inode (-116) [ 239.047879][T15495] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 239.113844][ T5949] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 239.114335][ T5943] Bluetooth: hci4: command 0x1003 tx timeout [ 239.171656][T15549] Illegal XDP return value 4294967274 on prog (id 406) dev N/A, expect packet loss! [ 239.249124][T15552] dccp_close: ABORT with 20 bytes unread [ 239.917342][T15586] sctp: [Deprecated]: syz.7.2999 (pid 15586) Use of int in max_burst socket option deprecated. [ 239.917342][T15586] Use struct sctp_assoc_value instead [ 240.011862][ T7652] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 240.196669][ T7652] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 240.199718][ T7652] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.203711][ T7652] usb 5-1: config 0 descriptor?? [ 240.489274][ T69] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.492430][ T69] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 240.546494][ T2301] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 240.567975][ T5949] Bluetooth: hci3: command 0x0c1a tx timeout [ 240.572314][ T5949] Bluetooth: hci2: command 0x0c1a tx timeout [ 240.596983][ T69] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.600044][ T69] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 240.645373][ T7652] [drm] vendor descriptor length:b9 data:b9 00 00 00 00 00 00 00 00 00 00 [ 240.645983][ T5943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.648162][ T7652] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 240.652390][ T7652] [drm:udl_init] *ERROR* Selecting channel failed [ 240.655053][ T5943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.658154][ T5943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.661346][ T5943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.668754][ T7652] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 3 [ 240.669675][ T5943] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 240.673268][ T7652] [drm] Initialized udl on minor 3 [ 240.674100][ T5943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.681530][ T7652] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 240.710377][ T7652] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 240.715511][ T69] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.719172][ T69] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 240.719424][ T7652] usb 5-1: USB disconnect, device number 39 [ 240.725734][ T71] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 240.731057][ T2301] usb 14-1: Using ep0 maxpacket: 8 [ 240.737895][ T2301] usb 14-1: config 0 has an invalid interface number: 55 but max is 0 [ 240.740370][ T71] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 240.743783][ T2301] usb 14-1: config 0 has no interface number 0 [ 240.745530][ T2301] usb 14-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 240.748625][ T2301] usb 14-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 240.750772][T15602] lo speed is unknown, defaulting to 1000 [ 240.754608][ T2301] usb 14-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 240.757718][ T2301] usb 14-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 240.766576][ T2301] usb 14-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 240.769306][ T2301] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.778446][ T2301] usb 14-1: config 0 descriptor?? [ 240.785432][T15605] __nla_validate_parse: 9 callbacks suppressed [ 240.785480][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3010'. [ 240.786277][ T2301] ldusb 14-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 240.867539][ T69] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.867598][ T69] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 240.915691][T15602] chnl_net:caif_netlink_parms(): no params data found [ 240.978148][T15609] infiniband syz!: set active [ 240.979802][T15609] infiniband syz!: added team_slave_0 [ 241.004630][ T834] usb 14-1: USB disconnect, device number 2 [ 241.021147][ T834] ldusb 14-1:0.55: LD USB Device #0 now disconnected [ 241.027264][T15609] RDS/IB: syz!: added [ 241.029242][T15609] smc: adding ib device syz! with port count 1 [ 241.031190][T15609] smc: ib device syz! port 1 has pnetid [ 241.070904][T15602] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.072927][T15602] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.074915][T15602] bridge_slave_0: entered allmulticast mode [ 241.077073][T15602] bridge_slave_0: entered promiscuous mode [ 241.079779][T15602] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.081910][T15602] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.084074][T15602] bridge_slave_1: entered allmulticast mode [ 241.090172][T15602] bridge_slave_1: entered promiscuous mode [ 241.144922][T15602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.166238][T15602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.198886][ T69] team0: left allmulticast mode [ 241.200739][ T69] team_slave_0: left allmulticast mode [ 241.203568][ T69] team_slave_1: left allmulticast mode [ 241.205279][ T69] bridge0: port 3(team0) entered disabled state [ 241.229618][ T69] bridge_slave_1: left allmulticast mode [ 241.231559][ T69] bridge_slave_1: left promiscuous mode [ 241.233969][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.243433][ T69] bridge_slave_0: left allmulticast mode [ 241.245188][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.498187][ T5971] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 241.668930][ T5971] usb 5-1: Using ep0 maxpacket: 8 [ 241.673179][ T5971] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 241.675881][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.678344][ T5971] usb 5-1: Product: syz [ 241.679684][ T5971] usb 5-1: Manufacturer: syz [ 241.681078][ T5971] usb 5-1: SerialNumber: syz [ 241.696075][ T5971] usb 5-1: config 0 descriptor?? [ 241.699796][ T5971] gspca_main: sq930x-2.14.0 probing 2770:930c [ 241.789500][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.794390][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.800249][ T69] bond0 (unregistering): Released all slaves [ 241.805832][ T69] bond1 (unregistering): Released all slaves [ 241.999568][ T69] bond2 (unregistering): Released all slaves [ 242.188953][ T5971] gspca_sq930x: ucbus_write failed -71 [ 242.229860][ T69] bond3 (unregistering): (slave bond4): Releasing backup interface [ 242.232144][ T69] bond4 (unregistering): left promiscuous mode [ 242.234545][ T69] bond3 (unregistering): Released all slaves [ 242.386740][ T69] bond4 (unregistering): Released all slaves [ 242.413659][T15602] team0: Port device team_slave_0 added [ 242.418088][T15602] team0: Port device team_slave_1 added [ 242.476379][T15602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.479010][T15602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.499344][T15602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.504718][T15602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.506789][T15602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.515437][T15602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.570377][ T69] IPVS: stopping backup sync thread 12970 ... [ 242.627110][T15602] hsr_slave_0: entered promiscuous mode [ 242.630183][T15602] hsr_slave_1: entered promiscuous mode [ 242.633323][T15602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.636287][T15602] Cannot create hsr debugfs directory [ 242.791714][ T5950] Bluetooth: hci3: command 0x0c1a tx timeout [ 242.876992][ T5950] Bluetooth: hci1: command tx timeout [ 242.886197][T15629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3017'. [ 242.897469][ T69] hsr_slave_0: left promiscuous mode [ 242.907359][ T69] hsr_slave_1: left promiscuous mode [ 242.922909][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.925539][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.928229][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.931097][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.976838][ T69] veth1_macvtap: left promiscuous mode [ 242.978705][ T69] veth0_macvtap: left promiscuous mode [ 242.980327][ T69] veth1_vlan: left promiscuous mode [ 242.981872][ T69] veth0_vlan: left promiscuous mode [ 243.197668][ T5971] gspca_sq930x: Unknown sensor [ 243.199233][ T5971] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 243.203128][ T5971] usb 