last executing test programs: 1m2.103803507s ago: executing program 2 (id=331): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x9) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000040)=0x207, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x29, 0x7, 0x1, "4e7e05afd7e153ca94c336c46ff78a95e6320a21084b9e59906cc6e9c761305f", 0x33363248}) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d160b2d, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="3ccc8bc228b437650a3365743f5468e97885a67a792234242dddb7158e3234bb4de9c8bbebcde2f6c5cc60fe3cdc5636a33b2c76ffffefcabd4d4d25a8c1f26b42bede477fcbcea97cf4565d22657b40fc32dd3c6a702039a9765ca2c7ead4e5f1ca7ede", 0x64}, {&(0x7f0000000380)="a31be4e64f6bc442b79a331ef7f26ea27d5144610cb039fb1615749661a3d40a7f0c2bf2c9", 0x25}], 0x2}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000200)=0x12) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f0000000040)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="26ffda220fd6402224c69d82641bae7b9a7894696aa78ffbab144b38914945f236090fb80000000000000065520a59", @ANYRES16=r6, @ANYBLOB="000228bd7000fbdbdf250400000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0xc000) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400ff7f", @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c00"], 0x54}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02001c00004a"}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x40000) sendmsg$alg(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newtfilter={0x210, 0x2c, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {0xa, 0xffe0}, {0xf, 0x5}}, [@f_rsvp={{0x9}, {0x1e0, 0x2, [@TCA_RSVP_ACT={0x1dc, 0x6, [@m_nat={0xcc, 0x4, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x8, 0x3, 0x1, 0x8}, @private=0xa010101, @rand_addr=0x64010100, 0x100000001}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x0, 0x10, 0x8f}, @local, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x3, 0x0, 0xb, 0xa26f526}, @rand_addr=0x64010100, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xffff, 0x1, 0xfffffffc, 0x8}, @multicast1, @multicast1, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x10c, 0xd, 0x0, 0x0, {{0x7}, {0x4}, {0xe1, 0x6, "fd1cf9493df8f9254b21313698598fb581f2fbcbbcc5fdbea5959a175298c1acba8fd61d5452955384783d99ac08fefd92ed3b1a024a9710b13547fc6f0ff35da51d72b5ac8205e562d21e3fb5a744166dfccd0fa99014a5b1a00eea75baadfc251fb856f5c696d016b73fe544aa4d37e44e179d0df414fd537efe31be5a1ec00498b58ced143df9917d46e8d145361f50a04787b9f4df22e8f75d5c2ffd355a5def78b301bb70d0301ae6e0ffc4d0c392928e075831dab8c08323e7830c6db24909f39f17e1fa2733d34368a17ece3b9c05e8f38e1d3127c59ce0b562"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x210}}, 0x0) recvmmsg(r9, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/232, 0xe8}], 0x1}, 0x4}], 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) 1m2.042427866s ago: executing program 2 (id=333): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dvmrp1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000019c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x24}}, 0x80) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020}, 0x2020) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002300)=@getnexthop={0x1c, 0x6a, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r5 = epoll_create1(0x0) epoll_wait(r5, &(0x7f0000000000)=[{}], 0x1, 0x10000200) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0xea5, 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0xa000001d}) r7 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000002340)=0x10, 0x100000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000002380)) 1m1.077519084s ago: executing program 2 (id=339): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=@bloom_filter={0x1e, 0x3, 0xffff, 0x401, 0x81, 0x1, 0x2ce, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0xb}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={0xffffffffffffffff, 0xe0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x83, &(0x7f00000001c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001200), &(0x7f0000001240), 0x8, 0x82, 0x8, 0x8, &(0x7f0000001280)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000001400)=ANY=[@ANYBLOB="010000009e000000000000000000000061117800000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x43, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1m0.933539706s ago: executing program 2 (id=342): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x9e3a, 0x10100, 0x80000, 0x1bd}, &(0x7f0000002000), &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x80) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x8000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x6a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file1', [{0x20, '\x00'}, {0x20, '!'}, {0x20, '\x00'}, {0x20, '&\\#:)(%!'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '\x00'}], 0xa, "fa038536bc8ddefda314684f3ae781f0460523b8f080031cdfe8370c0d37bf9d70ccf4868e2ed693137ec80ed78c4f162cf1084dbc28e9bef7bef109dfe1518b22d06145cdeeaf8711abd390740f1e086a5ee3c67c2be2cf943748638de1453469c87fb6b43d9d3cd0172bef673f238a4326a44a18c6ca1e3be923aa20ab65bd6bd810629b4cc970be65f653a9427b5c93847ad15b65700e329395777d8a5a079b122ea3f7ac7d39e4391132905b615f86ad63a21ea7d8cb3d1f107307be9925144415197db9598236"}, 0xe9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x9e3a, 0x10100, 0x80000, 0x1bd}, &(0x7f0000002000), &(0x7f0000000000)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x80) (async) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x8000, 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') (async) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x6a) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file1', [{0x20, '\x00'}, {0x20, '!'}, {0x20, '\x00'}, {0x20, '&\\#:)(%!'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '\x00'}], 0xa, "fa038536bc8ddefda314684f3ae781f0460523b8f080031cdfe8370c0d37bf9d70ccf4868e2ed693137ec80ed78c4f162cf1084dbc28e9bef7bef109dfe1518b22d06145cdeeaf8711abd390740f1e086a5ee3c67c2be2cf943748638de1453469c87fb6b43d9d3cd0172bef673f238a4326a44a18c6ca1e3be923aa20ab65bd6bd810629b4cc970be65f653a9427b5c93847ad15b65700e329395777d8a5a079b122ea3f7ac7d39e4391132905b615f86ad63a21ea7d8cb3d1f107307be9925144415197db9598236"}, 0xe9) (async) 1m0.733288033s ago: executing program 2 (id=346): syz_emit_ethernet(0x0, 0x0, &(0x7f0000000000)={0x1, 0x2, [0xc7, 0x539, 0xca3, 0x6f]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x8, 0x0, 0x9, 0x0, 0xb, 0x10a7b}, 0x1c) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x2}}], 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000700)={&(0x7f0000000680)=[0x0, 0x0], 0x0, 0x0, 0x2, 0x2}) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)="a39c1fb4d127f197e8e3a41c9fe5567d9137e293a21d262ad6ead1253f31493569f5737c8ed607d03401d5a3edcb68d755d12873885f886046a2e5550caba204798bc956a8e35b04539a88965838ea21a464cd6511361959341849a8618e0beaa03ad408d943e7f9bbbdb28dde9e33", 0x6f}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf25cd2c0e73358f6981d19e1f47a8d118b4e", 0x98}, {&(0x7f0000000600)}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b93159c3e7d2cbf38d5f548bd105beea848805a6a01", 0x57}, {&(0x7f0000000780)}, {&(0x7f0000000880)="bf0171aab45469f23a3e11b9c8fb004572d990a78a7a7b3b7b4a4d2def1e711b6d7fb1742ebbca750dca13be6d89a7c1ba6f2af52f77b7735ad9ec4ccb265d37075afa82a0dbb371487e9124126e5b4e245dee2fafc80ac8609a2acd770acccafd112e302e93afbf01f8bfd4262df4ad9a09f59efecff400e2b06fb698b1641a41e82a2369875f9a2fe3e358420a8b3371f3713c1ae2", 0x96}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258638f66bcf415e967dbba00e0120e19998eb5c5560afb510a8098491725e7c0", 0xc4}], 0x7, &(0x7f0000000d80)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x198, 0x29, 0x36, {0x5e, 0x30, '\x00', [@pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0xffff, 0x966, 0x7, 0xfffffffffffffff7, 0x97c3, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf463cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8fa5b32a0876185144ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @generic={0x1, 0x41, "9a348c3c19e341e07ee4adc61d7ea01e5c10989b56b8a6204ece9d7b40c0a8048b5a67b9d9a0001ae722193bf19685e3237a76548d6a2f0207089d2d9fb4647e81"}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x62}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x3, 0x70, 0x0, [@mcast1]}}}], 0x220}}], 0x1, 0x810) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140300003a00030724bdfe02f8dbdf250d004000"], 0x14}}, 0x4008800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) listen(r2, 0x2000) 1m0.395701975s ago: executing program 2 (id=349): syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ea, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) (async) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ea, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24048090) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES64, @ANYBLOB="00000000000000f81b001a8008000a8008080000003e127a59080002"], 0x44}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES64, @ANYBLOB="00000000000000f81b001a8008000a8008080000003e127a59080002"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1m0.352187005s ago: executing program 32 (id=349): syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ea, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) (async) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ea, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24048090) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES64, @ANYBLOB="00000000000000f81b001a8008000a8008080000003e127a59080002"], 0x44}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES64, @ANYBLOB="00000000000000f81b001a8008000a8008080000003e127a59080002"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 57.143378866s ago: executing program 0 (id=374): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x4, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xae, 0x7fc00100}]}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000980)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x3, r1, 0x5}) sendmsg(r0, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x80, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x80002, 0x2) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000200)={0x3, r4, 'id0\x00'}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r7, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40901}, 0x4003) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) getsockopt$inet6_int(r5, 0x29, 0x18, 0x0, &(0x7f0000000080)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xb2, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000638477fbac141416ac14141604089f034d2f87e5440c05ab845013f2325f1a39014403038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) r11 = socket$nl_rdma(0x10, 0x3, 0x14) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x114, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x8f, 0x7, 0x1, 0x0, "f90b00265d35e0e03ac2bf93a269e339efc52a750a08886354ff28bd22b7ce2adc208b6d5ccfb97da79dfda56ce976ccb10136db07ba8083c79f0d9f40f30fb282267fc3b08fd9ec92a8af8c2127ba4d90b548771f98825b60924ff63ffc0c450423abc6ae4d6377a8916cc9c59644568a97ec9ebbe0c3ca8759e5027a28934fb7c503700d6e53bdcbf7ac"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x50, 0x7, 0x1, 0x0, "b2d87caaa01dd0396981f6683a5a1b2ca27a10c1ee9bfa32ea555068620130ca7037bbc9983ddfe368cebe73f1dd64148fa705f65642e68d055db5834fbdfaf2a256a017a58498ffb2e4fe3c"}]}], {0x14}}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011140100000000000000000007000300010000000800920000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 56.052844703s ago: executing program 0 (id=386): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4048001) 55.943395332s ago: executing program 0 (id=389): mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000240)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000280)={'trans=virtio,', {[{@directio}]}}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r1, 0x0, &(0x7f0000001b40)) read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 55.803108208s ago: executing program 0 (id=392): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r2, 0x7}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @empty, 0x3}, r4}}, 0x30) r5 = syz_open_procfs(r0, &(0x7f0000000040)='net/rfcomm\x00') writev(r5, &(0x7f0000000800)=[{&(0x7f0000000280)='2', 0x1}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r7, 0x4, 0x4, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000800) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) r8 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r8, 0x0, 0x0, 0x40, 0x0, 0x0) 55.743522123s ago: executing program 0 (id=393): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x8, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004c8, 0x8000002, 0x3, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x767], 0xeeef0000}) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYBLOB="0106000000ef577c186b821740f6c59c46c30000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008000600"], 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000280)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90b, 0xff, '\x00', @p_u8=&(0x7f0000000200)=0x3}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7040fbdbdf25080000000c00018008000100d68ff9977bd019a623df24b6b7add86536eed2b30540090e8dd7c73525027aa665b9386457ab76c392878247ee7a5dc889aa9f11c54f7ab4c6d49fa9e82ca6a207098886804d6284af63c699e08a7e4b2428e1f25c787db5085ead8a7bfc0a5602255761e392ebefdb4612108216376c674d68ee5d2fe85a0281f9e7a1877b2cf48af3f1736e4615725277cf0a194b0c52d982c45b8165ace6da52cc45aa04f7d080359b31e5955d9db5ae5300d59d6876d3f876be0dc7b2115af5e1facf34234d1300"/229, @ANYRES32=r5, @ANYBLOB="1800028004000500080002000b00000008000400d8dfd91b"], 0x38}, 0x1, 0x0, 0x0, 0x4807}, 0x8080) r6 = open(&(0x7f0000000300)='.\x00', 0x1500, 0x0) flock(r6, 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r8, 0x40049366, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000800000000000000080000006b119a0000000000950000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400, 0x11) 54.881591232s ago: executing program 0 (id=406): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x28, 0x2}) (async) r1 = socket(0x2, 0x80805, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) r3 = fanotify_init(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x608, 0xffffffff, 0x0, 0x41c, 0x41c, 0xfeffffff, 0xffffffff, 0x540, 0x540, 0x540, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xc8, 0xec, 0x0, {}, [@common=@eui64={{0x24}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x30c, 0x330, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x5}, {0x9b}], 0x1, 0x1}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x400}}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0xc8, 0x124, 0x0, {}, [@common=@eui64={{0x24}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xff000000, 0xff000000, 0xff000000], 0x4e24, 0x4e20, 0x4e24, 0x4e22, 0x9, 0x0, 0x0, 0x12, 0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x664) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0xa, 0x3, 0x10001, 0xf}, 0x10) (async) epoll_create1(0x0) (async) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) (async) writev(r2, &(0x7f00000007c0)=[{&(0x7f00000006c0)="b07e32dde17bfca9ad9f6d52ab72d70b72542e4af2f4d0f9656c659e28e7e342c33a1d37f43cf9976ad8fdd1a52b75a6564045effe21e61d35b705fb73c6078005794c85607fb3770328dd7c78225d084198fbb2dc6ef79dd25b6c84382767213a1f37459134fd794321db01e15bea88572a1f00c65218adac569dbced883fd722e8324f69d22a06dc21b1b836649142a8afef02675ca3e3bbdead681003cafcff063477eb60696ce44cfd66e8c01cc2aab993b3629e8d1bbf15e78667bb6615f906b1efd130b63f3f", 0xc9}], 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0x10}, {0x4, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x509, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {0x0, 0x1}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8982, 0x0) (async) r10 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r10, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) (async) close_range(r3, 0xffffffffffffffff, 0x0) r11 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r12 = dup(r11) ioctl$USBDEVFS_CONTROL(r12, 0xc0185500, &(0x7f0000000000)={0x20, 0x1, 0xfffc, 0x1fff, 0x0, 0x0, 0x0}) 40.283252685s ago: executing program 3 (id=525): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = timerfd_create(0x8, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ppoll(&(0x7f0000000340)=[{r2, 0x2020}, {r3, 0x5c0}], 0x2, 0x0, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3}]}, 0x34}}, 0x4) 40.210575253s ago: executing program 3 (id=527): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000180)={0x2, 0x13, 0x0, 0x7, 0xb, 0x7, &(0x7f00000000c0)="7325769d6375958b4dbc41"}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r5, 0x1, 0x4, 0x4000, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40000}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 39.991823771s ago: executing program 3 (id=531): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) eventfd(0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x1000c080) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550a, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 39.874311898s ago: executing program 33 (id=406): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x28, 0x2}) (async) r1 = socket(0x2, 0x80805, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) r3 = fanotify_init(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x608, 0xffffffff, 0x0, 0x41c, 0x41c, 0xfeffffff, 0xffffffff, 0x540, 0x540, 0x540, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xc8, 0xec, 0x0, {}, [@common=@eui64={{0x24}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x30c, 0x330, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x5}, {0x9b}], 0x1, 0x1}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x400}}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0xc8, 0x124, 0x0, {}, [@common=@eui64={{0x24}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xff000000, 0xff000000, 0xff000000], 0x4e24, 0x4e20, 0x4e24, 0x4e22, 0x9, 0x0, 0x0, 0x12, 0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x664) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0xa, 0x3, 0x10001, 0xf}, 0x10) (async) epoll_create1(0x0) (async) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) (async) writev(r2, &(0x7f00000007c0)=[{&(0x7f00000006c0)="b07e32dde17bfca9ad9f6d52ab72d70b72542e4af2f4d0f9656c659e28e7e342c33a1d37f43cf9976ad8fdd1a52b75a6564045effe21e61d35b705fb73c6078005794c85607fb3770328dd7c78225d084198fbb2dc6ef79dd25b6c84382767213a1f37459134fd794321db01e15bea88572a1f00c65218adac569dbced883fd722e8324f69d22a06dc21b1b836649142a8afef02675ca3e3bbdead681003cafcff063477eb60696ce44cfd66e8c01cc2aab993b3629e8d1bbf15e78667bb6615f906b1efd130b63f3f", 0xc9}], 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0x10}, {0x4, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x509, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {0x0, 0x1}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8982, 0x0) (async) r10 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r10, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) (async) close_range(r3, 0xffffffffffffffff, 0x0) r11 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r12 = dup(r11) ioctl$USBDEVFS_CONTROL(r12, 0xc0185500, &(0x7f0000000000)={0x20, 0x1, 0xfffc, 0x1fff, 0x0, 0x0, 0x0}) 39.150650391s ago: executing program 3 (id=541): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r1, 0x0, 0x4, &(0x7f0000000040)="940910bc996c301c8107070400", 0x28) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f0000000000)) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') (async) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) eventfd(0x0) (async) r3 = eventfd(0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x100, r3, &(0x7f0000000100)="0000fd6000000000", 0x8, 0x3}]) io_destroy(r2) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 39.012855101s ago: executing program 3 (id=543): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0xa0000, 0x48) ppoll(&(0x7f00000004c0)=[{r2, 0x6049}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, 0x0, 0x0) write$tun(r3, &(0x7f0000000400)=ANY=[], 0xa2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000480)) keyctl$revoke(0x3, r0) 38.662939763s ago: executing program 3 (id=545): shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000880), 0x280, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000ec0)={0xffffffffffffffff, 0x2, {0x0, 0x0, 0x0, 0x6540000000, 0xfffffffffffffff5, 0x0, 0x2, 0x11, 0xc, "41d0bc8a658635a8284faa9680ffd8ae1019e683c9ce1688599c2ff36e163e643155b04f99c6db5bd97b4f1bea35f631cef2ac8b956accb93fee1f23d23b9b13", "a5a73aead9c30def9d7a4f89f914b4db341dcea6d8b4891ff5d146d20c0c01e52888e45349ab782e88e7058a9b58c0dfc9a9a292430cbafef2b4fb3b37edcbb7", "cfa2d9dcf3ad287122b02c9325d08d6d0064568342802135bf2c187fa989e6d9", [0xe44, 0x3d2b]}}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@ipv4_delrule={0x28, 0x21, 0xb12becd5a2b54ddf, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x5}]}, 0x28}}, 0x0) (async, rerun: 64) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r5, 0x701, 0x0, 0x0, {0x45}}, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x200, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x6}}]}, 0x40}}, 0x0) 38.583866929s ago: executing program 34 (id=545): shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000880), 0x280, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000ec0)={0xffffffffffffffff, 0x2, {0x0, 0x0, 0x0, 0x6540000000, 0xfffffffffffffff5, 0x0, 0x2, 0x11, 0xc, "41d0bc8a658635a8284faa9680ffd8ae1019e683c9ce1688599c2ff36e163e643155b04f99c6db5bd97b4f1bea35f631cef2ac8b956accb93fee1f23d23b9b13", "a5a73aead9c30def9d7a4f89f914b4db341dcea6d8b4891ff5d146d20c0c01e52888e45349ab782e88e7058a9b58c0dfc9a9a292430cbafef2b4fb3b37edcbb7", "cfa2d9dcf3ad287122b02c9325d08d6d0064568342802135bf2c187fa989e6d9", [0xe44, 0x3d2b]}}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@ipv4_delrule={0x28, 0x21, 0xb12becd5a2b54ddf, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x5}]}, 0x28}}, 0x0) (async, rerun: 64) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r5, 0x701, 0x0, 0x0, {0x45}}, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x200, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x6}}]}, 0x40}}, 0x0) 2.494509238s ago: executing program 4 (id=929): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000240)={0xa, 0xfffe, 0x400, @loopback, 0xff}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000200)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000740)=ANY=[], 0x18}}], 0x1, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf113d00000008000300", @ANYRES32=r5, @ANYBLOB="08005d0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r6 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1}, {0x4, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x4}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$FUSE_DIRENTPLUS(r9, &(0x7f00000014c0)=ANY=[@ANYBLOB="5001000000000000", @ANYRES64=0x0, @ANYBLOB="0600000000000000030000000000000000000000000000000000000001000000070000001b02000006000000000000008f00000000000000090000000000000007000000000000005d0a0000000000000000010000000000090000007f00000003000000001000000a000000", @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="c425ffff050000000000000003000000000000000d0000000000000001000000b00000000000000000000000060000000000000001000000000000000e0000000000000004000000000000000000000004000000050000000000000085000000000000000aff4624000000000600000000000000010000000000000006000000000000000100000002000000070000000060000000040000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01000000000000000002000002000000000000000000000057ef00000080040000005c08000047504c0000000000"], 0x150) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x43, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) write$P9_RMKDIR(r9, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x40, 0x3, 0x1}}, 0x14) write$char_usb(r9, &(0x7f0000000600)="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", 0xe9d) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) r12 = socket(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f00000000c0), 0x4) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) 2.23290094s ago: executing program 4 (id=933): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_INPUT(r0, &(0x7f00000005c0)={0xb, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x4, 0x200) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000280)={0xb93, 0x3, 0x0, 'queue1\x00', 0x9}) r3 = fcntl$dupfd(r1, 0x0, r1) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{}, {@dyn}]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x108000) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5}, 0x50) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$SNDCTL_SEQ_SYNC(r6, 0x5101) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.031303417s ago: executing program 4 (id=938): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="250a0000140000200061116000000000001800000000000000000000000000000095000000000000a877428fcb86568d28c4a19a9ae0614e65286bbd22afa450b88fa9eee0f9a9541d4c5ffe87ca3f6448ad425e5fbc2bde505084bbeb6cc48d14ea9887f98cc3ffc53f6c60e6d8e3000423a72a26f132bd502952cff649178d6caec18a"], &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r1, 0xc0085508, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x200, 0x6, 0x2, 0x7461, 0xd0, 0x3, 0xc4}, &(0x7f0000000140)=0x9c) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r2, 0x5}, 0x8) 1.442644302s ago: executing program 1 (id=944): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000080)={r1, r1, 0x0, 0x6, 0x3}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0xd, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x50881}, 0x24008040) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)) close_range(r3, 0xffffffffffffffff, 0x0) 1.372379334s ago: executing program 1 (id=945): r0 = fsopen(&(0x7f0000000000)='omfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x30, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x359bc814, 0x0, 0x0, 0x0, 0xffffffff}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xa}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @map_fd={0x18, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x5b, &(0x7f0000000080)=""/91, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x8, 0x4, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000440)=[{0x4, 0x5, 0x6}, {0x1, 0x5, 0x4, 0x5}], 0x10, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x24, &(0x7f0000000900)=ANY=[@ANYRESOCT=r0], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r1, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc2, &(0x7f0000000e00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) connect$pppl2tp(r4, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x2, {0xa, 0x4e23, 0x7fffffff, @loopback, 0x10}}}, 0x3a) (async) getpeername(r4, 0x0, &(0x7f0000000540)) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r9 = socket$unix(0x1, 0x5, 0x0) (rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000040)=[{0x35}, {0x6}]}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (rerun: 64) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="03000000040000002d75be080a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000400"/28], 0x50) (async, rerun: 64) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001100)=@o_path={&(0x7f00000010c0)='./file0\x00', 0x0, 0x8, r1}, 0x18) (rerun: 64) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001180)=@o_path={&(0x7f0000001140)='./file0\x00', 0x0, 0x8000, r1}, 0x18) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x4) r11 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r11, 0x2284, &(0x7f0000000080)) 1.153191864s ago: executing program 1 (id=946): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) connect(r0, &(0x7f0000000040)=@sco, 0x80) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) preadv(r1, &(0x7f0000000100), 0x0, 0x1ff, 0x9) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newaddrlabel={0x34, 0x48, 0x300, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x3f, 0x0, 0x0, 0x1b2}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048051}, 0x40000c0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x67}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000010) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000340)={'bridge0\x00'}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000b, 0x100010, r0, 0xfd772000) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = signalfd4(r2, &(0x7f0000000380)={[0x8]}, 0x8, 0x80000) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f00000003c0)={0x42, 0x97, "37751a2b5b02f4bba1f5a8dba49d431d344ebaa8a3efbaa390f4b141d2e9efc7550a61463e6f77fa8764463bafd2947453cc51720f3757899772b560b6815aaec73622fc6f372fae1f4e94daafaea3ed06a02ad881df69c6d482c998809a8119e3b84c223a1598f10e9e76bf3708db40c4d79a07333a0bf59b820cebbb4a2eaeee46260856bf171629b61419d2656d9e1fee166963be58"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/pm_wakeup_irq', 0x101cc0, 0x3f) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000004c0)=@req3={0x2, 0x3, 0x5852, 0x2e, 0x10000000, 0x1, 0x10}, 0x1c) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000500)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000005c0)={0x0, 0x0, {}, {0xee00}, 0xa8e, 0x1}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r8 = getegid() lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='system.posix_acl_default\x00', &(0x7f0000000880)={{}, {0x1, 0x1}, [{0x2, 0x1, r5}], {0x4, 0x1}, [{0x8, 0x2, r6}, {0x8, 0x1, r7}, {0x8, 0x3, r8}, {0x8, 0x7, 0xffffffffffffffff}, {0x8, 0x7, r9}, {0x8, 0x2, r10}]}, 0x5c, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000900)=0x0) connect$nfc_llcp(r3, &(0x7f0000000940)={0x27, r11, 0x1, 0x7, 0x1e, 0x7, "af0f679a99f50c47b838439bc220494b594802bc3c97b9e8540a8b9e2956f955eea0b21f4c076d3da47988fca011f5d571b8d6e2f8427b3af6a1fc2662c218", 0x3a}, 0x60) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000009c0)={'pim6reg0\x00', {0x2, 0x4e22, @multicast2}}) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a80)={0x1f0, r12, 0x100, 0x70bd25, 0xffff, {}, [@TIPC_NLA_NODE={0x164, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "58c85795d4938548b19838e830b4f286be2d129454c3c437"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "b7e11d4dbff953d5bc10e5680100d84692b2d58cc1a9d5"}}, @TIPC_NLA_NODE_ID={0xde, 0x3, "d9e7987a289f25f7127966fa11daf0c59cd9f49d573b482d1826a607fae2ae1a770e6d0a192c6d0650b6903cd0a5a16699615d78af3b1b1b206d3e9905f41d4bf1e5ff80a87c9d60fa9a127a5ff775abe1c8e2c16219d940bd8f8ef7b35562db727ed3e3bc05cd6b292ccfdf8b3e650a2a86a6a4fe42e54a8f3231e7647f719ad9b80f1eeffc0219969e798074eedc036251dda5020a58dd5e0e320874b033ffbf7648c1f2a25de9fe3c28b40f1bf567da928e19762d6067ffcc52b14bf314ef36b07f2343258fcbb42502f4189080975bfda1d98dc609c73759"}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x826c}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x2000c855}, 0x24040044) accept(r0, &(0x7f0000000d00)=@isdn, &(0x7f0000000d80)=0x80) ioctl$TIOCCBRK(r4, 0x5428) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000dc0)) 1.051702894s ago: executing program 1 (id=947): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {0xc}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x2f, 0x4, 0x4, 0x8, 0xd20b, 0xffffffff, 0xe48c, 0xe16, 0xb, 0x102, 0x5, 0x7ad5785a, 0x0, 0x7, 0x4, 0x2, 0x7, 0x7f, 0x7, 0x3, 0x7, 0x9, 0x8, 0x9a6, 0x3518, 0x8, 0x0, 0x6, 0x0, 0x7, 0xfffffffd, 0x7, 0x1, 0xc, 0x200019, 0x6, 0x3, 0x4, 0x6, 0x3, 0x8, 0xb, 0xd5aa, 0xfff, 0x8, 0x3, 0x1, 0xfff, 0xffff, 0x3, 0x2, 0x1, 0x7, 0x7, 0x6, 0x75a, 0x0, 0x5, 0x3, 0x400, 0xfffffff7, 0x6, 0xfffffffd, 0xfffffe00, 0x6, 0x7fffffff, 0xd, 0x4, 0x1, 0x4a, 0x3, 0x5, 0x5, 0x2, 0x0, 0x4, 0x3, 0x8, 0x4, 0x2, 0x10, 0x2, 0x4, 0x10010000, 0x6, 0x80000001, 0x4003b, 0x80000000, 0x2, 0x9, 0x800, 0x1, 0x8001, 0xa, 0x2a, 0xffffffff, 0x0, 0x401, 0x8, 0xffffffff, 0x1, 0xa47d, 0x7, 0x2, 0x6, 0x8a8, 0x7, 0x2, 0x8, 0x8, 0x4, 0x4000002, 0x40, 0xba5, 0x7, 0x1, 0x9, 0x200, 0x7fec, 0x5, 0xffffffff, 0x478, 0x8001, 0x8000001, 0x2, 0x9, 0x8f69, 0xe, 0x4b4, 0x2, 0x2, 0x4, 0x8000, 0x5, 0x6, 0xe26, 0xffffffff, 0x4, 0x8, 0xea98f1e, 0x900000, 0x5, 0xd, 0x8, 0xdc3d, 0x8, 0x40, 0x5, 0x81, 0x9, 0x6, 0xfff, 0x400, 0x1, 0xfffffffd, 0x13bd0de8, 0xae2, 0xb0e, 0x4, 0x5, 0x40, 0x5, 0x8, 0x8, 0x3, 0x9e1b, 0x7f, 0xe40e, 0xc4, 0xa, 0x152, 0x9d, 0x7ff, 0x0, 0x8, 0x8, 0xc0, 0x0, 0x52e9, 0x1ff, 0x83c, 0x9, 0x2, 0x6, 0x5, 0x8, 0xd8a, 0xc11, 0x6, 0xe247, 0x3, 0x801fe, 0x8, 0xe, 0x7, 0x5, 0x7, 0x7, 0x0, 0x9, 0x44, 0x7, 0x3, 0x54d, 0x6fd2, 0x6, 0x3, 0x7, 0x9, 0x1, 0xffffffff, 0x5, 0xfff, 0xd7, 0xb90, 0x6, 0xaec, 0x9, 0xfffffffb, 0xe, 0x407, 0xffff, 0x1, 0x1, 0x6, 0x2b3, 0xffffffff, 0x2, 0x8, 0x6, 0x1, 0x49f, 0x6, 0x0, 0x1000, 0x20008000, 0x4, 0x4, 0xfffffff8, 0x9, 0x3, 0x7, 0xffffffff, 0x6, 0xdee, 0x3, 0x9, 0x6, 0xfffffffa, 0x8, 0x8, 0x3, 0x9, 0x5, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dffbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r3, 0x400455c8, 0x4) (async) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {0xc}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x2f, 0x4, 0x4, 0x8, 0xd20b, 0xffffffff, 0xe48c, 0xe16, 0xb, 0x102, 0x5, 0x7ad5785a, 0x0, 0x7, 0x4, 0x2, 0x7, 0x7f, 0x7, 0x3, 0x7, 0x9, 0x8, 0x9a6, 0x3518, 0x8, 0x0, 0x6, 0x0, 0x7, 0xfffffffd, 0x7, 0x1, 0xc, 0x200019, 0x6, 0x3, 0x4, 0x6, 0x3, 0x8, 0xb, 0xd5aa, 0xfff, 0x8, 0x3, 0x1, 0xfff, 0xffff, 0x3, 0x2, 0x1, 0x7, 0x7, 0x6, 0x75a, 0x0, 0x5, 0x3, 0x400, 0xfffffff7, 0x6, 0xfffffffd, 0xfffffe00, 0x6, 0x7fffffff, 0xd, 0x4, 0x1, 0x4a, 0x3, 0x5, 0x5, 0x2, 0x0, 0x4, 0x3, 0x8, 0x4, 0x2, 0x10, 0x2, 0x4, 0x10010000, 0x6, 0x80000001, 0x4003b, 0x80000000, 0x2, 0x9, 0x800, 0x1, 0x8001, 0xa, 0x2a, 0xffffffff, 0x0, 0x401, 0x8, 0xffffffff, 0x1, 0xa47d, 0x7, 0x2, 0x6, 0x8a8, 0x7, 0x2, 0x8, 0x8, 0x4, 0x4000002, 0x40, 0xba5, 0x7, 0x1, 0x9, 0x200, 0x7fec, 0x5, 0xffffffff, 0x478, 0x8001, 0x8000001, 0x2, 0x9, 0x8f69, 0xe, 0x4b4, 0x2, 0x2, 0x4, 0x8000, 0x5, 