5-1: USB disconnect, device number 40 [ 244.485069][ T69] team_slave_1 (unregistering): left promiscuous mode [ 244.492786][ T69] team0 (unregistering): Port device team_slave_1 removed [ 244.637167][ T69] team_slave_0 (unregistering): left promiscuous mode [ 244.644708][ T69] team0 (unregistering): Port device team_slave_0 removed [ 245.107254][ T5950] Bluetooth: hci1: command tx timeout [ 245.642447][ T39] kauditd_printk_skb: 24349 callbacks suppressed [ 245.642464][ T39] audit: type=1326 audit(2000000053.177:41076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15650 comm="syz.7.3025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253cd8cde9 code=0x7ffc0000 [ 245.656462][ T39] audit: type=1326 audit(2000000053.177:41077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15650 comm="syz.7.3025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253cd8cde9 code=0x7ffc0000 [ 245.663142][ T39] audit: type=1326 audit(2000000053.186:41078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15650 comm="syz.7.3025" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f253cd8cde9 code=0x7ffc0000 [ 245.669684][ T39] audit: type=1326 audit(2000000053.186:41079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15650 comm="syz.7.3025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253cd8cde9 code=0x7ffc0000 [ 245.676019][ T39] audit: type=1326 audit(2000000053.186:41080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15650 comm="syz.7.3025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253cd8cde9 code=0x7ffc0000 [ 245.683121][ T39] audit: type=1326 audit(2000000053.186:41081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15650 comm="syz.7.3025" exe="/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f253cd8cde9 code=0x7ffc0000 [ 245.690843][ T39] audit: type=1326 audit(2000000053.186:41082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15650 comm="syz.7.3025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253cd8cde9 code=0x7ffc0000 [ 245.697203][ T39] audit: type=1326 audit(2000000053.186:41083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15650 comm="syz.7.3025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253cd8cde9 code=0x7ffc0000 [ 245.902847][T14981] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 246.075551][T14981] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.078914][T14981] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 246.081989][T14981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.085915][T14981] usb 5-1: config 0 descriptor?? [ 246.086206][T15602] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 246.088894][T14981] pwc: Askey VC010 type 2 USB webcam detected. [ 246.099558][T15602] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 246.103102][T15602] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 246.110627][T15602] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 246.142423][T15602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.153411][T15602] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.160781][ T8155] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.162929][ T8155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.168911][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.171614][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.269548][T15602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.380430][T15602] veth0_vlan: entered promiscuous mode [ 246.389875][T15602] veth1_vlan: entered promiscuous mode [ 246.402746][T15602] veth0_macvtap: entered promiscuous mode [ 246.407539][T15602] veth1_macvtap: entered promiscuous mode [ 246.415891][T15602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.419021][T15602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.422171][T15602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.428327][T15602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.432254][T15602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.436289][T15602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.441067][T15602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.446720][T15602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.451205][T15602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.455679][T15602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.459072][T15602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.461943][T15602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.464846][T15602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.467790][T15602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.471021][T15602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.474730][T15602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.485457][T15602] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.488041][T15602] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.491787][T15602] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.495138][T15602] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.538556][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.542421][T14981] pwc: recv_control_msg error -32 req 02 val 2b00 [ 246.543453][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.546778][T14981] pwc: recv_control_msg error -32 req 02 val 2700 [ 246.550677][T14981] pwc: recv_control_msg error -32 req 02 val 2c00 [ 246.562337][ T8152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.568944][ T8152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.676663][ T835] hid-generic 0001:0007:0004.0005: item fetching failed at offset 0/3 [ 246.679239][ T835] hid-generic 0001:0007:0004.0005: probe with driver hid-generic failed with error -22 [ 246.739324][T15723] FAULT_INJECTION: forcing a failure. [ 246.739324][T15723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.743129][T15723] CPU: 2 UID: 0 PID: 15723 Comm: syz.9.3036 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 246.743143][T15723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 246.743151][T15723] Call Trace: [ 246.743154][T15723] [ 246.743158][T15723] dump_stack_lvl+0x16c/0x1f0 [ 246.743175][T15723] should_fail_ex+0x50a/0x650 [ 246.743193][T15723] _copy_to_user+0x32/0xd0 [ 246.743247][T15723] simple_read_from_buffer+0xd0/0x160 [ 246.743264][T15723] proc_fail_nth_read+0x198/0x270 [ 246.743279][T15723] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.743303][T15723] ? rw_verify_area+0xcf/0x680 [ 246.743318][T15723] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.743331][T15723] vfs_read+0x1df/0xbf0 [ 246.743347][T15723] ? __fget_files+0x1fc/0x3a0 [ 246.743357][T15723] ? __pfx___mutex_lock+0x10/0x10 [ 246.743369][T15723] ? __pfx_vfs_read+0x10/0x10 [ 246.743387][T15723] ? __fget_files+0x206/0x3a0 [ 246.743401][T15723] ksys_read+0x12b/0x250 [ 246.743415][T15723] ? __pfx_ksys_read+0x10/0x10 [ 246.743433][T15723] do_syscall_64+0xcd/0x250 [ 246.743445][T15723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.743460][T15723] RIP: 0033:0x7fb9f118b7fc [ 246.743468][T15723] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 246.743482][T15723] RSP: 002b:00007fb9f20ae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 246.743492][T15723] RAX: ffffffffffffffda RBX: 00007fb9f13a5fa0 RCX: 00007fb9f118b7fc [ 246.743498][T15723] RDX: 000000000000000f RSI: 00007fb9f20ae0a0 RDI: 0000000000000003 [ 246.743504][T15723] RBP: 00007fb9f20ae090 R08: 0000000000000000 R09: 0000000000000000 [ 246.743509][T15723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.743515][T15723] R13: 0000000000000000 R14: 00007fb9f13a5fa0 R15: 00007ffd15c50088 [ 246.743527][T15723] [ 246.802985][T14981] pwc: recv_control_msg error -71 req 04 val 1300 [ 246.805459][T14981] pwc: recv_control_msg error -71 req 04 val 1400 [ 246.808321][T14981] pwc: recv_control_msg error -71 req 02 val 2000 [ 246.811786][T14981] pwc: recv_control_msg error -71 req 02 val 2100 [ 246.813853][T14981] pwc: recv_control_msg error -71 req 04 val 1500 [ 246.815859][T14981] pwc: recv_control_msg error -71 req 02 val 2500 [ 246.817928][T14981] pwc: recv_control_msg error -71 req 02 val 2400 [ 246.820007][T14981] pwc: recv_control_msg error -71 req 02 val 2600 [ 246.822903][T14981] pwc: recv_control_msg error -71 req 02 val 2900 [ 246.824975][T14981] pwc: recv_control_msg error -71 req 02 val 2800 [ 246.825514][ T5985] IPVS: starting estimator thread 0... [ 246.827022][T14981] pwc: recv_control_msg error -71 req 04 val 1100 [ 246.830872][T14981] pwc: recv_control_msg error -71 req 04 val 1200 [ 246.844388][T14981] pwc: Registered as video103. [ 246.846547][T14981] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb5/5-1/input/input34 [ 246.856732][T14981] usb 5-1: USB disconnect, device number 41 [ 246.891406][T15741] devpts: called with bogus options [ 246.895246][T15741] netlink: 'syz.8.3043': attribute type 6 has an invalid length. [ 246.918048][T15731] IPVS: using max 39 ests per chain, 93600 per kthread [ 247.163872][ T7652] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 247.324313][ T7652] usb 13-1: Using ep0 maxpacket: 8 [ 247.324318][ T5950] Bluetooth: hci1: command tx timeout [ 247.329192][ T7652] usb 13-1: config 0 has an invalid interface number: 31 but max is 0 [ 247.331740][ T7652] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.334441][ T7652] usb 13-1: config 0 has no interface number 0 [ 247.338762][ T7652] usb 13-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 247.341306][ T7652] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.354295][ T7652] usb 13-1: Product: syz [ 247.355497][ T7652] usb 13-1: Manufacturer: syz [ 247.357018][ T7652] usb 13-1: SerialNumber: syz [ 247.359571][ T7652] usb 13-1: config 0 descriptor?? [ 247.487352][T15754] random: crng reseeded on system resumption [ 247.577292][ T7652] usb 13-1: Found UVC 0.04 device syz (046d:08c3) [ 247.579245][ T7652] usb 13-1: No valid video chain found. [ 247.795441][T15741] Cannot find add_set index 0 as target [ 247.797892][ T5971] usb 13-1: USB disconnect, device number 7 [ 247.811423][ T5950] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 248.248179][ T5943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.253963][ T5943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.257642][ T5943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.261880][ T5943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.264304][ T5943] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 248.266944][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.291329][T15790] lo speed is unknown, defaulting to 1000 [ 248.416415][T15797] tipc: Started in network mode [ 248.417979][T15797] tipc: Node identity 0e910b53526, cluster identity 4711 [ 248.420362][T15797] tipc: Enabled bearer , priority 0 [ 248.424038][T15790] chnl_net:caif_netlink_parms(): no params data found [ 248.446245][T15795] tipc: Resetting bearer [ 248.938556][ T2301] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 249.109553][ T2301] usb 13-1: Using ep0 maxpacket: 8 [ 249.112985][ T2301] usb 13-1: config 0 has an invalid interface number: 33 but max is 1 [ 249.115961][ T2301] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.119691][ T2301] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 249.122685][ T2301] usb 13-1: config 0 has no interface number 0 [ 249.124491][ T2301] usb 13-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 249.129149][ T2301] usb 13-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 249.132032][ T2301] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.134344][ T2301] usb 13-1: Product: syz [ 249.135538][ T2301] usb 13-1: Manufacturer: syz [ 249.136846][ T2301] usb 13-1: SerialNumber: syz [ 249.139348][ T2301] usb 13-1: config 0 descriptor?? [ 249.150863][ T2301] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 249.373544][ T2491] pvrusb2: Invalid write control endpoint [ 249.376361][ T2301] usb 13-1: USB disconnect, device number 8 [ 249.411521][ T2491] usb 13-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 249.414766][ T2491] usb 13-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 249.494616][T14981] tipc: Node number set to 1559300947 [ 249.558621][ T5950] Bluetooth: hci1: command tx timeout [ 249.999589][ T5950] Bluetooth: hci3: command 0x0c1a tx timeout [ 250.290491][T15821] kvm: pic: level sensitive irq not supported [ 250.505185][ T5950] Bluetooth: hci0: command tx timeout [ 250.580043][T15832] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3085'. [ 250.600661][T15795] tipc: Disabling bearer [ 250.787083][T15790] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.789245][T15790] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.791360][T15790] bridge_slave_0: entered allmulticast mode [ 250.799250][T15790] bridge_slave_0: entered promiscuous mode [ 250.802138][T15790] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.807826][T15790] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.810158][T15790] bridge_slave_1: entered allmulticast mode [ 250.812458][T15790] bridge_slave_1: entered promiscuous mode [ 250.847215][T15790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.857034][T15790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.891130][ T39] audit: type=1326 audit(2000000058.088:41084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15849 comm="syz.0.3090" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446ab8cde9 code=0x7ffc0000 [ 250.895481][T15850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3090'. [ 250.906151][ T39] audit: type=1326 audit(2000000058.088:41085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15849 comm="syz.0.3090" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446ab8cde9 code=0x7ffc0000 [ 250.958545][T15790] team0: Port device team_slave_0 added [ 250.992584][T15790] team0: Port device team_slave_1 added [ 251.042147][T15790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.045319][T15790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.059991][T15790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.064413][T15790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.066489][T15790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.074003][T15790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.102164][T15790] hsr_slave_0: entered promiscuous mode [ 251.104160][T15790] hsr_slave_1: entered promiscuous mode [ 251.106042][T15790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.108224][T15790] Cannot create hsr debugfs directory [ 251.214426][T15790] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.257417][ T5950] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 251.305814][T15790] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.312874][T15875] pim6reg: entered allmulticast mode [ 251.315140][T15875] pim6reg: left allmulticast mode [ 251.382086][T15790] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.496434][T15790] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.607586][T15790] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 251.612972][T15790] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 251.617900][T15790] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 251.622462][T15790] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 251.632968][T15790] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.635061][T15790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.637095][T15790] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.638943][T15790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.654914][ T5985] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 251.659260][ T5950] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 251.678748][T15790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.690675][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.694655][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.720380][T15790] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.728065][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.731001][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.739085][ T8155] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.741131][ T8155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.765006][T15790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 251.768131][T15790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.816591][ T5985] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 251.819102][ T5985] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 251.821810][ T5985] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 251.824302][ T5985] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 251.827536][ T5985] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 251.831912][ T5985] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 251.834453][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 