0x6, 0xe26, 0xffffffff, 0x4, 0x8, 0xea98f1e, 0x900000, 0x5, 0xd, 0x8, 0xdc3d, 0x8, 0x40, 0x5, 0x81, 0x9, 0x6, 0xfff, 0x400, 0x1, 0xfffffffd, 0x13bd0de8, 0xae2, 0xb0e, 0x4, 0x5, 0x40, 0x5, 0x8, 0x8, 0x3, 0x9e1b, 0x7f, 0xe40e, 0xc4, 0xa, 0x152, 0x9d, 0x7ff, 0x0, 0x8, 0x8, 0xc0, 0x0, 0x52e9, 0x1ff, 0x83c, 0x9, 0x2, 0x6, 0x5, 0x8, 0xd8a, 0xc11, 0x6, 0xe247, 0x3, 0x801fe, 0x8, 0xe, 0x7, 0x5, 0x7, 0x7, 0x0, 0x9, 0x44, 0x7, 0x3, 0x54d, 0x6fd2, 0x6, 0x3, 0x7, 0x9, 0x1, 0xffffffff, 0x5, 0xfff, 0xd7, 0xb90, 0x6, 0xaec, 0x9, 0xfffffffb, 0xe, 0x407, 0xffff, 0x1, 0x1, 0x6, 0x2b3, 0xffffffff, 0x2, 0x8, 0x6, 0x1, 0x49f, 0x6, 0x0, 0x1000, 0x20008000, 0x4, 0x4, 0xfffffff8, 0x9, 0x3, 0x7, 0xffffffff, 0x6, 0xdee, 0x3, 0x9, 0x6, 0xfffffffa, 0x8, 0x8, 0x3, 0x9, 0x5, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dffbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) (async) 982.181789ms ago: executing program 6 (id=948): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01082bbd7000fedb9f250c0000001800058008000100"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x82e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbe}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) keyctl$restrict_keyring(0x10, 0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x40, 0xa6}, [@NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000000c0)={0x1c, r5, 0x62c21a4ade68aba1, 0x70bd28, 0x0, {{0x32}, {@void, @val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newqdisc={0x300, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa}, {0xffff, 0x5}, {0x3}}, [@TCA_STAB={0x68, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x2, 0x0, 0x40, 0x2, 0x7, 0x8000, 0x8}}, {0x14, 0x2, [0x5, 0xff85, 0x6, 0x3, 0x9a, 0x2, 0x2, 0xe]}}, {{0x1c, 0x1, {0x0, 0x1, 0xd330, 0x4, 0x0, 0x1, 0x6, 0x9}}, {0x16, 0x2, [0xf546, 0x8, 0x8, 0xffff, 0x7ff, 0x1, 0x8000, 0x9, 0x3]}}]}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "088bac00005d109095fb30fd456bfea5"}}}, @TCA_STAB={0xf0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6c, 0x8, 0x7, 0x0, 0x8f, 0x9, 0x2}}, {0x8, 0x2, [0x1, 0x8]}}, {{0x1c, 0x1, {0x8, 0x0, 0xd, 0xe45, 0x1, 0xecf0, 0x8, 0x9}}, {0x16, 0x2, [0x0, 0x1, 0x1, 0x1, 0x4, 0x3, 0x0, 0x4, 0xb]}}, {{0x1c, 0x1, {0x6, 0x9, 0x646, 0x6, 0x5, 0x6, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x6, 0x1, 0x8a8c, 0x2, 0x7, 0x4, 0x1}}, {0x6, 0x2, [0x7d]}}, {{0x1c, 0x1, {0x6, 0x4, 0xf, 0x7c, 0x1, 0x0, 0xfffff657, 0x4}}, {0xc, 0x2, [0x7, 0xfffb, 0xa57, 0x3210]}}, {{0x1c, 0x1, {0x5, 0x1, 0x200, 0x5, 0x2, 0x6, 0x5, 0x4}}, {0xc, 0x2, [0xfff9, 0x8001, 0x1, 0x1]}}]}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5f, 0x7, 0x3, 0x3, 0x1, 0xd0, 0x6, 0x5}}, {0xe, 0x2, [0x6, 0x5, 0x0, 0x2, 0xfffa]}}]}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7f, 0x4, 0x0, 0x6, 0x2, 0xffff8f0e, 0x5, 0x9}}, {0x16, 0x2, [0x2, 0x7f4b, 0x3, 0x5, 0x58cd, 0x6, 0x4, 0x3, 0x3]}}, {{0x1c, 0x1, {0x4, 0xff, 0xf078, 0x4, 0x2, 0x5, 0x1, 0x2}}, {0x8, 0x2, [0x81, 0x51]}}, {{0x1c, 0x1, {0x7, 0x1, 0xd, 0x7f, 0x1, 0x1, 0x0, 0x2}}, {0x8, 0x2, [0x9, 0x8]}}]}, @TCA_STAB={0x6c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xd, 0xc508, 0x5, 0x0, 0x4, 0x6}}, {0x4}}, {{0x1c, 0x1, {0x2, 0x2, 0xffff, 0xffff, 0x0, 0x80000000, 0x5, 0x2}}, {0x8, 0x2, [0x3, 0x4]}}, {{0x1c, 0x1, {0x4, 0x5, 0x5, 0x0, 0x0, 0xfffffbfc, 0x1000, 0x1}}, {0x6, 0x2, [0x7]}}]}, @TCA_RATE={0x6, 0x5, {0xa8, 0x9}}, @TCA_EGRESS_BLOCK={0x8}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x9, 0x101, 0x3f6, 0x0, 0x1d, 0x2, 0x8}}, {0x14, 0x2, [0x800, 0xffff, 0x32, 0x2, 0x800, 0x800, 0xc, 0xffd3]}}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0xe0) 883.371265ms ago: executing program 6 (id=949): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x28, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x13, 0x0, 0x0, 0x0, @binary="56ccabd869c2033840919fdc5a8d25"}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, r3, 0x405, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44090}, 0x20004080) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x10220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xff81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 713.35277ms ago: executing program 5 (id=951): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x2, 0x40}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000440)=[r2], 0x0, 0x1}) clock_nanosleep(0x1, 0x1, &(0x7f0000000280), 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f0000000800)={&(0x7f0000000080)=[r2, r2, r2], 0x800000000002, 0x3, 0x6}) 712.983424ms ago: executing program 6 (id=952): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000040)={@any, 0x8}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = accept4$inet(r2, &(0x7f0000000100)={0x2, 0x0, @empty}, &(0x7f0000000140)=0x10, 0x80000) sendto$inet(r3, &(0x7f0000000100), 0xffffffffffffff94, 0xb, 0x0, 0xfffffe1a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) connect$rose(r0, &(0x7f0000002a00)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) 612.989044ms ago: executing program 5 (id=953): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x4400, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x8000, 0x20, 0x800, 0x9, {{0x10, 0x4, 0x1, 0x37, 0x40, 0x68, 0x0, 0x3, 0x4, 0x0, @private=0xa010102, @broadcast, {[@rr={0x7, 0x27, 0xef, [@multicast1, @multicast1, @remote, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote, @multicast1, @loopback]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip_vti0\x00', r2, 0x7, 0x8000, 0x0, 0x0, {{0xf, 0x4, 0x1, 0x3, 0x3c, 0x64, 0x0, 0x6, 0x4, 0x0, @loopback, @rand_addr=0x64010100, {[@lsrr={0x83, 0x27, 0xb6, [@local, @empty, @multicast1, @local, @multicast2, @private=0xa010101, @broadcast, @private=0xa010102, @multicast2]}]}}}}}) 512.32756ms ago: executing program 4 (id=954): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x82) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/dev\x00') preadv(r1, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x29d3, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) accept$nfc_llcp(r1, 0x0, &(0x7f0000000000)) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000180)=""/142, 0x1204000, 0x1000, 0x4, 0x1}, 0x20) 506.48029ms ago: executing program 5 (id=955): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, r2}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000100)={@remote, r2}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="30000000190001002dbd7000f8dbdf2502200000ff02ff02002a000008000100ac1414aa0c0009000800281052"], 0x30}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) 504.564817ms ago: executing program 6 (id=956): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000040), &(0x7f00000000c0)=""/255, &(0x7f00000001c0), &(0x7f0000000380), 0x6, r0}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000040), &(0x7f00000000c0)=""/255, &(0x7f00000001c0), &(0x7f0000000380), 0x6, r0}, 0x38) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000380)=0xbf9f, 0x4) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000140)=0x7, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xe8, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r5 = socket(0x25, 0x5, 0x0) connect$qrtr(r5, &(0x7f0000000440)={0x25, 0x0, 0x1}, 0x18) (async) connect$qrtr(r5, &(0x7f0000000440)={0x25, 0x0, 0x1}, 0x18) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x3, 0xff, 0xfffffff3, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @ipv4={'\x00', '\xff\xff', @remote}, 0x8000, 0xb8, 0x6, 0x3}}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newtaction={0x16f0, 0x30, 0x800, 0x70bd27, 0x25dfdbff, {}, [{0x330, 0x1, [@m_bpf={0x58, 0x5, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x26, 0x6, "5aa2abec7e1dcf8567e8d5b2b84ad495bc28b3d7be0c5a0bb38fc3b387d4af449f23"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_xt={0xa8, 0xa, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x53, 0x6, "d9bdb20064b5be94a61ad0ebab7bd94874e7a73df4d5f461a6ebfc35c2ac04969dd070c54ba7c22e5d21e4be8f088d2c9cf59505160c4780632eb9e39165fccddcc5c34049fceb35ebd7613332805c"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0xa0, 0x1f, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x9, 0x20000009, 0x227, 0x10000002}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7f}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}]}, {0x49, 0x6, "0357a9f7bd7e61b7a4a20f74f6f53dcea1d6d46404308ca00dab508ce5bd4ef16cd55e33d4ebe05f572231bcff68382b65d423b4017c41cecee00da30fa13cb1769f37d480"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x134, 0x14, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0xe}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfb6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x72e}]}, {0xde, 0x6, "b61a638f84b47dbac2f48f60f39600ba3636ec01a361ad763d19dcfc0771f21d540f7f92e5c14b51c8c8662472df40423d2a216935519927cf525dc188926150669846380c7be9436925874fb3103477c87f2135170c13fdbfce9ac326b9845417390ec777028a3d7ab351ad5112aca25fdf879fea419ff23069df2a6e551167b3bec98fbacba91d0ad64495296b216fc49315dca0ab7d9052e646a8873ad351f3337049fb36b9137cb1d05e9f4e23cbc3af050bcf674d7f7609c08753fe34992b3c46deeb585d77a6c129b6e9ca0ba2ecb07046135140894e37"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mpls={0x58, 0x4, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xfb}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8906}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x13ac, 0x1, [@m_xt={0x378, 0x9, 0x0, 0x0, {{0x7}, {0x31c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TARG={0x122, 0x6, {0x7, 'security\x00', 0x8, 0xc76e, "6e5989fc81d990e6aed43a4aa4c5093edf766168296687cad890e8e0b601ea405ccf1c4f94c359c1d422ddaaddab67b35657cae73baf1617bd319a5ac3a5f8b799ebaf8fc01282c5c8e0c122b72e39e16d59019e8443fe01872a64e483fe0a00c646f66f95f6b1b5a4c1f259ac039367f711c46067230b2d27bde8b0063ca8ffdcfad0a37fc1767ed21863bafa23e0bd793ba4223d4f035199b8aad80cf35d5b755a2baa544b486b60b1d080d07fe25b6fdb26738051d48cb48e08167dfba51381cfeec7d4039b2cf1fb55274ca9fa9fa90b5dda74472d1f3324d88204946c45228a67ae4a4220c523559c3fdc893755d5a4b3b731987fc3"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0xcc, 0x6, {0x7, 'mangle\x00', 0x2, 0x8, "d50ecb7f8e92f7af702fa16812085343398d081497e2bbafa4ef7f04f9b4048cbcd54c01791a0a159477f57ac034c808dff0ed1119275d7fc56c60be00551ac707ca3f690d33608d72e87f7ab81504db3542234d2dcb89f5fc7a655eff351bcab2e00001c800234e0b3e527c69a4ce7f1267ef07b4a1c8ab41e99213b607204f64624847bc5ab3193a6ed1d53505b8b64956a26d8f41fcee86b7017e0dc14314ce9e"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TARG={0x108, 0x6, {0x7, 'security\x00', 0x7, 0xfff, "f0c91314274d837516cc970df8aad89131ee7de9487ebc825fdd53437dfd9e13c154f50a73966292e0b651a40732e6b8eabbfbfc7bc115c2d8ac84b9f14ef3e6cd6ab753a8ec965da97d77a556cd6289752fd060d0b5e6c2af0bcea974f5e5e00b5991a29a7b20788312d11956e57c947dd8d3b6592e0f70dbc42d2001f24f002d0ee62ae67f73b15a019efd476cd58f646bcdd47d488394c8b7d86f4a5248fde492372d63a9fce8d98abfd426322113c5a85e47b3571fcb0b89ba556a399b3f2842b860a6a1a051576b546c58db96c84307939b2ab4165c519d7e6cd25d"}}]}, {0x37, 0x6, "d5376b847d68b722ceb49cc1d132c9da16e25ad66f7c722afa488f0190198dc94df8404ec78d1745406f99eaedf4d1a1892798"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x1030, 0xb, 0x0, 0x0, {{0x9}, {0x4}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x16f0}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000d7ce, 0x0, 0xffffffffffffffbb, 0x0, &(0x7f00000007c0)="81eb315a8973d42150b3a0b2489a20af6c09553b108dc65657fe19d8c69df0076e5a51fed618a053d83859698a271d45b88c474d6c91f2ddbc765ff9df4c73f7583f75465019cbc7f6b003fe74de597065d58de3afa278bb30ed9fd8f0d89e9b6ac51771f919c06ca9d6190a30f65c3d71841a549a834cc45ba32d0322892602309263f559418d649b166d8fea34638e2103a929807493abd1495c0e11a762c64f0358b57562cee4dda3407c924cef8c470000000000000000000000000800"/204, 0x0}, 0x50) 400.691837ms ago: executing program 4 (id=957): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000c00), 0x71, 0x2081) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000340)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x2, 0xffd, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r4, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_XSAVE(r5, 0x5000aea5, &(0x7f0000000200)={[0x5, 0xa, 0x1, 0x7, 0x6, 0x6, 0x6, 0xffff, 0x7, 0x4, 0x80, 0x1291, 0xffffffff, 0x1000, 0x5, 0x6, 0xff, 0x6, 0x7, 0x8000, 0x5, 0x74, 0x6, 0x7, 0x8, 0x8, 0xfffff001, 0xffff7fff, 0x100, 0x8, 0xb4, 0x5, 0x92, 0x8, 0x3460, 0x38, 0x0, 0x8001, 0x4, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0xa, 0x4, 0xa72, 0x22, 0x4, 0x100, 0x240000, 0x2, 0x7fff, 0x5, 0x1, 0x8, 0x1, 0xffff5e3a, 0x7, 0x9, 0x69, 0x7, 0x7, 0x6, 0x4, 0x1, 0x8000, 0xb72a, 0x2, 0xffff, 0x10, 0x8, 0x2, 0x3ff, 0x101, 0x2, 0x3, 0x6, 0x40, 0x80000000, 0x3, 0x1, 0x10000, 0xd, 0x80, 0x8b, 0x7, 0x101, 0x10001, 0x8, 0x8, 0x81, 0x7, 0x4, 0x0, 0x2, 0xaa, 0xf, 0x4, 0xffffffff, 0x5, 0x2, 0x6, 0x3, 0x2, 0x0, 0x0, 0x8, 0xfffffffa, 0x3ff, 0x81, 0x6, 0xd1e, 0xdd, 0xb, 0x7, 0xfffffffb, 0x1ff, 0x3ff, 0x7, 0x4, 0x5, 0x6000, 0x0, 0xffff0001, 0x1000, 0xfff, 0xa, 0x9, 0x7, 0x2, 0x7f, 0xfffff6cf, 0x750837f2, 0x400, 0x3ff, 0x8, 0x9, 0x7f, 0x508000, 0x10, 0x8, 0x8001, 0xfd4, 0x8, 0x4, 0x4, 0x1, 0x9, 0xd, 0xffffffff, 0xa, 0xa, 0x1, 0x4d, 0x4, 0x5, 0x9, 0xe7e8, 0x10001, 0x4, 0x200, 0x4, 0x9, 0x2b54801e, 0x5, 0x3, 0x4, 0x3, 0x4, 0xa, 0x79d, 0xaa27, 0x2, 0x7, 0x5a9b, 0x3ff, 0x8, 0x1, 0x1, 0x3, 0x1, 0x1, 0x5, 0x5, 0x5, 0x7, 0x2, 0x8, 0xc, 0x8001, 0x8, 0x5, 0x8, 0x400, 0x8, 0xffff0001, 0x6, 0xfffffffb, 0x6, 0x8, 0x8000, 0x80000001, 0x4, 0x9, 0x4, 0x34, 0x8, 0x6, 0x9, 0x6, 0xffffff01, 0x61, 0x9, 0x4, 0x2, 0x8, 0x1, 0x8, 0xfffffc01, 0xfffffffa, 0x1, 0x4, 0x100, 0x82, 0xf61, 0x8, 0xfffffff3, 0x4, 0xff, 0x0, 0x2, 0x8, 0x7ff, 0x800, 0x401, 0x6, 0x7ff, 0xcd, 0x4, 0x4, 0x5, 0xf, 0x8, 0x4, 0x6, 0x9, 0x6, 0x3, 0x6279, 0x6, 0x2, 0x80000000, 0x2, 0x4, 0x5, 0x3d73, 0xa, 0x3, 0x7, 0xef, 0x5, 0x2, 0x8051, 0x2, 0x0, 0x8001, 0xf, 0xfff, 0x9, 0x7ff, 0x1a28, 0x5, 0x3, 0x2a7c, 0x1, 0x0, 0xb6, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x10001, 0x6, 0x39, 0x3, 0x3, 0x9, 0xff, 0x8, 0x7, 0x1, 0x4, 0x2d, 0x1, 0x9e, 0x7, 0x8000, 0x38c944f2, 0x101, 0x4, 0x2, 0x7, 0x9, 0xef42, 0xc, 0x100, 0x5, 0x3, 0x10000, 0x7b482c67, 0x200, 0x4, 0x3, 0x9, 0x100, 0x81, 0x56, 0x2, 0x2, 0x4, 0x3, 0x1, 0xfffffe01, 0x5, 0x6, 0x5, 0x9, 0x2, 0x6, 0xffff, 0x3, 0x7a2c31f9, 0x7, 0x7ff, 0x8cf, 0x5, 0x8000, 0x200, 0xffffd614, 0x1, 0x5, 0x81, 0x3, 0x9, 0x1, 0x4, 0x280000, 0xffff08b9, 0x7, 0x0, 0xc, 0xa, 0x10, 0x5, 0xae, 0x9, 0x0, 0x7, 0xe, 0x40, 0xa, 0x5, 0x10, 0x6b5, 0x5, 0x9, 0x101, 0x6, 0x1, 0xc, 0x9, 0xa, 0x10000, 0x3, 0x3ff, 0xfffffff8, 0x3, 0x6, 0xf7f5, 0x5, 0xff, 0xda, 0x8, 0xb, 0x7fffffff, 0x9, 0x5, 0x0, 0x8, 0x10001, 0x5, 0x97d, 0x400, 0x2, 0x5, 0x5, 0x5d, 0x6, 0x8, 0xfffffff9, 0xa, 0xf2c, 0x6, 0xffffff00, 0x31b1, 0xfffffffe, 0x8, 0xa9a, 0x8, 0x0, 0xf0000000, 0xffffffff, 0x1ff, 0xfffffffe, 0x0, 0x64, 0x8b3a, 0x3, 0x8, 0x6, 0x101, 0x80000001, 0x1, 0x2, 0x9, 0x7fff, 0x7, 0xb, 0x0, 0xff, 0x6, 0x4, 0xe, 0x4, 0x6, 0xfffffffd, 0x9, 0x4, 0x5, 0x7, 0x1, 0x9, 0x2, 0x7, 0xc, 0x8, 0x2, 0x8, 0x3, 0x2, 0x4, 0x3, 0x8001, 0x0, 0xffffffff, 0x401, 0x193, 0x9, 0x239ca67b, 0xfffff76f, 0x2000000, 0x2, 0x8, 0x0, 0x4, 0x0, 0x2, 0x61, 0x3, 0x4, 0xff4a, 0x10000, 0x6, 0x2, 0x7fff, 0x58, 0xffffffff, 0x0, 0x100, 0x1, 0x3, 0x100, 0x6faf, 0xffff, 0xffffff21, 0x80000001, 0x80000001, 0x8, 0x101, 0x1, 0x9, 0x14, 0x2e1f, 0xfffffbff, 0x1, 0xfe85, 0x6, 0x5, 0xe00, 0x4, 0x2, 0xb955, 0x1, 0x2, 0xc, 0x6, 0x59, 0x0, 0x0, 0xffff, 0x6, 0x61b332f6, 0xb, 0x4, 0x6, 0x3, 0x0, 0x6000000, 0x6, 0x10001, 0x1, 0x3, 0x7f, 0x5, 0x5, 0xd, 0x1, 0x5b7, 0xdc, 0x4, 0x3, 0x2, 0x4, 0x9, 0xffffffff, 0x7fff, 0x2, 0x1f, 0x3, 0x40, 0xfffffffe, 0xffffffe4, 0x8, 0x72, 0x10000, 0x8, 0x8001, 0xfffffffa, 0x4, 0x97, 0x8637, 0x1ff, 0x7fffffff, 0x7, 0x5, 0xc, 0xc3eb, 0x27c7c750, 0x1, 0x7, 0x6, 0x4, 0xe9, 0x6, 0xcb, 0x9, 0x0, 0x5, 0x2, 0x0, 0xf, 0xe2, 0xb5f, 0x8, 0x40, 0x0, 0xfffffffa, 0x4, 0x0, 0x8, 0xfb, 0x1, 0x4, 0x6, 0x1, 0x50, 0x9eea, 0x65f2, 0x8, 0x9, 0x5, 0x5, 0x5ba3, 0x2, 0x9, 0x200, 0x3, 0x8, 0x8, 0x6, 0x6, 0x2, 0x4, 0x80000000, 0xe7ff, 0x5, 0xfff, 0x4cd, 0xc0c8, 0x6, 0x6, 0x5, 0xdc3, 0x7, 0x0, 0x8, 0x2, 0x6, 0x8, 0x2, 0x8, 0x3, 0x5, 0x8, 0x1, 0x0, 0x8, 0x3, 0x8, 0x6, 0x401, 0x7, 0x1, 0x6, 0x2, 0x7, 0x5, 0xe, 0x7, 0x9, 0x9, 0x6, 0x0, 0x6, 0x1, 0x6, 0x7, 0xdb4a, 0x7, 0x8, 0x6, 0x7fffffff, 0x749, 0x4, 0x9, 0x8, 0x0, 0x99, 0x0, 0xaeaf, 0x10001, 0x7, 0x5, 0x80000001, 0x40, 0x6, 0x9, 0x53, 0x0, 0x3, 0x5, 0x5, 0x41640d29, 0x976, 0x8, 0x5fe, 0x4, 0x2, 0xc7a6, 0x9, 0xf, 0x8c2, 0x9, 0x1, 0xe3, 0x8001, 0x401, 0x135, 0xb6c9, 0x6, 0x9, 0x0, 0x4, 0x6, 0x7, 0x3, 0x6, 0x1, 0x5, 0x8001, 0x8, 0xaf, 0x1551, 0x1, 0x101, 0xffff, 0x5, 0x8001, 0x3, 0x5, 0x4, 0x9, 0x76d, 0x0, 0xfffffffa, 0x1d, 0x1, 0xfffffffb, 0x2c2, 0x80000001, 0x2, 0x9, 0x2, 0x5, 0x401, 0x81, 0x582e, 0x6, 0xe, 0x10001, 0x0, 0xa7, 0xd8, 0x19c, 0x1, 0x2, 0x7, 0x3, 0x5, 0x7, 0x5, 0xac, 0x9, 0x7f, 0xfffffff7, 0x3, 0xd55, 0x6, 0x7, 0x4, 0x2, 0xb, 0x0, 0x5, 0x6, 0x1, 0x10, 0x1ff, 0x8, 0x80, 0x7, 0x3, 0x5, 0x8, 0xffff, 0xf7, 0x2, 0x2, 0xed, 0x78, 0x7a40, 0xd6f, 0x4, 0x10000, 0x3, 0x0, 0x80000000, 0x6, 0xffff, 0x7, 0x8000, 