251.837210][ T5985] usb 5-1: Product: syz [ 251.838439][ T5985] usb 5-1: Manufacturer: syz [ 251.842415][ T5985] cdc_wdm 5-1:1.0: skipping garbage [ 251.843881][ T5985] cdc_wdm 5-1:1.0: skipping garbage [ 251.846410][ T5985] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 251.848130][ T5985] cdc_wdm 5-1:1.0: Unknown control protocol [ 251.853129][T15790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.951987][T15790] veth0_vlan: entered promiscuous mode [ 251.957324][T15790] veth1_vlan: entered promiscuous mode [ 251.969824][T15790] veth0_macvtap: entered promiscuous mode [ 251.972994][T15790] veth1_macvtap: entered promiscuous mode [ 251.979836][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.982833][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.986009][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.989047][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.991740][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.994543][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.997372][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.000284][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.004003][T15790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.008972][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.011991][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.014567][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.017543][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.020206][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.024053][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.027775][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.031581][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.034169][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.037056][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.040704][T15790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.045187][T15790] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.047663][T15790] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.050617][T15790] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.053020][T15790] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.069917][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 252.072462][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 252.075680][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 252.077593][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 252.080531][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 252.082406][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 252.082657][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 252.086001][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 252.089028][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 252.090914][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 252.092845][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 252.094700][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 252.096413][T11576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.096574][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 252.098763][T11576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.100584][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 252.100789][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 252.106244][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 252.109829][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 252.111688][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 252.113612][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 252.115436][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 252.122455][ T8155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.124032][ T58] usb 5-1: USB disconnect, device number 42 [ 252.124789][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 252.125884][ T8155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.205942][T15916] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3114'. [ 252.208435][T15916] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3114'. [ 252.212200][T15916] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3114'. [ 252.246049][T15918] netlink: 'syz.7.3115': attribute type 126 has an invalid length. [ 252.255623][ T39] kauditd_printk_skb: 51 callbacks suppressed [ 252.255634][ T39] audit: type=1400 audit(2000000059.369:41137): avc: denied { recv } for pid=15917 comm="syz.7.3115" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=36636 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 252.265224][ T39] audit: type=1400 audit(2000000059.369:41138): avc: denied { recv } for pid=15917 comm="syz.7.3115" saddr=127.0.0.1 src=36636 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 252.546904][ T39] audit: type=1400 audit(2000000059.641:41139): avc: denied { egress } for pid=71 comm="kworker/3:1" daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 252.553368][ T39] audit: type=1400 audit(2000000059.641:41140): avc: denied { sendto } for pid=71 comm="kworker/3:1" daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 252.723254][ T5950] Bluetooth: hci0: command tx timeout [ 253.421502][T15957] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3132'. [ 253.450466][ T5985] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 253.455932][T15959] lo speed is unknown, defaulting to 1000 [ 253.613470][T15967] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3136'. [ 253.621059][ T5985] usb 5-1: Using ep0 maxpacket: 16 [ 253.624053][ T5985] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.626908][ T5985] usb 5-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 253.630488][ T5985] usb 5-1: config 1 interface 0 has no altsetting 0 [ 253.635491][ T5985] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.638073][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.640278][ T5985] usb 5-1: Product: syz [ 253.641493][ T5985] usb 5-1: Manufacturer: syz [ 253.643181][ T5985] usb 5-1: SerialNumber: syz [ 253.676163][T15972] overlay: filesystem on ./bus not supported [ 253.688521][T15972] overlay: filesystem on ./file0 not supported [ 253.691685][T15972] tmpfs: Unknown parameter 'grpquoTainde_hardli g' [ 253.841277][T15978] bond0: entered promiscuous mode [ 253.842920][T15978] bond_slave_0: entered promiscuous mode [ 253.845259][T15978] bond_slave_1: entered promiscuous mode [ 253.853123][T15978] batadv0: entered promiscuous mode [ 253.856670][T15978] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 253.864587][T15983] sp0: Synchronizing with TNC [ 253.875797][ T5985] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 253.887705][ T5985] usb 5-1: USB disconnect, device number 43 [ 254.005146][T15993] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3142'. [ 254.029783][T15995] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3143'. [ 254.146225][T16008] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3148'. [ 254.165427][T16010] xt_hashlimit: size too large, truncated to 1048576 [ 254.196912][T16012] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 254.472711][T16034] input: syz0 as /devices/virtual/input/input35 [ 254.829771][ T35] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 254.946674][ T5950] Bluetooth: hci0: command tx timeout [ 255.004431][ T35] usb 14-1: config index 0 descriptor too short (expected 23569, got 27) [ 255.004475][ T35] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.005393][ T35] usb 14-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 255.018911][ T35] usb 14-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 255.018927][ T35] usb 14-1: Manufacturer: syz [ 255.023300][ T35] usb 14-1: config 0 descriptor?? [ 255.027133][ T39] audit: type=1400 audit(2000000061.960:41141): avc: denied { write } for pid=16069 comm="syz.0.3171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 255.028097][ T39] audit: type=1400 audit(2000000061.960:41142): avc: denied { setopt } for pid=16069 comm="syz.0.3171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 255.044458][T16070] xt_policy: output policy not valid in PREROUTING and INPUT [ 255.085597][ T35] rc_core: IR keymap rc-hauppauge not found [ 255.085613][ T35] Registered IR keymap rc-empty [ 255.086025][ T35] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/rc/rc0 [ 255.093636][ T35] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/rc/rc0/input36 [ 255.351125][T16095] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 255.355511][T16095] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 255.395647][ T39] audit: type=1400 audit(2000000062.297:41143): avc: denied { write } for pid=16102 comm="syz.7.3182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 255.416863][T16105] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 255.422821][T16105] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 255.427124][T16105] i2c i2c-1: Invalid block write size 135 [ 255.466408][ T39] audit: type=1400 audit(2000000062.372:41144): avc: denied { read } for pid=16108 comm="syz.7.3184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 255.893984][T16134] bridge0: port 3(erspan0) entered blocking state [ 255.896573][T16134] bridge0: port 3(erspan0) entered disabled state [ 255.898764][T16134] erspan0: entered allmulticast mode [ 255.900852][T16134] erspan0: entered promiscuous mode [ 255.902998][T16134] bridge0: port 3(erspan0) entered blocking state [ 255.904795][T16134] bridge0: port 3(erspan0) entered forwarding state [ 255.966043][T16138] __nla_validate_parse: 5 callbacks suppressed [ 255.966058][T16138] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3192'. [ 256.327166][T16140] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3193'. [ 256.396743][T16145] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3195'. [ 257.160035][ T5950] Bluetooth: hci0: command tx timeout [ 257.196708][T16165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3203'. [ 257.203884][T16165] nbd: socks must be embedded in a SOCK_ITEM attr [ 257.358895][T16172] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3206'. [ 257.540675][T16187] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3211'. [ 257.706985][T16198] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3216'. [ 257.760239][T16205] Bluetooth: MGMT ver 1.23 [ 257.978090][ T835] usb 14-1: USB disconnect, device number 3 [ 258.007140][T16242] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3228'. [ 258.098340][ T39] audit: type=1400 audit(2000000064.832:41145): avc: denied { write } for pid=16258 comm="syz.8.3236" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 258.107188][T16257] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3235'. [ 258.148021][T16268] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.150478][T16268] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.152842][T16268] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.155323][T16268] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.161780][T16268] vxlan0: entered promiscuous mode [ 258.163367][T16268] vxlan0: entered allmulticast mode [ 258.167291][T16268] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.169744][T16268] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.172208][T16268] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.174606][T16268] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.195535][T16270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16270 comm=syz.9.3232 [ 258.200601][T16270] netlink: 92 bytes leftover after parsing attributes in process `syz.9.3232'. [ 258.406254][T16293] can0: slcan on ttyS3. [ 258.512536][T16309] wireguard0: entered promiscuous mode [ 258.514174][T16309] wireguard0: entered allmulticast mode [ 258.558184][T16299] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 258.692724][T16322] ax25_connect(): syz.0.3256 uses autobind, please contact jreuter@yaina.de [ 258.697801][ T39] audit: type=1400 audit(2000000065.384:41146): avc: denied { connect } for pid=16321 comm="syz.0.3256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 258.870907][T16293] can0 (unregistered): slcan off ttyS3. [ 258.974655][T16334] bridge_slave_0: default FDB implementation only supports local addresses [ 258.980985][T16334] bridge_slave_0: default FDB implementation only supports local addresses [ 259.019748][ T7652] usb 14-1: new full-speed USB device number 4 using dummy_hcd [ 259.127490][T16344] tmpfs: Bad value for 'mpol' [ 259.158841][ T7652] usb 14-1: device descriptor read/64, error -71 [ 259.245291][ T39] audit: type=1400 audit(2000000065.908:41147): avc: denied { read } for pid=16349 comm="syz.0.3268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 259.251629][ T39] audit: type=1400 audit(2000000065.908:41148): avc: denied { getopt } for pid=16349 comm="syz.0.3268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 259.280540][T16352] tipc: Enabled bearer , priority 10 [ 259.415289][ T7652] usb 14-1: new full-speed USB device number 5 using dummy_hcd [ 259.564970][ T7652] usb 14-1: device descriptor read/64, error -71 [ 259.565063][ T39] audit: type=1400 audit(2000000066.198:41149): avc: denied { name_bind } for pid=16385 comm="syz.7.3283" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 259.682726][ T7652] usb usb14-port1: attempt power cycle [ 260.064245][ T7652] usb 14-1: new full-speed USB device number 6 using dummy_hcd [ 260.091677][ T7652] usb 14-1: device descriptor read/8, error -71 [ 260.237034][ T5943] Bluetooth: hci4: sending frame failed (-49) [ 260.241149][ T5950] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 260.356137][ T7652] usb 14-1: new full-speed USB device number 7 using dummy_hcd [ 260.377881][ T7652] usb 14-1: device descriptor read/8, error -71 [ 260.451047][T16447] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194322 ns). Using initial count to start timer. [ 260.495573][ T7652] usb usb14-port1: unable to enumerate USB device [ 260.647233][T16475] bridge_slave_1: entered promiscuous mode [ 260.751880][T16495] syz_tun: entered promiscuous mode [ 260.754747][T16495] syz_tun: left promiscuous mode [ 260.815134][T16501] batadv0: entered promiscuous mode [ 260.923764][ T5950] Bluetooth: min 158 > max 0 [ 260.926922][ T39] audit: type=1400 audit(2000000067.479:41150): avc: denied { setcheckreqprot } for pid=16512 comm="syz.7.3328" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 260.933595][T16514] SELinux: syz.7.3328 (16514) set checkreqprot to 1. This is no longer supported. [ 260.948669][T16524] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 261.194219][ T835] IPVS: starting estimator thread 0... [ 261.225674][T16563] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 261.227586][T16563] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 261.229861][T16563] vhci_hcd vhci_hcd.0: Device attached [ 261.232134][T16564] vhci_hcd: connection closed [ 261.243358][ T69] vhci_hcd: stop threads [ 261.245812][ T69] vhci_hcd: release socket [ 261.246969][ T69] vhci_hcd: disconnect device [ 261.299940][T16560] IPVS: using max 39 ests per chain, 93600 per kthread [ 261.327326][T16570] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 261.329019][T16570] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 261.340431][T16570] vhci_hcd vhci_hcd.0: Device attached [ 261.433221][T16571] vhci_hcd: cannot find the pending unlink 138 [ 261.435579][T16577] nfs4: Unknown parameter '1stg3' [ 261.449826][T16571] vhci_hcd: connection closed [ 261.449994][ T1147] vhci_hcd: stop threads [ 261.453178][ T1147] vhci_hcd: release socket [ 261.459656][ T1147] vhci_hcd: disconnect device [ 261.522572][ T57] vhci_hcd: vhci_device speed not set [ 261.979839][T16598] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 261.981774][T16598] PKCS7: Only support pkcs7_signedData type [ 261.987961][T16598] openvswitch: netlink: Flow actions attr not present in new flow. [ 262.118642][T16609] overlayfs: failed to resolve './file1': -2 [ 262.181789][ T39] audit: type=1400 audit(2000000068.649:41151): avc: denied { rename } for pid=16597 comm="syz.7.3352" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 262.424385][T16645] __nla_validate_parse: 19 callbacks suppressed [ 262.424397][T16645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3373'. [ 262.439560][T16636] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 262.471921][T16652] xt_hashlimit: size too large, truncated to 1048576 [ 262.478041][T16652] syz.0.3375: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 262.483234][T16652] CPU: 2 UID: 0 PID: 16652 Comm: syz.0.3375 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 262.483254][T16652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 262.483261][T16652] Call Trace: [ 262.483292][T16652] [ 262.483298][T16652] dump_stack_lvl+0x16c/0x1f0 [ 262.483423][T16652] warn_alloc+0x24d/0x3a0 [ 262.483457][T16652] ? __pfx_warn_alloc+0x10/0x10 [ 262.483472][T16652] ? __get_vm_area_node+0x1b0/0x2f0 [ 262.483487][T16652] ? __get_vm_area_node+0x1dc/0x2f0 [ 262.483504][T16652] __vmalloc_node_range_noprof+0x1102/0x1530 [ 262.483519][T16652] ? __pfx___lock_acquire+0x10/0x10 [ 262.483555][T16652] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 262.483591][T16652] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 262.483607][T16652] ? __pfx_lock_release+0x10/0x10 [ 262.483620][T16652] ? trace_lock_acquire+0x14e/0x1f0 [ 262.483634][T16652] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 262.483647][T16652] vmalloc_noprof+0x6b/0x90 [ 262.483662][T16652] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 262.483676][T16652] hashlimit_mt_check_common+0x8b0/0x1450 [ 262.483692][T16652] hashlimit_mt_check+0x71/0x90 [ 262.483704][T16652] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 262.483717][T16652] xt_check_match+0x284/0xa50 [ 262.483730][T16652] ? __schedule+0x3d12/0x5890 [ 262.483748][T16652] ? __pfx_xt_check_match+0x10/0x10 [ 262.483762][T16652] ? xt_find_target+0x1ee/0x290 [ 262.483775][T16652] ? xt_find_match+0x1f2/0x290 [ 262.483789][T16652] find_check_entry.constprop.0+0x34d/0xa20 [ 262.483825][T16652] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 262.483844][T16652] ? kvfree+0x47/0x50 [ 262.483862][T16652] translate_table+0xd06/0x17b0 [ 262.483878][T16652] ? __pfx_translate_table+0x10/0x10 [ 262.483889][T16652] ? __might_fault+0xe3/0x190 [ 262.483904][T16652] do_ip6t_set_ctl+0x926/0xbf0 [ 262.483915][T16652] ? trace_contention_end+0xee/0x140 [ 262.483930][T16652] ? __mutex_lock+0x1cc/0xb10 [ 262.483942][T16652] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 262.483953][T16652] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 262.483966][T16652] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 262.483985][T16652] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 262.484025][T16652] nf_setsockopt+0x8a/0xf0 [ 262.484040][T16652] ipv6_setsockopt+0x135/0x170 [ 262.484058][T16652] rawv6_setsockopt+0xd7/0x680 [ 262.484089][T16652] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 262.484114][T16652] ? selinux_socket_setsockopt+0x6a/0x80 [ 262.484178][T16652] ? sock_common_setsockopt+0x2e/0xf0 [ 262.484215][T16652] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 262.484230][T16652] do_sock_setsockopt+0x222/0x480 [ 262.484245][T16652] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 262.484264][T16652] ? lock_acquire+0x2f/0xb0 [ 262.484296][T16652] __sys_setsockopt+0x1a0/0x230 [ 262.484312][T16652] __x64_sys_setsockopt+0xbd/0x160 [ 262.484323][T16652] ? do_syscall_64+0x91/0x250 [ 262.484335][T16652] ? lockdep_hardirqs_on+0x7c/0x110 [ 262.484345][T16652] do_syscall_64+0xcd/0x250 [ 262.484357][T16652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.484371][T16652] RIP: 0033:0x7f446ab8cde9 [ 262.484400][T16652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.484410][T16652] RSP: 002b:00007f446bab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 262.484438][T16652] RAX: ffffffffffffffda RBX: 00007f446ada5fa0 RCX: 00007f446ab8cde9 [ 262.484444][T16652] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 262.484450][T16652] RBP: 00007f446ac0e2a0 R08: 0000000000000588 R09: 0000000000000000 [ 262.484455][T16652] R10: 00004000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 262.484461][T16652] R13: 0000000000000000 R14: 00007f446ada5fa0 R15: 00007ffd0b69d858 [ 262.484474][T16652] [ 262.504832][T16656] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16656 comm=syz.7.3369 [ 262.505617][ C2] vkms_vblank_simulate: vblank timer overrun [ 262.592720][ C2] vkms_vblank_simulate: vblank timer overrun [ 262.600764][T16652] Mem-Info: [ 262.604177][T16652] active_anon:20160 inactive_anon:0 isolated_anon:0 [ 262.604177][T16652] active_file:7388 inactive_file:13559 isolated_file:0 [ 262.604177][T16652] unevictable:10955 dirty:70 writeback:0 [ 262.604177][T16652] slab_reclaimable:8308 slab_unreclaimable:86212 [ 262.604177][T16652] mapped:24616 shmem:14238 pagetables:1434 [ 262.604177][T16652] sec_pagetables:311 bounce:0 [ 262.604177][T16652] kernel_misc_reclaimable:0 [ 262.604177][T16652] free:456412 free_pcp:7742 free_cma:0 [ 262.617691][T16652] Node 0 active_anon:75804kB inactive_anon:0kB active_file:29552kB inactive_file:54216kB unevictable:40284kB isolated(anon):0kB isolated(file):0kB mapped:98448kB dirty:280kB writeback:0kB shmem:48580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:15024kB pagetables:5736kB sec_pagetables:1244kB all_unreclaimable? yes [ 262.627565][T16658] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=16658 comm=syz.8.3376 [ 262.627866][T16652] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 262.642617][T16652] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 262.651673][T16652] lowmem_reserve[]: 0 1240 0 0 0 [ 262.653058][T16652] Node 0 DMA32 free:230172kB boost:55296kB min:82904kB low:89804kB high:96704kB reserved_highatomic:0KB active_anon:63404kB inactive_anon:0kB active_file:29552kB inactive_file:54216kB unevictable:40284kB writepending:280kB present:2080628kB managed:1270164kB mlocked:0kB bounce:0kB free_pcp:32192kB local_pcp:964kB free_cma:0kB [ 262.663606][T16652] lowmem_reserve[]: 0 0 0 0 0 [ 262.664904][T16652] Node 1 Normal free:1587572kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:9464kB local_pcp:2732kB free_cma:0kB [ 262.678270][T16652] lowmem_reserve[]: 0 0 0 0 0 [ 262.679646][T16652] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (U) 3*4096kB (U) = 15360kB [ 262.683119][T16652] Node 0 DMA32: 369*4kB (ME) 784*8kB (UME) 410*16kB (UME) 219*32kB (UME) 184*64kB (UME) 41*128kB (UME) 26*256kB (UME) 51*512kB (UME) 13*1024kB (UME) 27*2048kB (UME) 24*4096kB (UM) = 238020kB [ 262.688375][T16652] Node 1 Normal: 36*4kB (UM) 19*8kB (UME) 71*16kB (UME) 137*32kB (UME) 65*64kB (UME) 23*128kB (UME) 15*256kB (UME) 12*512kB (UME) 10*1024kB (UME) 7*2048kB (UME) 376*4096kB (UM) = 1587576kB [ 262.693545][T16652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.696156][T16652] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 262.699747][T16652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.702476][T16652] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 262.705137][T16652] 36786 total pagecache pages [ 262.706514][T16652] 0 pages in swap cache [ 262.707748][T16652] Free swap = 124488kB [ 262.708993][T16652] Total swap = 124996kB [ 262.710148][T16652] 1048443 pages RAM [ 262.711480][T16652] 0 pages HighMem/MovableOnly [ 262.712831][T16652] 281581 pages reserved [ 262.713946][T16652] 0 pages cma reserved [ 262.767903][T16593] syz.9.3349 (16593) used greatest stack depth: 20416 bytes left [ 262.851519][T16680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3384'. [ 262.855067][T16680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16680 comm=syz.0.3384 [ 262.917489][T16686] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3387'. [ 263.157718][ T5950] Bluetooth: hci0: command tx timeout [ 263.350763][T16704] fuse: Unknown parameter '' [ 263.386451][T16709] overlayfs: failed to resolve './file1': -2 [ 263.523492][T16724] 9pnet_virtio: no channels available for device /dev/nullb0 [ 263.527955][ T39] audit: type=1326 audit(2000032838.910:41152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.0.3401" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f446ab8cde9 code=0x0 [ 263.605220][ T39] audit: type=1400 audit(2000032838.976:41153): avc: denied { watch_mount } for pid=16733 comm="syz.9.3405" path="/109" dev="tmpfs" ino=576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 263.762443][T16750] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3411'. [ 263.931754][T16761] program syz.9.3416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.990125][T16773] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3420'. [ 264.093978][T16782] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 264.281031][ T39] audit: type=1400 audit(2000032839.621:41154): avc: denied { read write } for pid=16787 comm="syz.8.3424" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 264.293833][ T39] audit: type=1400 audit(2000032839.621:41155): avc: denied { open } for pid=16787 