0x10001, 0x8, 0x3, 0x2, 0x0, 0x8, 0x3, 0x5, 0x2, 0x6, 0x7ff, 0x6f6c00, 0x1, 0x9, 0x5, 0x1, 0xfffffff8, 0x72a, 0xd9d, 0xfc14, 0xb9, 0x1000, 0x200, 0x6, 0x7, 0x6, 0xfff, 0x6, 0xac, 0xbde, 0x4, 0xff6, 0x501e, 0x81, 0x81, 0x7, 0x200, 0x81, 0x8, 0x8000, 0x9, 0x7, 0x8, 0xd30, 0x1000, 0x4, 0xfe8c, 0x1, 0xff, 0x1, 0x4, 0x70, 0x6, 0xa757, 0x3, 0x7fffffff, 0x2, 0x7f, 0x9, 0x6, 0x5, 0xc49, 0x0, 0x0, 0x200, 0x4, 0xffff, 0xffffffff, 0xffff, 0x637, 0x81, 0x1, 0x7, 0x9, 0x80000000, 0xa, 0x6, 0x2fba, 0x2, 0xed2, 0x5, 0x3, 0x3, 0x6, 0x2, 0x80, 0x9, 0x8, 0x0, 0xfffffff7, 0x10, 0x1, 0x7fff, 0x561, 0x40, 0x7, 0x8, 0x3, 0x40, 0x2, 0x10, 0x5, 0x0, 0x0, 0x6, 0x4, 0x8, 0x3b, 0x4, 0x4, 0x1ff, 0x9, 0x6, 0x7, 0xb14, 0x7, 0x81, 0x10000, 0x4, 0xffffff7b, 0x9, 0x2, 0x7, 0x9, 0x4, 0x8ee, 0x101, 0x5, 0x1, 0x1, 0x8001, 0x60b9a7f6, 0x9573, 0x200, 0x2, 0xe00, 0x9ce, 0x10, 0x7fffffff, 0x7, 0xa, 0x8, 0x0, 0x2d, 0x5b8, 0xffffffff, 0x20000000, 0x9, 0x1, 0x180, 0x100, 0x200, 0x1, 0x40, 0x8, 0x2, 0x2f5e, 0xffff, 0x3, 0x8, 0x401, 0xfffffff7, 0x0, 0x80, 0x3, 0x9, 0x3, 0x3, 0xf, 0x9, 0xfff, 0x8000, 0x1000, 0x0, 0x9, 0x0, 0x7, 0xf1, 0x1, 0x82bc, 0xdc, 0x0, 0x4, 0x8, 0xff, 0xe16, 0x2d0c, 0x1000, 0x9, 0x0, 0xd78c, 0x5, 0x8, 0xffff, 0x38, 0x8, 0x4, 0x7, 0x9, 0x9, 0x9, 0x0, 0x0, 0x1, 0x4, 0x1, 0x3, 0x800, 0x0, 0x80000001, 0x5, 0x81, 0x81, 0x3, 0x4, 0x40, 0x1000000, 0x7, 0x0, 0xfffffffa, 0x2, 0x0, 0x36f, 0xe49f, 0x5, 0xfffffff8, 0xc, 0x3, 0xf0, 0x9, 0xe701, 0x8, 0x8001, 0x3, 0xff, 0xc, 0xbc82, 0x0, 0x8]}) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="50050101040413"], 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRES16=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xb}, 0x10}, 0x94) 400.335241ms ago: executing program 5 (id=958): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000007"], 0x50) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='1\x00', 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="b8030041848af000643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) readlink(&(0x7f0000002000)='./file0/file3\x00', &(0x7f00000021c0)=""/151, 0x97) syz_fuse_handle_req(r1, &(0x7f0000009680)="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", 0x2000, &(0x7f0000002540)={&(0x7f0000004200)={0x50, 0xfffffffffffffffe, 0x3, {0x7, 0x2b, 0x9, 0x42802140, 0xa, 0x8, 0x7, 0xcdd, 0x0, 0x0, 0x80, 0x5e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)={0x90, 0xffffffffffffffda, 0x6, {0x4, 0x2, 0x5, 0xfffffffffffffff9, 0x400, 0xc, {0x0, 0xb, 0x7, 0x7f, 0xffffffffffffffff, 0x4, 0x9, 0x0, 0xffffff7f, 0xa000, 0x0, 0x0, 0x0, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) mount$cgroup(0x0, &(0x7f0000002440)='./file0/file3\x00', 0x0, 0x3000000, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000700000030000180080006000100000014000400fc020000000000000000000000000000060001000a"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) ptrace(0x10, r3) r7 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r7, 0x5) poll(&(0x7f0000000040)=[{r7, 0x80}], 0x1, 0x2) listen(r2, 0x0) r8 = socket(0x6, 0x6, 0x1) connect$vsock_stream(r8, &(0x7f0000002280), 0xffffffffffffff2e) 281.988851ms ago: executing program 6 (id=959): syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000d0428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a9520000000022001c00128009000100626f6e64000000000c00028005000d0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000d0428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a9520000000022001c00128009000100626f6e64000000000c00028005000d0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) (async) 280.375781ms ago: executing program 5 (id=960): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}}, 0xc040) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newtaction={0xbc, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xa8, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x6, 0x0, 0xf4a}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x4, 0x28, 0x2f, 0x8001, 0x4, 0xb78, 0x5, 0x3, 0x0, 0x1, 0x8, 0x8000, 0x400000, 0xffffffff, 0x1b, 0x8, 0x7, 0x1f4, 0xf, 0x3, 0x800, 0x3, 0x400, 0x9, 0x5, 0x9, 0x2, 0xffffff21, 0x1, 0x15, 0x101, 0x7, 0x4, 0x9, 0x82, 0xa8, 0xda80, 0x0, 0x2, 0x4, 0x1, 0x0, 0x5, 0xa4, 0x401, 0x2, 0x3, 0x8, 0xfffffffc, 0x6, 0x0, 0x967, 0xffffffff, 0x8, 0x6, 0x6, 0x9, 0x3, 0xff, 0x7e, 0xa, 0x40007fff, 0x0, 0xfffffff7, 0x9, 0x8, 0x7, 0x80000000, 0x7fffffff, 0x2, 0x5, 0x1, 0x4, 0x7, 0x10001, 0xb1a, 0x9, 0x9, 0x1, 0x0, 0x7ff, 0x4, 0x8, 0x6, 0xfffff1f0, 0x3, 0x7, 0x0, 0x9, 0xfd, 0x80000000, 0x5, 0x100036, 0x5, 0x8, 0x10, 0x4, 0x2, 0x6a5, 0x6, 0x6, 0x4, 0x7, 0x8, 0x1, 0x3, 0x7fff, 0x5c73, 0x2, 0xe0a, 0xe5, 0x7, 0x9, 0x0, 0x3, 0xfffffff7, 0x1, 0x1, 0x9, 0x80000000, 0xb, 0x5, 0xcc, 0x7fffffff, 0x0, 0xbb, 0x10, 0x7, 0xf, 0x1a, 0x8, 0x2, 0x8, 0xcb0, 0xffffffff, 0x7ff, 0x6017, 0x7ff, 0x4, 0xa9, 0x4, 0x9, 0x1, 0xfffffe01, 0x6, 0x4a032035, 0x6, 0x8, 0x7, 0xd, 0x1, 0x0, 0x8, 0x8000, 0x2000, 0xed0, 0xf62d, 0x2, 0x1ac, 0x9, 0xe, 0x6, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x72, 0x3, 0x4, 0x6, 0x6, 0x1ff, 0x7, 0x3, 0x9, 0x1, 0x100, 0x6, 0x3, 0x9, 0x0, 0xe, 0x6, 0x4, 0x55, 0x8, 0x3, 0x100, 0x7af, 0x0, 0x201, 0x2, 0x5, 0x9a000000, 0xe5ba, 0x8, 0x2, 0x1ff, 0xfffffffc, 0x4, 0x1, 0xffff8000, 0x8, 0x9, 0x3, 0xe01, 0x6, 0x80, 0x10000006, 0x31b80000, 0x5, 0xfffffeff, 0x9992, 0x3, 0x75, 0x2, 0x48e, 0x4, 0x8, 0x2, 0x0, 0x9ee2, 0x0, 0x6, 0x3, 0x400, 0x8, 0x5, 0xdc, 0x0, 0x3, 0xc, 0x9, 0x7, 0x8, 0x7a31, 0x3ff, 0xd, 0x1214, 0xffffffff, 0x6, 0x8, 0x76f, 0x4, 0x8, 0x7, 0x0, 0x7, 0xfb, 0x100, 0xe340, 0x4, 0x8, 0x7]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xb, 0x8001, 0x3, 0xffffffff}, {0x6d, 0x0, 0x86b, 0x7, 0x8, 0x8}, 0x3, 0x7, 0xbbf}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 202.473704ms ago: executing program 4 (id=961): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000340)=0x42a5, 0x4) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) close_range(r2, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg=0x7, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x800, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x5, 0x1, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) 103.273731ms ago: executing program 6 (id=962): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0, 0x41}], 0x2, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x8, 0x202000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000340)={r4, &(0x7f00000003c0)=""/181}) r5 = accept$packet(r0, &(0x7f0000000100), &(0x7f0000000180)=0x14) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000001c0)={0x2, 0x2}, 0x4) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000000c0)={r4}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) 102.597626ms ago: executing program 1 (id=963): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x60546c98a3c4b24c, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000340)={0x0, 0xea, "167bae3d6d3395d66593f3663d0f7f8f7781374372c4ed047901433d339c85da6cf533eb9b5db42d36c2759ddba8983460a84897c801b1f114ded29d851aa974f855a3aef418e3379f232dc37fc5c6f577114f37a64648e4c51744ba624c7b71d6cf8e23b6713292a392f52d063d4acd4295f673d243748e493762f5c20297177b7a515e3cfcde81f1de9da88a0459728773fd8e72af7a9deaf99a2bbebbba43582e0606c52d42de10f45271b5cab0665d9da6b108c9d77d0d7673aa25b99f2240a385b8809822bea023ffd5c47a6fe52ecdb5c68648d7ce690623dd9a614af21504ef9243aee5035335"}, &(0x7f0000000100)=0xf2) chdir(&(0x7f0000000140)='./file1\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000540)=@chain) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r2, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r2, &(0x7f00000010c0)=""/4096, 0x1000) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, 0xfffffffffffffffa, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0xfffffffffffffffe, 0x1, 0x2000200000a95c, 0x9, 0x6, 0x82000001, 0x48ca, 0xfffffffffffffffe, 0x4}) ioctl$FS_IOC_FSSETXATTR(r0, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3a}) 2.304403ms ago: executing program 5 (id=964): ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='veth0_vlan\x00', 0x0, 0x1, 0xc}) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x14, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffffc0, 0xb}}}}]}, 0x40}}, 0x0) 0s ago: executing program 1 (id=965): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x10000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x40, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x2, 0x0, 0x0, 0xffffbffd, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x8e77, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55], [0x0, 0x0, 0x0, 0x0, 0x0, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0xff, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10001, 0x810, 0x6, 0x0, 0x0, 0x800000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2000000], [0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8f4]}, 0x45c) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async, rerun: 32) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) (async, rerun: 32) setreuid(0xee01, 0xee01) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) kernel console output (not intermixed with test programs): g): Released all slaves [ 73.042967][ T29] cfg80211: failed to load regulatory.db [ 73.308266][ T5941] Bluetooth: hci0: command 0x0c1a tx timeout [ 73.468374][ T5941] Bluetooth: hci3: command 0x0c1a tx timeout [ 73.468409][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 73.472510][ T5930] Bluetooth: hci1: command 0x0c1a tx timeout [ 73.737374][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.308'. [ 73.827096][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.311'. [ 74.260211][ T7134] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 74.260211][ T7134] The task syz.2.314 (7134) triggered the difference, watch for misbehavior. [ 74.364137][ T7143] XFS (nullb0): Invalid superblock magic number [ 75.026858][ T7176] syzkaller0: entered promiscuous mode [ 75.028740][ T7176] syzkaller0: entered allmulticast mode [ 75.038292][ T826] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 75.081478][ T40] kauditd_printk_skb: 267 callbacks suppressed [ 75.081488][ T40] audit: type=1400 audit(1766282295.859:698): avc: denied { accept } for pid=7163 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.091584][ T40] audit: type=1400 audit(1766282295.869:699): avc: denied { accept } for pid=7163 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.102072][ T7177] 9pnet_virtio: no channels available for device syz [ 75.106873][ T40] audit: type=1400 audit(1766282295.879:700): avc: denied { accept } for pid=7163 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.116296][ T40] audit: type=1400 audit(1766282295.879:701): avc: denied { mounton } for pid=7175 comm="syz.0.326" path="/86/file0" dev="tmpfs" ino=476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.126702][ T40] audit: type=1400 audit(1766282295.889:702): avc: denied { ioctl } for pid=7167 comm="syz.1.324" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.136621][ T40] audit: type=1400 audit(1766282295.889:703): avc: denied { accept } for pid=7163 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.144108][ T40] audit: type=1400 audit(1766282295.899:704): avc: denied { accept } for pid=7163 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.151510][ T40] audit: type=1400 audit(1766282295.909:705): avc: denied { accept } for pid=7163 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.159246][ T40] audit: type=1400 audit(1766282295.919:706): avc: denied { accept } for pid=7163 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.166543][ T40] audit: type=1400 audit(1766282295.919:707): avc: denied { read write } for pid=5929 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.195914][ T826] usb 6-1: config 0 has no interfaces? [ 75.205154][ T826] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 75.207959][ T826] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 75.211382][ T826] usb 6-1: Product: syz [ 75.212725][ T826] usb 6-1: Manufacturer: syz [ 75.214126][ T826] usb 6-1: SerialNumber: syz [ 75.223027][ T826] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 75.225771][ T826] usb 6-1: no configuration chosen from 1 choice [ 75.362218][ T7185] loop6: detected capacity change from 0 to 2640 [ 75.378062][ T6195] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.382530][ T6195] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.385800][ T6195] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.388239][ T5930] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.397981][ T6195] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.406700][ T6195] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.548542][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 75.548635][ T5941] Bluetooth: hci2: command 0x0c1a tx timeout [ 75.550501][ T5930] Bluetooth: hci1: command 0x0c1a tx timeout [ 76.073149][ T7212] efs: device does not support 512 byte blocks [ 76.078338][ T7212] device does not support 512 byte blocks [ 76.078338][ T7212] [ 76.281239][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.283508][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.567517][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'. [ 76.660558][ T7221] netlink: 28 bytes leftover after parsing attributes in process `syz.0.340'. [ 76.668626][ T7221] devpts: Bad value for 'max' [ 76.736454][ T7227] netlink: 52 bytes leftover after parsing attributes in process `syz.3.341'. [ 76.906494][ T7242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.910991][ T7242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.169134][ T826] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.205382][ T82] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.267868][ T82] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.332876][ T826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.336510][ T826] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.341899][ T826] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.344799][ T826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.349039][ T82] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.350442][ T826] usb 5-1: config 0 descriptor?? [ 77.362728][ T5930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.366215][ T5930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.369671][ T5930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.372573][ T5930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.375732][ T5930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.419394][ T82] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.629955][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout [ 77.631208][ T5930] Bluetooth: hci2: command 0x0c1a tx timeout [ 77.633199][ T5941] Bluetooth: hci3: command 0x0c1a tx timeout [ 77.729803][ T82] bond0 (unregistering): Released all slaves [ 77.746067][ T7253] chnl_net:caif_netlink_parms(): no params data found [ 77.750909][ T826] usbhid 5-1:0.0: can't add hid device: -71 [ 77.752870][ T826] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 77.754959][ T6013] usb 6-1: USB disconnect, device number 9 [ 77.774890][ T826] usb 5-1: USB disconnect, device number 3 [ 77.831499][ T82] IPVS: stopping backup sync thread 7010 ... [ 77.839954][ T7278] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 77.847210][ T10] IPVS: starting estimator thread 0... [ 77.949853][ T7281] IPVS: using max 43 ests per chain, 103200 per kthread [ 77.962537][ T7253] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.964910][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.967159][ T7253] bridge_slave_0: entered allmulticast mode [ 77.971304][ T7253] bridge_slave_0: entered promiscuous mode [ 77.974072][ T7275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.355'. [ 77.998323][ T7253] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.000690][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.002997][ T7253] bridge_slave_1: entered allmulticast mode [ 78.008925][ T7253] bridge_slave_1: entered promiscuous mode [ 78.052098][ T7288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.069985][ T7253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.076177][ T7253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.096608][ T7289] netlink: 'syz.0.357': attribute type 1 has an invalid length. [ 78.097475][ T7253] team0: Port device team_slave_0 added [ 78.118796][ T7289] 8021q: adding VLAN 0 to HW filter on device bond3 [ 78.122590][ T7253] team0: Port device team_slave_1 added [ 78.166468][ T7253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.168147][ T7294] 9pnet_virtio: no channels available for device syz [ 78.179190][ T7253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.198352][ T7253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.212470][ T5930] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 78.227644][ T7253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.230319][ T7253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.239992][ T7253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.257020][ T7294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=7294 comm=syz.3.359 [ 78.278669][ T7299] netlink: 'syz.1.360': attribute type 21 has an invalid length. [ 78.287684][ T7253] hsr_slave_0: entered promiscuous mode [ 78.290285][ T7253] hsr_slave_1: entered promiscuous mode [ 78.292584][ T7253] debugfs: 'hsr0' already exists in 'hsr' [ 78.294377][ T7253] Cannot create hsr debugfs directory [ 78.306896][ T82] hsr_slave_0: left promiscuous mode [ 78.314532][ T82] hsr_slave_1: left promiscuous mode [ 78.325729][ T82] veth1_macvtap: left promiscuous mode [ 78.327618][ T82] veth0_macvtap: left promiscuous mode [ 78.330253][ T82] veth1_vlan: left promiscuous mode [ 78.332323][ T82] veth0_vlan: left promiscuous mode [ 78.368852][ T7301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.361'. [ 78.678377][ T3327] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 78.874984][ T3327] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.886808][ T3327] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.893973][ T3327] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.907304][ T3327] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.910469][ T3327] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.916209][ T3327] usb 8-1: config 0 descriptor?? [ 78.924297][ T7253] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.939932][ T7253] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.940150][ T7309] SET target dimension over the limit! [ 78.951877][ T7253] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.965924][ T7253] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.075446][ T7253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.129374][ T7253] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.147795][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.150118][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.181575][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.183879][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.252543][ T7327] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 79.340889][ T3327] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 79.370532][ T3327] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 79.388388][ T5930] Bluetooth: hci0: command tx timeout [ 79.457921][ T7337] netlink: 72 bytes leftover after parsing attributes in process `syz.0.366'. [ 79.669443][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.369'. [ 79.825228][ T7253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.038249][ T826] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 80.089631][ T40] kauditd_printk_skb: 1865 callbacks suppressed [ 80.089642][ T40] audit: type=1400 audit(1766282300.869:2573): avc: denied { getattr } for pid=7365 comm="cmp" path="/run/dhcpcd/hook-state/resolv.conf.eth4.link" dev="tmpfs" ino=3317 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.103357][ T40] audit: type=1400 audit(1766282300.879:2574): avc: denied { read } for pid=7367 comm="syz.0.371" dev="nsfs" ino=4026533026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 80.113060][ T40] audit: type=1400 audit(1766282300.879:2575): avc: denied { read open } for pid=7367 comm="syz.0.371" path="net:[4026533026]" dev="nsfs" ino=4026533026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 80.122170][ T40] audit: type=1400 audit(1766282300.879:2576): avc: denied { create } for pid=7367 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.130403][ T40] audit: type=1400 audit(1766282300.879:2577): avc: denied { write } for pid=7367 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.136718][ T40] audit: type=1400 audit(1766282300.879:2578): avc: denied { write } for pid=7367 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.146215][ T40] audit: type=1400 audit(1766282300.879:2579): avc: denied { read } for pid=7367 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.154344][ T40] audit: type=1400 audit(1766282300.879:2580): avc: denied { read } for pid=7367 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.162539][ T40] audit: type=1400 audit(1766282300.879:2581): avc: denied { write } for pid=7367 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.170892][ T40] audit: type=1400 audit(1766282300.889:2582): avc: denied { create } for pid=7367 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.217610][ T826] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 80.225031][ T826] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 80.228164][ T826] usb 6-1: config 0 interface 0 has no altsetting 0 [ 80.240611][ T826] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 80.243460][ T826] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 80.247290][ T826] usb 6-1: Product: syz [ 80.248967][ T826] usb 6-1: Manufacturer: syz [ 80.250429][ T826] usb 6-1: SerialNumber: syz [ 80.258577][ T826] usb 6-1: config 0 descriptor?? [ 80.263505][ T7253] veth0_vlan: entered promiscuous mode [ 80.266163][ T826] hub 6-1:0.0: bad descriptor, ignoring hub [ 80.272956][ T826] hub 6-1:0.0: probe with driver hub failed with error -5 [ 80.277293][ T826] usb 6-1: selecting invalid altsetting 0 [ 80.291217][ T7253] veth1_vlan: entered promiscuous mode [ 80.345220][ T7253] veth0_macvtap: entered promiscuous mode [ 80.358672][ T7253] veth1_macvtap: entered promiscuous mode [ 80.410517][ T7253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.442439][ T7253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.460748][ T4256] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.464788][ T4256] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.467520][ T4256] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.479118][ T4256] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.530545][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.370'. [ 80.556368][ T7385] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.571995][ T3327] usb 8-1: USB disconnect, device number 5 [ 80.583448][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.586757][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.610584][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.613576][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.619861][ T60] usb 6-1: USB disconnect, device number 10 [ 80.836168][ T7396] netlink: 'syz.0.374': attribute type 1 has an invalid length. [ 80.860629][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.376'. [ 80.866972][ T7396] netlink: 'syz.0.374': attribute type 3 has an invalid length. [ 80.935254][ T7402] block device autoloading is deprecated and will be removed. [ 81.027835][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.377'. [ 81.032674][ T7405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=7405 comm=syz.1.377 [ 81.213805][ T7416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.380'. [ 81.293633][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.381'. [ 81.468420][ T5930] Bluetooth: hci0: command tx timeout [ 81.760250][ T7447] 9pnet_virtio: no channels available for device syz [ 81.929859][ T7460] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 81.929920][ T7458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.393'. [ 82.938337][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 83.098978][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 83.108815][ T10] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 83.112197][ T10] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 83.119167][ T10] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 83.123859][ T10] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 83.141440][ T10] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 83.145269][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.148655][ T10] usb 9-1: Product: syz [ 83.150224][ T10] usb 9-1: Manufacturer: syz [ 83.152035][ T10] usb 9-1: SerialNumber: syz [ 83.162477][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 83.166825][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input11 [ 83.438272][ T10] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 83.441658][ T10] (id 0x00) [ 83.508247][ T10] rc_core: IR keymap rc-imon-pad not found [ 83.510651][ T10] Registered IR keymap rc-empty [ 83.512799][ T10] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 83.516981][ T10] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 83.558287][ T5930] Bluetooth: hci0: command tx timeout [ 83.648764][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0 [ 83.652796][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input12 [ 83.662471][ T10] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:2> initialized [ 83.889857][ T24] usb 9-1: USB disconnect, device number 2 [ 84.269759][ T7539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.415'. [ 85.100596][ T40] kauditd_printk_skb: 1170 callbacks suppressed [ 85.100608][ T40] audit: type=1400 audit(1766282305.879:3753): avc: denied { write } for pid=7545 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.111847][ T7546] netlink: 132 bytes leftover after parsing attributes in process `syz.3.418'. [ 85.129954][ T40] audit: type=1400 audit(1766282305.909:3754): avc: denied { read write } for pid=7253 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.140597][ T40] audit: type=1400 audit(1766282305.909:3755): avc: denied { read write open } for pid=7253 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.150729][ T40] audit: type=1400 audit(1766282305.909:3756): avc: denied { ioctl } for pid=7253 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.162262][ T40] audit: type=1400 audit(1766282305.929:3757): avc: denied { read write } for pid=5933 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.172037][ T40] audit: type=1400 audit(1766282305.929:3758): avc: denied { read write open } for pid=5933 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.182276][ T40] audit: type=1400 audit(1766282305.929:3759): avc: denied { ioctl } for pid=5933 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.192559][ T40] audit: type=1400 audit(1766282305.939:3760): avc: denied { ioctl } for pid=7543 comm="syz.1.417" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.206685][ T40] audit: type=1400 audit(1766282305.979:3761): avc: denied { read } for pid=7547 comm="syz.4.419" dev="nsfs" ino=4026533330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 85.214931][ T40] audit: type=1400 audit(1766282305.979:3762): avc: denied { read open } for pid=7547 comm="syz.4.419" path="net:[4026533330]" dev="nsfs" ino=4026533330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 85.236318][ T7548] netlink: 'syz.4.419': attribute type 11 has an invalid length. [ 85.239251][ T7548] netlink: 244 bytes leftover after parsing attributes in process `syz.4.419'. [ 85.250081][ T7550] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 85.288427][ T60] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 85.456055][ T60] usb 6-1: unable to get BOS descriptor or descriptor too short [ 85.460739][ T60] usb 6-1: not running at top speed; connect to a high speed hub [ 85.467280][ T60] usb 6-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.475086][ T60] usb 6-1: config 1 interface 0 has no altsetting 0 [ 85.487037][ T60] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.491240][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.494503][ T60] usb 6-1: Product: syz [ 85.495854][ T60] usb 6-1: Manufacturer: syz [ 85.497341][ T60] usb 6-1: SerialNumber: syz [ 85.628337][ T5930] Bluetooth: hci0: command tx timeout [ 85.739875][ T7544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.755928][ T7544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.774331][ T60] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 85.790167][ T60] usb 6-1: USB disconnect, device number 11 [ 86.138333][ T29] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 86.160528][ T7587] overlay: Bad value for 'xino' [ 86.304363][ T29] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 86.309424][ T29] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 86.313135][ T29] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.336013][ T29] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 86.339810][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 86.342420][ T29] usb 9-1: Product: syz [ 86.343779][ T29] usb 9-1: Manufacturer: syz [ 86.345245][ T29] usb 9-1: SerialNumber: syz [ 86.443283][ T7598] syzkaller1: entered promiscuous mode [ 86.445484][ T7598] syzkaller1: entered allmulticast mode [ 86.544835][ T7601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 86.574235][ T29] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 86.707933][ T7605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.431'. [ 86.773483][ T3327] usb 9-1: USB disconnect, device number 3 [ 86.777893][ T3327] usblp0: removed [ 87.108288][ T10] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 87.263323][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.267215][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.272033][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.275627][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.494153][ T10] usb 8-1: usb_control_msg returned -32 [ 87.495991][ T10] usbtmc 8-1:16.0: can't read capabilities [ 87.629507][ T5930] Bluetooth: hci0: Malformed LE Event: 0x1d [ 87.766822][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 87.770859][ T7628] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 88.488292][ T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 88.649159][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 88.660720][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 88.667449][ T24] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 88.671245][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.679677][ T24] usb 9-1: config 0 descriptor?? [ 88.707664][ T7649] 9pnet_virtio: no channels available for device syz [ 88.712260][ T7650] 9pnet_virtio: no channels available for device syz [ 88.717778][ T7649] overlay: Unknown parameter '/' [ 89.123366][ T24] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 89.168269][ T5981] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 89.318231][ T5981] usb 6-1: Using ep0 maxpacket: 32 [ 89.330370][ T5981] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 89.333925][ T5981] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 89.335121][ T10] usb 9-1: USB disconnect, device number 4 [ 89.338433][ T5981] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 32, changing to 9 [ 89.343230][ T5981] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1692, setting to 1024 [ 89.346750][ T5981] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 89.360576][ T5981] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 89.365691][ T5981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.368446][ T5981] usb 6-1: Product: syz [ 89.369804][ T5981] usb 6-1: Manufacturer: syz [ 89.371503][ T5981] usb 6-1: SerialNumber: syz [ 89.378326][ T7654] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 89.382918][ C2] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 89.385996][ T5981] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input14 [ 89.598282][ T5981] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 89.601090][ T5981] (id 0x00) [ 89.688507][ T5981] rc_core: IR keymap rc-imon-pad not found [ 89.690946][ T5981] Registered IR keymap rc-empty [ 89.692953][ T5981] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 89.696290][ T5981] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 89.809354][ T5981] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 89.815181][ T5981] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input15 [ 89.828095][ T5981] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:12> initialized [ 89.864383][ T29] usb 8-1: USB disconnect, device number 6 [ 89.991177][ T5981] usb 6-1: USB disconnect, device number 12 [ 90.108546][ T40] kauditd_printk_skb: 1163 callbacks suppressed [ 90.108556][ T40] audit: type=1400 audit(1766282310.889:4926): avc: denied { read write } for pid=7666 comm="syz.3.450" name="vbi2" dev="devtmpfs" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 90.117822][ T40] audit: type=1400 audit(1766282310.889:4927): avc: denied { read write open } for pid=7666 comm="syz.3.450" path="/dev/vbi2" dev="devtmpfs" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 90.129021][ T40] audit: type=1400 audit(1766282310.889:4928): avc: denied { create } for pid=7666 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.135127][ T40] audit: type=1400 audit(1766282310.889:4929): avc: denied { ioctl } for pid=7666 comm="syz.3.450" path="socket:[20706]" dev="sockfs" ino=20706 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.164898][ T40] audit: type=1400 audit(1766282310.939:4930): avc: denied { read } for pid=7666 comm="syz.3.450" dev="nsfs" ino=4026533025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 90.173298][ T40] audit: type=1400 audit(1766282310.949:4931): avc: denied { read open } for pid=7666 comm="syz.3.450" path="net:[4026533025]" dev="nsfs" ino=4026533025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 