comm="syz.8.3424" path="/76/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 264.344679][ T835] e1000 0000:00:06.0 eth0: Reset adapter [ 264.472310][ T835] e1000 0000:00:06.0 eth0: Reset adapter [ 264.589920][ T835] e1000 0000:00:06.0 eth0: Reset adapter [ 264.592521][T16810] mkiss: ax0: crc mode is auto. [ 264.595668][T16806] can0: slcan on ptm0. [ 264.814454][T16805] can0 (unregistered): slcan off ptm0. [ 266.910412][ T835] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 267.346804][T16844] ================================================================== [ 267.349843][T16844] BUG: KASAN: slab-use-after-free in skb_release_data+0x101/0x730 [ 267.352894][T16844] Read of size 4 at addr ffff888059b65f60 by task syz.0.3446/16844 [ 267.357166][T16844] [ 267.358263][T16844] CPU: 2 UID: 0 PID: 16844 Comm: syz.0.3446 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 267.358276][T16844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 267.358285][T16844] Call Trace: [ 267.358289][T16844] [ 267.358294][T16844] dump_stack_lvl+0x116/0x1f0 [ 267.358312][T16844] print_report+0xc3/0x620 [ 267.358324][T16844] ? __virt_addr_valid+0x5e/0x590 [ 267.358335][T16844] ? __phys_addr+0xc6/0x150 [ 267.358345][T16844] kasan_report+0xd9/0x110 [ 267.358355][T16844] ? skb_release_data+0x101/0x730 [ 267.358370][T16844] ? skb_release_data+0x101/0x730 [ 267.358384][T16844] kasan_check_range+0xef/0x1a0 [ 267.358397][T16844] skb_release_data+0x101/0x730 [ 267.358409][T16844] ? skb_queue_purge_reason+0x2ab/0x410 [ 267.358426][T16844] ? __pfx_sock_rfree+0x10/0x10 [ 267.358441][T16844] sk_skb_reason_drop+0x129/0x1a0 [ 267.358455][T16844] skb_queue_purge_reason+0x2ab/0x410 [ 267.358471][T16844] ? find_held_lock+0x2d/0x110 [ 267.358484][T16844] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 267.358501][T16844] ? mark_held_locks+0x9f/0xe0 [ 267.358515][T16844] packet_release+0x82c/0xd90 [ 267.358557][T16844] ? __pfx_packet_release+0x10/0x10 [ 267.358569][T16844] ? __pfx_down_write+0x10/0x10 [ 267.358583][T16844] __sock_release+0xb0/0x270 [ 267.358598][T16844] ? __pfx_sock_close+0x10/0x10 [ 267.358610][T16844] sock_close+0x1c/0x30 [ 267.358623][T16844] __fput+0x3ff/0xb70 [ 267.358636][T16844] task_work_run+0x14e/0x250 [ 267.358651][T16844] ? __pfx_task_work_run+0x10/0x10 [ 267.358664][T16844] ? __pfx___do_sys_close_range+0x10/0x10 [ 267.358677][T16844] syscall_exit_to_user_mode+0x27b/0x2a0 [ 267.358689][T16844] do_syscall_64+0xda/0x250 [ 267.358701][T16844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.358715][T16844] RIP: 0033:0x7f446ab8cde9 [ 267.358725][T16844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.358736][T16844] RSP: 002b:00007ffd0b69d9b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 267.358746][T16844] RAX: 0000000000000000 RBX: 00007f446ada7ba0 RCX: 00007f446ab8cde9 [ 267.358753][T16844] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 267.358759][T16844] RBP: 00007f446ada7ba0 R08: 0000000000000000 R09: 0000000c0b69dcaf [ 267.358765][T16844] R10: 000000000003fd70 R11: 0000000000000246 R12: 000000000003e2b6 [ 267.358771][T16844] R13: 00007f446ada6160 R14: ffffffffffffffff R15: 00007ffd0b69dad0 [ 267.358781][T16844] [ 267.358784][T16844] [ 267.427992][T16844] Allocated by task 16847: [ 267.429271][T16844] kasan_save_stack+0x33/0x60 [ 267.430601][T16844] kasan_save_track+0x14/0x30 [ 267.431927][T16844] __kasan_slab_alloc+0x89/0x90 [ 267.433328][T16844] kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 267.434912][T16844] kmalloc_reserve+0x18b/0x2c0 [ 267.436264][T16844] __alloc_skb+0x164/0x380 [ 267.437567][T16844] alloc_skb_with_frags+0xe4/0x850 [ 267.439004][T16844] sock_alloc_send_pskb+0x7f1/0x980 [ 267.440459][T16844] packet_sendmsg+0x1fd3/0x56c0 [ 267.441858][T16844] __sys_sendto+0x488/0x4f0 [ 267.443145][T16844] __x64_sys_sendto+0xe0/0x1c0 [ 267.444492][T16844] do_syscall_64+0xcd/0x250 [ 267.445791][T16844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.447467][T16844] [ 267.448147][T16844] Freed by task 16844: [ 267.449312][T16844] kasan_save_stack+0x33/0x60 [ 267.450558][T16844] kasan_save_track+0x14/0x30 [ 267.451703][T16844] kasan_save_free_info+0x3b/0x60 [ 267.452934][T16844] __kasan_slab_free+0x51/0x70 [ 267.454312][T16844] kmem_cache_free+0x2e2/0x4d0 [ 267.455653][T16844] skb_free_head+0x18a/0x1d0 [ 267.456951][T16844] skb_release_data+0x560/0x730 [ 267.458343][T16844] sk_skb_reason_drop+0x129/0x1a0 [ 267.459730][T16844] skb_queue_purge_reason+0x2ab/0x410 [ 267.461227][T16844] packet_release+0x82c/0xd90 [ 267.462507][T16844] __sock_release+0xb0/0x270 [ 267.463787][T16844] sock_close+0x1c/0x30 [ 267.464942][T16844] __fput+0x3ff/0xb70 [ 267.466061][T16844] task_work_run+0x14e/0x250 [ 267.467353][T16844] syscall_exit_to_user_mode+0x27b/0x2a0 [ 267.468877][T16844] do_syscall_64+0xda/0x250 [ 267.470171][T16844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.471754][T16844] [ 267.472424][T16844] The buggy address belongs to the object at ffff888059b65e00 [ 267.472424][T16844] which belongs to the cache skbuff_small_head of size 640 [ 267.476263][T16844] The buggy address is located 352 bytes inside of [ 267.476263][T16844] freed 640-byte region [ffff888059b65e00, ffff888059b66080) [ 267.479964][T16844] [ 267.480663][T16844] The buggy address belongs to the physical page: [ 267.482449][T16844] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59b64 [ 267.484853][T16844] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 267.487198][T16844] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 267.489400][T16844] page_type: f5(slab) [ 267.490522][T16844] raw: 00fff00000000040 ffff8881016a2280 0000000000000000 dead000000000001 [ 267.492863][T16844] raw: 0000000000000000 0000000000150015 00000000f5000000 0000000000000000 [ 267.495251][T16844] head: 00fff00000000040 ffff8881016a2280 0000000000000000 dead000000000001 [ 267.497660][T16844] head: 0000000000000000 0000000000150015 00000000f5000000 0000000000000000 [ 267.500036][T16844] head: 00fff00000000002 ffffea000166d901 ffffffffffffffff 0000000000000000 [ 267.502439][T16844] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 267.504820][T16844] page dumped because: kasan: bad access detected [ 267.506631][T16844] page_owner tracks the page as allocated [ 267.508225][T16844] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 14793, tgid 14793 (syz-executor), ts 218386199167, free_ts 217947570489 [ 267.514086][T16844] post_alloc_hook+0x181/0x1b0 [ 267.515427][T16844] get_page_from_freelist+0xfce/0x2f80 [ 267.516933][T16844] __alloc_frozen_pages_noprof+0x221/0x2470 [ 267.518603][T16844] alloc_pages_mpol+0x1fc/0x540 [ 267.519959][T16844] new_slab+0x23d/0x330 [ 267.521136][T16844] ___slab_alloc+0xc5d/0x1720 [ 267.522475][T16844] __slab_alloc.constprop.0+0x56/0xb0 [ 267.523982][T16844] kmem_cache_alloc_node_noprof+0xfc/0x3c0 [ 267.525619][T16844] kmalloc_reserve+0x18b/0x2c0 [ 267.526968][T16844] __alloc_skb+0x164/0x380 [ 267.528233][T16844] inet_netconf_notify_devconf+0x8b/0x1f0 [ 267.529848][T16844] __devinet_sysctl_register+0x223/0x360 [ 267.531380][T16844] devinet_sysctl_register+0x17b/0x200 [ 267.532893][T16844] inetdev_init+0x2b8/0x5a0 [ 267.534197][T16844] inetdev_event+0xc61/0x18a0 [ 267.535514][T16844] notifier_call_chain+0xb7/0x410 [ 267.536947][T16844] page last free pid 14358 tgid 14358 stack trace: [ 267.538781][T16844] free_frozen_pages+0x6db/0xfb0 [ 267.540161][T16844] vfree+0x174/0x950 [ 267.541322][T16844] kcov_put+0x2a/0x40 [ 267.542459][T16844] kcov_close+0xd/0x20 [ 267.543648][T16844] __fput+0x3ff/0xb70 [ 267.544745][T16844] task_work_run+0x14e/0x250 [ 267.546004][T16844] do_exit+0xad8/0x2d70 [ 267.547155][T16844] do_group_exit+0xd3/0x2a0 [ 267.548407][T16844] __x64_sys_exit_group+0x3e/0x50 [ 267.549769][T16844] x64_sys_call+0x151f/0x1720 [ 267.551083][T16844] do_syscall_64+0xcd/0x250 [ 267.552359][T16844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.554052][T16844] [ 267.554745][T16844] Memory state around the buggy address: [ 267.556307][T16844] ffff888059b65e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.558534][T16844] ffff888059b65e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.560732][T16844] >ffff888059b65f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.562956][T16844] ^ [ 267.564959][T16844] ffff888059b65f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.567229][T16844] ffff888059b66000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.569470][T16844] ================================================================== [ 