90.181228][ T40] audit: type=1400 audit(1766282310.949:4932): avc: denied { create } for pid=7666 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 90.187374][ T40] audit: type=1400 audit(1766282310.949:4933): avc: denied { create } for pid=7666 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.213304][ T40] audit: type=1400 audit(1766282310.989:4934): avc: denied { read write } for pid=5933 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.224831][ T40] audit: type=1400 audit(1766282310.989:4935): avc: denied { read write open } for pid=5933 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.331732][ T7675] 9pnet_virtio: no channels available for device syz [ 90.442162][ T7681] No source specified [ 90.535480][ T7686] 9pnet_virtio: no channels available for device syz [ 90.619899][ T7689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.457'. [ 90.627945][ T7689] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 91.516871][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 91.522267][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 91.527589][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 91.531436][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 91.536105][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 91.540976][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 91.544716][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 91.549230][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 91.553137][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 92.049566][ T7747] 9pnet_virtio: no channels available for device syz [ 92.061082][ T7747] 9pnet_virtio: no channels available for device syz [ 92.284422][ T7747] 9pnet_virtio: no channels available for device syz [ 92.410681][ T7761] 9pnet_virtio: no channels available for device syz [ 92.616483][ T7775] FAULT_INJECTION: forcing a failure. [ 92.616483][ T7775] name failslab, interval 1, probability 0, space 0, times 1 [ 92.621170][ T7775] CPU: 0 UID: 0 PID: 7775 Comm: syz.4.479 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.621189][ T7775] Tainted: [L]=SOFTLOCKUP [ 92.621193][ T7775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.621199][ T7775] Call Trace: [ 92.621203][ T7775] [ 92.621207][ T7775] dump_stack_lvl+0x16c/0x1f0 [ 92.621228][ T7775] should_fail_ex+0x512/0x640 [ 92.621246][ T7775] ? fs_reclaim_acquire+0xae/0x150 [ 92.621262][ T7775] should_failslab+0xc2/0x120 [ 92.621277][ T7775] __kmalloc_noprof+0xeb/0x910 [ 92.621293][ T7775] ? tomoyo_encode2+0x100/0x3e0 [ 92.621310][ T7775] ? tomoyo_encode2+0x100/0x3e0 [ 92.621323][ T7775] tomoyo_encode2+0x100/0x3e0 [ 92.621339][ T7775] tomoyo_encode+0x29/0x50 [ 92.621352][ T7775] tomoyo_realpath_from_path+0x18f/0x6e0 [ 92.621368][ T7775] ? tomoyo_profile+0x47/0x60 [ 92.621385][ T7775] tomoyo_path_number_perm+0x245/0x580 [ 92.621396][ T7775] ? tomoyo_path_number_perm+0x237/0x580 [ 92.621409][ T7775] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 92.621422][ T7775] ? find_held_lock+0x2b/0x80 [ 92.621456][ T7775] ? find_held_lock+0x2b/0x80 [ 92.621471][ T7775] ? hook_file_ioctl_common+0x144/0x410 [ 92.621491][ T7775] ? __fget_files+0x20e/0x3c0 [ 92.621508][ T7775] security_file_ioctl+0x9b/0x240 [ 92.621527][ T7775] __x64_sys_ioctl+0xb7/0x210 [ 92.621540][ T7775] do_syscall_64+0xcd/0xf80 [ 92.621556][ T7775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.621566][ T7775] RIP: 0033:0x7fcabc78f7c9 [ 92.621574][ T7775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.621584][ T7775] RSP: 002b:00007fcabd6fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.621594][ T7775] RAX: ffffffffffffffda RBX: 00007fcabc9e5fa0 RCX: 00007fcabc78f7c9 [ 92.621600][ T7775] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 92.621606][ T7775] RBP: 00007fcabd6fc090 R08: 0000000000000000 R09: 0000000000000000 [ 92.621612][ T7775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.621618][ T7775] R13: 00007fcabc9e6038 R14: 00007fcabc9e5fa0 R15: 00007ffe377b8c68 [ 92.621631][ T7775] [ 92.621641][ T7775] ERROR: Out of memory at tomoyo_realpath_from_path. [ 92.881010][ T7791] openvswitch: netlink: Missing key (keys=40, expected=100) [ 92.911253][ T7793] fuse: Unknown parameter 'fd °ü0]ü)O¼@' [ 92.912878][ T7789] team0 (unregistering): Port device team_slave_0 removed [ 92.918260][ T7789] team0 (unregistering): Port device team_slave_1 removed [ 93.308278][ T5981] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 93.488272][ T5981] usb 9-1: Using ep0 maxpacket: 8 [ 93.500129][ T5981] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 93.504055][ T5981] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.518942][ T5981] pvrusb2: Hardware description: Terratec Grabster AV400 [ 93.521259][ T5981] pvrusb2: ********** [ 93.522565][ T5981] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 93.532196][ T5981] pvrusb2: Important functionality might not be entirely working. [ 93.542285][ T5981] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 93.545744][ T5981] pvrusb2: ********** [ 93.651320][ T7821] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 93.661114][ T7821] overlay: Bad value for 'workdir' [ 93.670665][ T7823] overlay: Bad value for 'workdir' [ 93.731151][ T2486] pvrusb2: Invalid write control endpoint [ 93.816131][ T2486] pvrusb2: Invalid write control endpoint [ 93.826298][ T2486] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 93.830760][ T2486] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 93.833845][ T2486] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 93.837880][ T2486] pvrusb2: Device being rendered inoperable [ 93.842980][ T2486] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 93.845892][ T2486] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 93.851978][ T2486] pvrusb2: Attached sub-driver cx25840 [ 93.854090][ T2486] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 93.856966][ T2486] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 93.934278][ T7796] pvrusb2: Attempted to execute control transfer when device not ok [ 93.974151][ T7833] netlink: 'syz.1.493': attribute type 2 has an invalid length. [ 93.976789][ T7833] netlink: 'syz.1.493': attribute type 1 has an invalid length. [ 94.018401][ T6016] usb 9-1: USB disconnect, device number 5 [ 94.666321][ T7851] FAULT_INJECTION: forcing a failure. [ 94.666321][ T7851] name failslab, interval 1, probability 0, space 0, times 0 [ 94.670697][ T7851] CPU: 2 UID: 0 PID: 7851 Comm: syz.3.497 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.670713][ T7851] Tainted: [L]=SOFTLOCKUP [ 94.670716][ T7851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.670723][ T7851] Call Trace: [ 94.670727][ T7851] [ 94.670731][ T7851] dump_stack_lvl+0x16c/0x1f0 [ 94.670763][ T7851] should_fail_ex+0x512/0x640 [ 94.670783][ T7851] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 94.670796][ T7851] should_failslab+0xc2/0x120 [ 94.670810][ T7851] kmem_cache_alloc_node_noprof+0x86/0x800 [ 94.670820][ T7851] ? copy_process+0x4b5/0x7430 [ 94.670840][ T7851] ? copy_process+0x4b5/0x7430 [ 94.670855][ T7851] copy_process+0x4b5/0x7430 [ 94.670877][ T7851] ? __pfx_copy_process+0x10/0x10 [ 94.670896][ T7851] ? lockdep_init_map_type+0x5c/0x270 [ 94.670910][ T7851] ? lockdep_init_map_type+0x5c/0x270 [ 94.670922][ T7851] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 94.670940][ T7851] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 94.670955][ T7851] vhost_task_create+0x1d2/0x370 [ 94.670971][ T7851] ? __pfx_vhost_task_create+0x10/0x10 [ 94.670988][ T7851] ? __pfx_vhost_task_fn+0x10/0x10 [ 94.671004][ T7851] ? __pfx___mutex_lock+0x10/0x10 [ 94.671021][ T7851] kvm_mmu_post_init_vm+0x1b7/0x380 [ 94.671035][ T7851] kvm_arch_vcpu_ioctl_run+0x66/0x1860 [ 94.671049][ T7851] ? kvm_vcpu_ioctl+0x14f8/0x16d0 [ 94.671067][ T7851] kvm_vcpu_ioctl+0x76d/0x16d0 [ 94.671085][ T7851] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 94.671101][ T7851] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 94.671114][ T7851] ? do_vfs_ioctl+0x128/0x14f0 [ 94.671126][ T7851] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 94.671138][ T7851] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 94.671156][ T7851] ? hook_file_ioctl_common+0x144/0x410 [ 94.671176][ T7851] ? selinux_file_ioctl+0x180/0x270 [ 94.671189][ T7851] ? selinux_file_ioctl+0xb4/0x270 [ 94.671202][ T7851] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 94.671219][ T7851] __x64_sys_ioctl+0x18e/0x210 [ 94.671231][ T7851] do_syscall_64+0xcd/0xf80 [ 94.671246][ T7851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.671256][ T7851] RIP: 0033:0x7f462598f7c9 [ 94.671265][ T7851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.671275][ T7851] RSP: 002b:00007f4626792038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.671285][ T7851] RAX: ffffffffffffffda RBX: 00007f4625be5fa0 RCX: 00007f462598f7c9 [ 94.671291][ T7851] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 94.671297][ T7851] RBP: 00007f4626792090 R08: 0000000000000000 R09: 0000000000000000 [ 94.671302][ T7851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.671308][ T7851] R13: 00007f4625be6038 R14: 00007f4625be5fa0 R15: 00007ffd44ade998 [ 94.671322][ T7851] [ 95.051556][ T7864] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 95.170479][ T40] kauditd_printk_skb: 1960 callbacks suppressed [ 95.170494][ T40] audit: type=1400 audit(1766282315.949:6896): avc: denied { read write } for pid=7253 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.186420][ T40] audit: type=1400 audit(1766282315.949:6897): avc: denied { read write open } for pid=7253 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.196196][ T40] audit: type=1400 audit(1766282315.949:6898): avc: denied { ioctl } for pid=7253 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.220679][ T40] audit: type=1400 audit(1766282315.999:6899): avc: denied { read } for pid=7866 comm="syz.4.502" name="0:0:0:0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.231116][ T40] audit: type=1400 audit(1766282315.999:6900): avc: denied { read open } for pid=7866 comm="syz.4.502" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.241459][ T40] audit: type=1400 audit(1766282315.999:6901): avc: denied { create } for pid=7866 comm="syz.4.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.250196][ T40] audit: type=1400 audit(1766282315.999:6902): avc: denied { write } for pid=7866 comm="syz.4.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.259308][ T40] audit: type=1400 audit(1766282315.999:6903): avc: denied { write } for pid=7866 comm="syz.4.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.267736][ T40] audit: type=1400 audit(1766282316.009:6904): avc: denied { create } for pid=7866 comm="syz.4.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.276117][ T40] audit: type=1400 audit(1766282316.019:6905): avc: denied { write } for pid=7866 comm="syz.4.502" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.720852][ T7877] __nla_validate_parse: 62 callbacks suppressed [ 95.720862][ T7877] netlink: 20 bytes leftover after parsing attributes in process `syz.4.505'. [ 95.933495][ T7884] netlink: 'syz.1.508': attribute type 1 has an invalid length. [ 95.935874][ T7884] netlink: 'syz.1.508': attribute type 2 has an invalid length. [ 95.948135][ T7884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.508'. [ 96.029042][ T5930] Bluetooth: hci1: unexpected event for opcode 0x0c46 [ 96.052611][ T7888] netlink: 'syz.3.510': attribute type 64 has an invalid length. [ 96.055089][ T7888] netlink: 'syz.3.510': attribute type 4 has an invalid length. [ 96.057596][ T7888] netlink: 152 bytes leftover after parsing attributes in process `syz.3.510'. [ 96.066329][ T5930] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 96.079592][ T7891] Cannot find add_set index 65532 as target [ 96.088573][ T7891] 9pnet_virtio: no channels available for device syz [ 96.253961][ T7893] netlink: 'syz.4.512': attribute type 1 has an invalid length. [ 96.256223][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.512'. [ 96.262288][ T7893] netlink: 'syz.4.512': attribute type 1 has an invalid length. [ 96.264799][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.512'. [ 96.490845][ T7913] netlink: 'syz.1.517': attribute type 8 has an invalid length. [ 96.494043][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.517'. [ 96.504237][ T7913] bond0: entered promiscuous mode [ 96.506391][ T7913] bond_slave_0: entered promiscuous mode [ 96.510127][ T7913] bond_slave_1: entered promiscuous mode [ 96.513297][ T7913] bond0: left promiscuous mode [ 96.515347][ T7913] bond_slave_0: left promiscuous mode [ 96.517760][ T7913] bond_slave_1: left promiscuous mode [ 96.716819][ T7923] dvmrp0: entered allmulticast mode [ 96.908843][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.522'. [ 97.198708][ T7935] syzkaller1: entered promiscuous mode [ 97.200507][ T7935] syzkaller1: entered allmulticast mode [ 97.876080][ T7962] 9pnet_virtio: no channels available for device syz [ 97.920983][ T5941] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.925683][ T5941] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.934651][ T5941] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.942939][ T5941] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.946753][ T5941] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.024249][ T7962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.533'. [ 98.332991][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.341463][ T7963] chnl_net:caif_netlink_parms(): no params data found [ 98.400812][ T7963] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.403289][ T7963] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.406161][ T7963] bridge_slave_0: entered allmulticast mode [ 98.409273][ T7963] bridge_slave_0: entered promiscuous mode [ 98.413828][ T7963] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.416249][ T7963] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.420278][ T7963] bridge_slave_1: entered allmulticast mode [ 98.422916][ T7963] bridge_slave_1: entered promiscuous mode [ 98.436968][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.481230][ T7963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.487567][ T7963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.531133][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.556002][ T7963] team0: Port device team_slave_0 added [ 98.561112][ T7963] team0: Port device team_slave_1 added [ 98.576275][ T7963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.578539][ T7963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.587494][ T7963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.596259][ T7963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.599042][ T7963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.608945][ T7963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.641619][ T7963] hsr_slave_0: entered promiscuous mode [ 98.644769][ T7963] hsr_slave_1: entered promiscuous mode [ 98.684681][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.118899][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.125625][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.131995][ T46] bond0 (unregistering): Released all slaves [ 99.152546][ T46] bond1 (unregistering): Released all slaves [ 99.170221][ T46] bond2 (unregistering): Released all slaves [ 99.174123][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.178083][ T5941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.182136][ T5941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.186054][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.194164][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.246616][ T46] bond3 (unregistering): Released all slaves [ 99.252932][ T7963] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.274957][ T7963] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.283908][ T7963] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.295097][ T7963] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.378288][ T10] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 99.550956][ T7963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.578918][ T10] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 99.582217][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.584737][ T10] usb 9-1: Product: syz [ 99.586032][ T10] usb 9-1: Manufacturer: syz [ 99.587640][ T10] usb 9-1: SerialNumber: syz [ 99.610671][ T10] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 99.615419][ T46] hsr_slave_0: left promiscuous mode [ 99.629240][ T46] hsr_slave_1: left promiscuous mode [ 99.631238][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.634031][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.639286][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.641640][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.662195][ T46] veth1_macvtap: left promiscuous mode [ 99.664023][ T46] veth0_macvtap: left promiscuous mode [ 99.665848][ T46] veth1_vlan: left promiscuous mode [ 99.667625][ T46] veth0_vlan: left promiscuous mode [ 99.669010][ T6015] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 99.676659][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.548'. [ 99.745801][ T8034] netlink: 52 bytes leftover after parsing attributes in process `syz.1.548'. [ 99.964992][ T46] team0 (unregistering): Port device team_slave_1 removed [ 99.986439][ T46] team0 (unregistering): Port device team_slave_0 removed [ 100.038382][ T5941] Bluetooth: hci4: command tx timeout [ 100.182388][ T8034] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.185556][ T8034] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.197819][ T8018] chnl_net:caif_netlink_parms(): no params data found [ 100.223660][ T40] kauditd_printk_skb: 1342 callbacks suppressed [ 100.223681][ T40] audit: type=1400 audit(1766282320.999:8248): avc: denied { read write } for pid=5942 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.237890][ T40] audit: type=1400 audit(1766282320.999:8249): avc: denied { read write open } for pid=5942 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.248118][ T40] audit: type=1400 audit(1766282320.999:8250): avc: denied { ioctl } for pid=5942 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.259313][ T7963] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.310260][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.312451][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.313559][ T40] audit: type=1400 audit(1766282321.089:8251): avc: denied { create } for pid=8016 comm="syz.4.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.323624][ T8044] SET target dimension over the limit! [ 100.328232][ T40] audit: type=1400 audit(1766282321.089:8252): avc: denied { create } for pid=8042 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.336311][ T40] audit: type=1400 audit(1766282321.099:8253): avc: denied { setopt } for pid=8016 comm="syz.4.547" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.346269][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.348905][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.350246][ T40] audit: type=1400 audit(1766282321.099:8254): avc: denied { create } for pid=8042 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.361450][ T40] audit: type=1400 audit(1766282321.099:8255): avc: denied { write } for pid=8042 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.369855][ T40] audit: type=1400 audit(1766282321.099:8256): avc: denied { write } for pid=8016 comm="syz.4.547" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.377766][ T40] audit: type=1400 audit(1766282321.099:8257): avc: denied { read } for pid=8042 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.405513][ T8018] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.407758][ T8018] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.410068][ T8018] bridge_slave_0: entered allmulticast mode [ 100.412594][ T8018] bridge_slave_0: entered promiscuous mode [ 100.417333][ T8018] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.420004][ T8018] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.422336][ T8018] bridge_slave_1: entered allmulticast mode [ 100.436798][ T8018] bridge_slave_1: entered promiscuous mode [ 100.516942][ T8018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.534150][ T8018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.596989][ T8018] team0: Port device team_slave_0 added [ 100.610756][ T8018] team0: Port device team_slave_1 added [ 100.642919][ T8018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.645259][ T8018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.657978][ T8018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.667173][ T8018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.669543][ T8018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.677665][ T8018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.684261][ T46] IPVS: stop unused estimator thread 0... [ 100.726810][ T8018] hsr_slave_0: entered promiscuous mode [ 100.730082][ T8018] hsr_slave_1: entered promiscuous mode [ 100.732174][ T8018] debugfs: 'hsr0' already exists in 'hsr' [ 100.733961][ T8018] Cannot create hsr debugfs directory [ 100.758604][ T6015] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 100.761960][ T6015] ath9k_htc: Failed to initialize the device [ 100.787856][ T6015] usb 9-1: ath9k_htc: USB layer deinitialized [ 100.901096][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.956948][ T8018] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 100.965314][ T8018] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 100.984356][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.001214][ T8018] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 101.007895][ T8018] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 101.062206][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.091970][ T8018] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.094477][ T8018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.096872][ T8018] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.099227][ T8018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.140906][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.160332][ T168] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.164494][ T168] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.193778][ T7963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.229124][ T5941] Bluetooth: hci1: command tx timeout [ 101.243975][ T46] bridge_slave_1: left allmulticast mode [ 101.245901][ T46] bridge_slave_1: left promiscuous mode [ 101.248896][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.265590][ T46] bridge_slave_0: left allmulticast mode [ 101.269689][ T46] bridge_slave_0: left promiscuous mode [ 101.273776][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.389931][ T5965] IPVS: starting estimator thread 0... [ 101.471657][ T46] dvmrp0 (unregistering): left allmulticast mode [ 101.488328][ T8089] IPVS: using max 43 ests per chain, 103200 per kthread [ 101.644391][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.651366][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.654871][ T46] bond0 (unregistering): Released all slaves [ 101.709961][ T46] bond1 (unregistering): Released all slaves [ 101.722779][ T46] bond2 (unregistering): Released all slaves [ 101.733913][ T46] bond3 (unregistering): Released all slaves [ 101.745679][ T46] bond4 (unregistering): Released all slaves [ 101.759365][ T46] bond5 (unregistering): Released all slaves [ 101.770639][ T46] bond6 (unregistering): Released all slaves [ 101.776562][ T46] bond7 (unregistering): Released all slaves [ 101.783787][ T46] bond8 (unregistering): Released all slaves [ 101.791069][ T46] bond9 (unregistering): Released all slaves [ 101.798594][ T46] bond10 (unregistering): Released all slaves [ 101.806183][ T46] bond11 (unregistering): Released all slaves [ 101.815862][ T46] bond12 (unregistering): Released all slaves [ 101.822146][ T46] bond13 (unregistering): Released all slaves [ 101.829587][ T46] bond14 (unregistering): Released all slaves [ 101.836850][ T46] bond15 (unregistering): Released all slaves [ 101.844335][ T46] bond16 (unregistering): Released all slaves [ 101.851801][ T46] bond17 (unregistering): Released all slaves [ 101.865309][ T46] bond18 (unregistering): Released all slaves [ 101.871378][ T46] bond19 (unregistering): Released all slaves [ 101.877476][ T46] bond20 (unregistering): Released all slaves [ 101.887895][ T46] bond21 (unregistering): Released all slaves [ 101.894839][ T46] bond22 (unregistering): Released all slaves [ 101.901363][ T46] bond23 (unregistering): Released all slaves [ 101.908052][ T46] bond24 (unregistering): Released all slaves [ 101.914648][ T46] bond25 (unregistering): Released all slaves [ 101.921795][ T46] bond26 (unregistering): Released all slaves [ 101.928129][ T46] bond27 (unregistering): Released all slaves [ 101.937028][ T46] bond28 (unregistering): Released all slaves [ 101.944709][ T46] bond29 (unregistering): Released all slaves [ 101.954116][ T46] bond30 (unregistering): Released all slaves [ 101.963115][ T46] bond31 (unregistering): Released all slaves [ 101.974527][ T46] bond32 (unregistering): Released all slaves [ 101.988691][ T46] bond33 (unregistering): Released all slaves [ 101.998522][ T46] bond34 (unregistering): Released all slaves [ 102.011378][ T46] bond35 (unregistering): Released all slaves [ 102.019016][ T46] bond36 (unregistering): Released all slaves [ 102.025031][ T46] bond37 (unregistering): Released all slaves [ 102.031217][ T46] bond38 (unregistering): Released all slaves [ 102.037146][ T46] bond39 (unregistering): Released all slaves [ 102.046430][ T46] bond40 (unregistering): Released all slaves [ 102.052536][ T46] bond41 (unregistering): Released all slaves [ 102.058687][ T46] bond42 (unregistering): Released all slaves [ 102.064503][ T46] bond43 (unregistering): Released all slaves [ 102.070468][ T46] bond44 (unregistering): Released all slaves [ 102.077277][ T46] bond45 (unregistering): Released all slaves [ 102.083297][ T46] bond46 (unregistering): Released all slaves [ 102.089386][ T46] bond47 (unregistering): Released all slaves [ 102.095341][ T46] bond48 (unregistering): Released all slaves [ 102.101334][ T46] bond49 (unregistering): Released all slaves [ 102.108283][ T5941] Bluetooth: hci4: command tx timeout [ 102.108329][ T46] bond50 (unregistering): Released all slaves [ 102.117368][ T46] bond51 (unregistering): Released all slaves [ 102.143912][ T10] usb 9-1: USB disconnect, device number 6 [ 102.206632][ T8018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.264069][ T8018] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.293410][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.296203][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.320690][ T8099] Bluetooth: MGMT ver 1.23 [ 102.323405][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.325582][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.673306][ T46] hsr_slave_0: left promiscuous mode [ 102.706274][ T46] hsr_slave_1: left promiscuous mode [ 102.714186][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.716593][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.744532][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.746876][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.797420][ T46] veth1_macvtap: left promiscuous mode [ 102.802193][ T46] veth1_vlan: left promiscuous mode [ 102.805017][ T46] veth0_vlan: left promiscuous mode [ 103.117059][ T46] team0 (unregistering): Port device team_slave_1 removed [ 103.137268][ T46] team0 (unregistering): Port device team_slave_0 removed [ 103.310001][ T5941] Bluetooth: hci1: command tx timeout [ 103.441463][ T7963] veth0_vlan: entered promiscuous mode [ 103.470112][ T7963] veth1_vlan: entered promiscuous mode [ 103.533853][ T8018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.556139][ T7963] veth0_macvtap: entered promiscuous mode [ 103.570349][ T7963] veth1_macvtap: entered promiscuous mode [ 103.590510][ T7963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.604092][ T7963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.616702][ T1253] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.627582][ T1253] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.634898][ T1253] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.640181][ T1253] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.773389][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.783595][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.806355][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.815031][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.188458][ T5941] Bluetooth: hci4: command tx timeout [ 104.211459][ T8018] veth0_vlan: entered promiscuous mode [ 104.257738][ T8018] veth1_vlan: entered promiscuous mode [ 104.313553][ T8018] veth0_macvtap: entered promiscuous mode [ 104.321838][ T8018] veth1_macvtap: entered promiscuous mode [ 104.346101][ T8018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.367155][ T8018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.377209][ T82] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.381900][ T82] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.385084][ T82] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.387818][ T82] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.503303][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.508690][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.543332][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.545943][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.558071][ T8173] IPVS: length: 157 != 8 [ 104.771652][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'. [ 104.785681][ T8186] vlan2: entered promiscuous mode [ 104.787372][ T8186] bridge0: entered promiscuous mode [ 104.843749][ T8184] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 104.847616][ T8184] SELinux: failed to load policy [ 104.910087][ T8191] input input17: cannot allocate more than FF_MAX_EFFECTS effects [ 104.987481][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.578'. [ 105.003327][ T8182] netlink: 'syz.6.546': attribute type 10 has an invalid length. [ 105.076158][ T8182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.081543][ T8182] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 105.230968][ T40] kauditd_printk_skb: 2446 callbacks suppressed [ 105.230983][ T40] audit: type=1400 audit(1766282326.009:10671): avc: denied { bpf } for pid=8199 comm="syz.4.580" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.249826][ T40] audit: type=1400 audit(1766282326.009:10672): avc: denied { perfmon } for pid=8199 comm="syz.4.580" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.256301][ T40] audit: type=1400 audit(1766282326.009:10673): avc: denied { bpf } for pid=8199 comm="syz.4.580" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.263154][ T40] audit: type=1400 audit(1766282326.009:10674): avc: denied { perfmon } for pid=8199 comm="syz.4.580" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.271984][ T40] audit: type=1400 audit(1766282326.009:10675): avc: denied { bpf } for pid=8199 comm="syz.4.580" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.283365][ T40] audit: type=1400 audit(1766282326.009:10676): avc: denied { perfmon } for pid=8199 comm="syz.4.580" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.290998][ T40] audit: type=1400 audit(1766282326.019:10677): avc: denied { map_create } for pid=8199 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 105.296861][ T40] audit: type=1400 audit(1766282326.019:10678): avc: denied { map_read map_write } for pid=8199 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 105.303754][ T40] audit: type=1400 audit(1766282326.019:10679): avc: denied { map_create } for pid=8199 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 105.310835][ T40] audit: type=1400 audit(1766282326.019:10680): avc: denied { map_read map_write } for pid=8199 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 105.389383][ T5941] Bluetooth: hci1: command tx timeout [ 105.393603][ T8209] netlink: 'syz.1.582': attribute type 12 has an invalid length. [ 105.448603][ T8204] cgroup: fork rejected by pids controller in /syz5 [ 105.846828][ T8259] IPVS: set_ctl: invalid protocol: 40 0.0.0.0:0 [ 105.925516][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.589'. [ 105.935477][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.589'. [ 106.052235][ T8272] netlink: 'syz.1.591': attribute type 1 has an invalid length. [ 106.067120][ T8272] 8021q: adding VLAN 0 to HW filter on device bond4 [ 106.177114][ T8280] xt_cluster: node mask cannot exceed total number of nodes [ 106.185033][ T8280] loop2: detected capacity change from 0 to 7 [ 106.188911][ T8280] Dev loop2: unable to read RDB block 7 [ 106.191422][ T8280] loop2: AHDI p1 p2 p3 [ 106.192800][ T8280] loop2: partition table partially beyond EOD, truncated [ 106.195576][ T8280] loop2: p1 start 1601398130 is beyond EOD, truncated [ 106.197715][ T8280] loop2: p2 start 1702059890 is beyond EOD, truncated [ 106.268506][ T5941] Bluetooth: hci4: command tx timeout [ 106.318285][ T6016] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 106.478299][ T6016] usb 6-1: Using ep0 maxpacket: 32 [ 106.486834][ T6016] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 106.494035][ T6016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.502013][ T6016] usb 6-1: config 0 descriptor?? [ 106.512811][ T6016] as10x_usb: device has been detected [ 106.515752][ T6016] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 106.526843][ T8285] netlink: 'syz.5.595': attribute type 10 has an invalid length. [ 106.529981][ T8285] netlink: 40 bytes leftover after parsing attributes in process `syz.5.595'. [ 106.533591][ T8285] dummy0: entered promiscuous mode [ 106.536206][ T8285] bridge0: port 3(dummy0) entered blocking state [ 106.538726][ T6016] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 