267.571815][ C2] vkms_vblank_simulate: vblank timer overrun [ 267.575687][T16844] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 267.577781][T16844] CPU: 2 UID: 0 PID: 16844 Comm: syz.0.3446 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 267.580526][T16844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 267.584332][T16844] Call Trace: [ 267.585556][T16844] [ 267.586633][T16844] dump_stack_lvl+0x3d/0x1f0 [ 267.588358][T16844] panic+0x71d/0x800 [ 267.589804][T16844] ? __pfx_panic+0x10/0x10 [ 267.591436][T16844] ? preempt_schedule_thunk+0x1a/0x30 [ 267.593389][T16844] ? preempt_schedule_common+0x44/0xc0 [ 267.595343][T16844] ? check_panic_on_warn+0x1f/0xb0 [ 267.597240][T16844] check_panic_on_warn+0xab/0xb0 [ 267.599045][T16844] end_report+0x117/0x180 [ 267.600613][T16844] kasan_report+0xe9/0x110 [ 267.602237][T16844] ? skb_release_data+0x101/0x730 [ 267.603868][T16844] ? skb_release_data+0x101/0x730 [ 267.605243][T16844] kasan_check_range+0xef/0x1a0 [ 267.606589][T16844] skb_release_data+0x101/0x730 [ 267.607984][T16844] ? skb_queue_purge_reason+0x2ab/0x410 [ 267.609542][T16844] ? __pfx_sock_rfree+0x10/0x10 [ 267.610915][T16844] sk_skb_reason_drop+0x129/0x1a0 [ 267.612329][T16844] skb_queue_purge_reason+0x2ab/0x410 [ 267.613830][T16844] ? find_held_lock+0x2d/0x110 [ 267.615131][T16844] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 267.616766][T16844] ? mark_held_locks+0x9f/0xe0 [ 267.618155][T16844] packet_release+0x82c/0xd90 [ 267.619477][T16844] ? __pfx_packet_release+0x10/0x10 [ 267.620921][T16844] ? __pfx_down_write+0x10/0x10 [ 267.622326][T16844] __sock_release+0xb0/0x270 [ 267.623632][T16844] ? __pfx_sock_close+0x10/0x10 [ 267.624992][T16844] sock_close+0x1c/0x30 [ 267.626176][T16844] __fput+0x3ff/0xb70 [ 267.627340][T16844] task_work_run+0x14e/0x250 [ 267.628625][T16844] ? __pfx_task_work_run+0x10/0x10 [ 267.630069][T16844] ? __pfx___do_sys_close_range+0x10/0x10 [ 267.631651][T16844] syscall_exit_to_user_mode+0x27b/0x2a0 [ 267.633246][T16844] do_syscall_64+0xda/0x250 [ 267.634517][T16844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.636099][T16844] RIP: 0033:0x7f446ab8cde9 [ 267.637398][T16844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.642694][T16844] RSP: 002b:00007ffd0b69d9b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 267.644964][T16844] RAX: 0000000000000000 RBX: 00007f446ada7ba0 RCX: 00007f446ab8cde9 [ 267.647180][T16844] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 267.649335][T16844] RBP: 00007f446ada7ba0 R08: 0000000000000000 R09: 0000000c0b69dcaf [ 267.651428][T16844] R10: 000000000003fd70 R11: 0000000000000246 R12: 000000000003e2b6 [ 267.653580][T16844] R13: 00007f446ada6160 R14: ffffffffffffffff R15: 00007ffd0b69dad0 [ 267.655674][T16844] [ 267.657070][T16844] Kernel Offset: disabled [ 267.658290][T16844] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:56:56 Registers: info registers vcpu 0 CPU#0 RAX=1ffff110081fbe3e RBX=dffffc0000000000 RCX=ffff888040fdf010 RDX=ffff88803582c880 RSI=ffffffff8214214f RDI=0000000000000004 RBP=ffffea0000dba900 RSP=ffffc900041d78d8 R8 =0000000000000004 R9 =00000000000001fd R10=000000000000003c R11=0000000000000001 R12=000000000000003c R13=ffff888040fdf1f0 R14=000000000000001d R15=00000000000001fd RIP=ffffffff82142161 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c255745 CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b6d2e9302cba2be 0bf1c6be4b281619 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 55c2853040ff51f0 78101b62f692601a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c5047368a3c62ea f8f747338a61620f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 57977bc7f5ad0151 7c6037c9ff1b807d ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000007600 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a3201f97a3218921 3800000034000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a3208219a321ec9c 00000704a3224268 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ee1e9a000000 d1000000fc000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6a000000d8000000 a32235cc0c000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1293d7a4ef2ae5 ff164839b19130a9 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b90d76db1ce2cc5c c5b133b369936d70 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a00000000000000 0300000000000000 0000000000000000 0000000000030000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9f1edd100 00007fb9f137c440 00007fb9f1370004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9f137c498 00007fb9f137c490 00007fb9f137c488 00007fb9f137c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000294db9 RBX=0000000000000001 RCX=ffffffff8b570469 RDX=0000000000000000 RSI=ffffffff8b6ced20 RDI=ffffffff8bd353c0 RBP=ffffed1003a50910 RSP=ffffc90000187e08 R8 =0000000000000001 R9 =ffffed100d4e6f85 R10=ffff88806a737c2b R11=0000000000000000 R12=0000000000000001 R13=ffff88801d284880 R14=ffffffff90624310 R15=0000000000000000 RIP=ffffffff8b57184f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b3311fffc CR3=000000002a57e000 CR4=00352ef0 DR0=0000000000000008 DR1=00000000000000ff DR2=fffffffffffffffb DR3=3e00000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe84d00f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe84d00f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe84d00f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe84d00f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe84d00f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe84d00f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe84d17c488 00007fe84d17c480 00007fe84d17c478 00007fe84d17c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe84dcdd100 00007fe84d17c440 00007fe84d170004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe84d17c498 00007fe84d17c490 00007fe84d17c488 00007fe84d17c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854056c5 RDI=ffffffff9ab7d740 RBP=ffffffff9ab7d700 RSP=ffffc9000683f528 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3530383838666666 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9ab7d700 R15=0000000000000000 RIP=ffffffff854056ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555559ac2500 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f446ba75d58 CR3=000000005f1f0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f446ac0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f446ac0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f446ac0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f446ac0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f446ac0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f446ac0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f446ad7c488 00007f446ad7c480 00007f446ad7c478 00007f446ad7c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f446b8dd100 00007f446ad7c440 00007f446ad7c458 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f446ad7c498 00007f446ad7c490 00007f446ad7c488 00007f446ad7c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=fffff940001e0a4e RBX=fffff940001e0a4f RCX=ffffffff820a91d4 RDX=fffff940001e0a4f RSI=0000000000000004 RDI=ffffea0000f05270 RBP=fffff940001e0a4e RSP=ffffc900041c79b0 R8 =0000000000000001 R9 =fffff940001e0a4e R10=ffffea0000f05273 R11=0000000000000005 R12=ffffc900041c7d80 R13=ffffea0000f05240 R14=0000000000000001 R15=ffffea0000f05258 RIP=ffffffff821ce801 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555904de500 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c351dc8 CR3=000000002a57e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe84d00f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe84d00f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe84d00f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe84d00f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe84d00f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe84d00f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe84d17c488 00007fe84d17c480 00007fe84d17c478 00007fe84d17c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe84dcdd100 00007fe84d17c440 00007fe84d170004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe84d17c498 00007fe84d17c490 00007fe84d17c488 00007fe84d17c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000