106.542769][ T8285] bridge0: port 3(dummy0) entered disabled state [ 106.544866][ T8285] dummy0: entered allmulticast mode [ 106.548365][ T8285] bridge0: port 3(dummy0) entered blocking state [ 106.550397][ T8285] bridge0: port 3(dummy0) entered forwarding state [ 106.563885][ T6016] as10x_usb: error during firmware upload part1 [ 106.566081][ T6016] Registered device nBox DVB-T Dongle [ 106.717864][ T8271] vlan0: entered promiscuous mode [ 106.721751][ T8271] bond4: entered promiscuous mode [ 106.734730][ T24] usb 6-1: USB disconnect, device number 13 [ 106.773914][ T8293] netlink: 'syz.5.596': attribute type 14 has an invalid length. [ 106.779529][ T24] Unregistered device nBox DVB-T Dongle [ 106.784790][ T24] as10x_usb: device has been disconnected [ 107.099998][ T8309] Malformed UNC in devname [ 107.099998][ T8309] [ 107.108977][ T8309] CIFS: VFS: Malformed UNC in devname [ 107.380880][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.606'. [ 107.422147][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.606'. [ 107.468575][ T5941] Bluetooth: hci1: command tx timeout [ 108.073580][ T8349] netlink: 28 bytes leftover after parsing attributes in process `syz.6.611'. [ 108.312729][ T8364] fuse: Bad value for 'group_id' [ 108.314911][ T8364] fuse: Bad value for 'group_id' [ 108.372687][ T8366] macvtap1: entered promiscuous mode [ 108.375013][ T8366] macvtap1: entered allmulticast mode [ 108.516517][ T8375] netlink: 92 bytes leftover after parsing attributes in process `syz.6.620'. [ 108.663222][ T8387] devpts: Unknown parameter 'max&00000000000000000000' [ 108.718922][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.622'. [ 108.749638][ T8391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.927070][ T8407] hfs: can't find a HFS filesystem on dev sr0 [ 109.239915][ T8422] /dev/nullb0: Can't open blockdev [ 109.372820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.377822][ T8416] team0: Port device team_slave_0 removed [ 109.378978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.425417][ T8421] bond5: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 109.436764][ T8421] bond5 (unregistering): Released all slaves [ 109.468563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 109.788351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.968656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.978556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.047950][ T8446] netlink: 'syz.6.640': attribute type 21 has an invalid length. [ 110.102006][ T8446] overlayfs: failed to get inode (-116) [ 110.104925][ T8446] overlayfs: failed to get inode (-116) [ 110.238874][ T8451] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 110.244531][ T40] kauditd_printk_skb: 1986 callbacks suppressed [ 110.244550][ T40] audit: type=1400 audit(1766282331.009:12667): avc: denied { connect } for pid=8449 comm="syz.6.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 110.288459][ T40] audit: type=1400 audit(1766282330.999:12668): avc: denied { read write } for pid=7253 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.296640][ T40] audit: type=1400 audit(1766282331.009:12669): avc: denied { name_connect } for pid=8449 comm="syz.6.642" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 110.318434][ T40] audit: type=1400 audit(1766282331.009:12670): avc: denied { read write open } for pid=7253 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.343172][ T40] audit: type=1400 audit(1766282331.009:12671): avc: denied { ioctl } for pid=7253 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.360102][ T40] audit: type=1400 audit(1766282331.009:12672): avc: denied { write } for pid=8449 comm="syz.6.642" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.374244][ T40] audit: type=1400 audit(1766282331.019:12673): avc: denied { write open } for pid=8449 comm="syz.6.642" path="/dev/pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.393298][ T40] audit: type=1400 audit(1766282331.039:12674): avc: denied { read write } for pid=7963 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.438256][ T40] audit: type=1400 audit(1766282331.039:12675): avc: denied { read write open } for pid=7963 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.452974][ T40] audit: type=1400 audit(1766282331.039:12676): avc: denied { ioctl } for pid=7963 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.638342][ T5965] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 110.804091][ T5965] usb 9-1: config 15 has an invalid interface number: 141 but max is 0 [ 110.806812][ T5965] usb 9-1: config 15 has no interface number 0 [ 110.809140][ T5965] usb 9-1: config 15 interface 141 altsetting 5 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 110.813073][ T5965] usb 9-1: config 15 interface 141 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 110.816630][ T5965] usb 9-1: config 15 interface 141 altsetting 5 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 110.825308][ T5965] usb 9-1: config 15 interface 141 altsetting 5 endpoint 0xE has invalid maxpacket 1024, setting to 1023 [ 110.835256][ T5965] usb 9-1: config 15 interface 141 has no altsetting 0 [ 110.847873][ T5965] usb 9-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=54.eb [ 110.851560][ T5965] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.854263][ T5965] usb 9-1: Product: ㊠[ 110.855620][ T5965] usb 9-1: Manufacturer: ä¶“é˜î´¦è¹…림㭮ì¶ÅŒæ™Šî©§à¨¶è“뺠çቋè‘Ⓡ뼲蛑篨臶㡚ꪼ弨ྂ覕落醑é…í„™ïµ±é³Šî”›ãª’å„»â³…é•¨é“Œèž€ä¿Œë‹­å€¢ã£§æ€ [ 110.861281][ T5965] usb 9-1: SerialNumber: syz [ 111.139530][ T5965] usb 9-1: USB disconnect, device number 7 [ 111.214219][ T8492] ALSA: seq fatal error: cannot create timer (-19) [ 111.447948][ T8501] __nla_validate_parse: 2 callbacks suppressed [ 111.447959][ T8501] netlink: 12 bytes leftover after parsing attributes in process `syz.6.657'. [ 111.459074][ T8501] netlink: 12 bytes leftover after parsing attributes in process `syz.6.657'. [ 111.715632][ T8512] bond0: entered promiscuous mode [ 111.724746][ T8512] bond_slave_0: entered promiscuous mode [ 111.726733][ T8512] bond_slave_1: entered promiscuous mode [ 111.733340][ T8512] batadv0: entered promiscuous mode [ 111.739597][ T8512] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 111.747688][ T8512] bond0: left promiscuous mode [ 111.751709][ T8512] bond_slave_0: left promiscuous mode [ 111.754704][ T8512] bond_slave_1: left promiscuous mode [ 111.762616][ T8512] batadv0: left promiscuous mode [ 112.105398][ T8518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8518 comm=syz.4.662 [ 112.146060][ T8518] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.148675][ T8518] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.180686][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.663'. [ 112.184541][ T8523] netlink: 20 bytes leftover after parsing attributes in process `syz.5.663'. [ 112.220889][ T8518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.227199][ T8518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.301727][ T1145] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.306064][ T1145] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.312560][ T1145] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.315831][ T1145] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.504046][ T8531] overlayfs: failed to resolve './file1': -2 [ 113.081850][ T1253] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xd [ 113.389612][ T5965] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 113.538281][ T5965] usb 9-1: Using ep0 maxpacket: 8 [ 113.553596][ T5965] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.560620][ T5965] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.564644][ T5965] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.569783][ T5965] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.575096][ T5965] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.578261][ T5965] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.800848][ T5965] usb 9-1: GET_CAPABILITIES returned 0 [ 113.803385][ T5965] usbtmc 9-1:16.0: can't read capabilities [ 114.007767][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.012032][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.015946][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.019810][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.028008][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.031889][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.035529][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.039161][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.043094][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.052258][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.056088][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.059998][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.063876][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.067760][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.075975][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.079956][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 114.176571][ T8577] netlink: 'syz.1.677': attribute type 1 has an invalid length. [ 114.270609][ T8579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.677'. [ 116.003635][ T8545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.030082][ T5965] usb 9-1: USB disconnect, device number 8 [ 116.047281][ T40] kauditd_printk_skb: 564 callbacks suppressed [ 116.047319][ T40] audit: type=1400 audit(1766282336.819:13241): avc: denied { read write } for pid=5942 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.058544][ T40] audit: type=1400 audit(1766282336.819:13242): avc: denied { read write } for pid=7963 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.077095][ T40] audit: type=1400 audit(1766282336.819:13243): avc: denied { read write open } for pid=5942 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.096978][ T40] audit: type=1400 audit(1766282336.819:13244): avc: denied { read write open } for pid=7963 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.107065][ T40] audit: type=1400 audit(1766282336.819:13245): avc: denied { ioctl } for pid=5942 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.117367][ T40] audit: type=1400 audit(1766282336.819:13246): avc: denied { ioctl } for pid=7963 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.126319][ T40] audit: type=1400 audit(1766282336.849:13247): avc: denied { read write } for pid=8018 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.134258][ T40] audit: type=1400 audit(1766282336.849:13248): avc: denied { read write open } for pid=8018 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.142300][ T40] audit: type=1400 audit(1766282336.849:13249): avc: denied { ioctl } for pid=8018 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.150313][ T40] audit: type=1400 audit(1766282336.879:13250): avc: denied { read write } for pid=7253 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.187946][ T8592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.201926][ T8592] bond0: (slave rose0): Enslaving as an active interface with an up link [ 116.224380][ T8598] netlink: 'syz.4.682': attribute type 6 has an invalid length. [ 116.268751][ T8603] dns_resolver: Unsupported server list version (0) [ 116.562220][ T8618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.688'. [ 116.614650][ T8622] netlink: 28 bytes leftover after parsing attributes in process `syz.6.689'. [ 117.138974][ T8655] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 117.141669][ T8655] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 117.163675][ T8655] vhci_hcd vhci_hcd.0: Device attached [ 117.262900][ T8661] overlayfs: failed to resolve './file1': -2 [ 117.448294][ T6015] usb 40-1: SetAddress Request (2) to port 0 [ 117.454874][ T6015] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 117.560251][ T8672] netlink: 'syz.5.703': attribute type 10 has an invalid length. [ 117.569738][ T8672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.574262][ T8672] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 117.958313][ T8656] vhci_hcd: connection reset by peer [ 117.960975][ T1145] vhci_hcd vhci_hcd.1: stop threads [ 117.962659][ T1145] vhci_hcd vhci_hcd.1: release socket [ 117.965456][ T1145] vhci_hcd vhci_hcd.1: disconnect device [ 118.057432][ T8692] tmpfs: Bad value for 'mpol' [ 118.160168][ T8695] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.311873][ T8695] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.362772][ T8706] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.365291][ T8706] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.373845][ T5726] IPVS: starting estimator thread 0... [ 118.374508][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.6.712'. [ 118.380274][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.6.712'. [ 118.420049][ T8695] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.458306][ T8708] IPVS: using max 26 ests per chain, 62400 per kthread [ 118.597147][ T8695] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.691445][ T168] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.700190][ T168] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.707567][ T168] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.731402][ T168] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.025419][ T8733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.719'. [ 119.187661][ T8747] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 119.358281][ T5726] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 119.508270][ T5726] usb 6-1: Using ep0 maxpacket: 16 [ 119.518090][ T5726] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 119.523572][ T5726] usb 6-1: config 0 has no interface number 0 [ 119.527862][ T5726] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 119.533849][ T5726] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 119.543033][ T5726] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 119.546632][ T5726] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 119.551510][ T5726] usb 6-1: Product: syz [ 119.553919][ T5726] usb 6-1: SerialNumber: syz [ 119.569775][ T5726] usb 6-1: config 0 descriptor?? [ 119.583861][ T5726] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 119.590737][ T5726] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input18 [ 119.683853][ T8727] orangefs_mount: mount request failed with -4 [ 119.787557][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 119.861897][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.6.728'. [ 119.865177][ T8764] hsr_slave_0: left promiscuous mode [ 119.867489][ T8764] hsr_slave_1: left promiscuous mode [ 120.042396][ T5726] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 120.095994][ T8770] netlink: 32 bytes leftover after parsing attributes in process `syz.4.730'. [ 120.101127][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.730'. [ 120.158168][ T8777] netlink: 12 bytes leftover after parsing attributes in process `syz.6.731'. [ 120.169733][ T8777] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.177346][ T8777] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.180680][ T8777] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 120.184713][ T8777] bond1: (slave vcan1): Error -95 calling set_mac_address [ 120.202839][ T5726] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 120.206289][ T5726] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 120.209778][ T5726] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 120.212726][ T5726] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 120.228520][ T5726] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 120.239417][ T5726] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 120.242830][ T5726] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 120.246189][ T5726] usb 10-1: Product: syz [ 120.248041][ T5726] usb 10-1: Manufacturer: syz [ 120.262029][ T5726] cdc_wdm 10-1:1.0: skipping garbage [ 120.263797][ T5726] cdc_wdm 10-1:1.0: skipping garbage [ 120.269502][ T5726] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 120.274233][ T5726] cdc_wdm 10-1:1.0: Unknown control protocol [ 120.365731][ T8783] overlay: filesystem on ./bus not supported as upperdir [ 120.371290][ T8783] overlayfs: failed lookup in lower (newroot/108, name='bus', err=-40): overlapping layers [ 120.375878][ T8783] overlayfs: failed to resolve './bus': -40 [ 120.433202][ T8783] overlayfs: failed lookup in lower (newroot/108, name='bus', err=-40): overlapping layers [ 120.437607][ T8784] overlayfs: failed lookup in lower (newroot/108, name='bus', err=-40): overlapping layers [ 120.462796][ T3327] usb 10-1: USB disconnect, device number 2 [ 120.661921][ T8799] tmpfs: Unknown parameter '0xffffffffffffffff0x0000000000000000' [ 120.677709][ T826] hid-generic 0001:0004:0001.0005: unknown main item tag 0x1 [ 120.681876][ T826] hid-generic 0001:0004:0001.0005: reserved main item tag 0xd [ 120.685040][ T826] hid-generic 0001:0004:0001.0005: unknown main item tag 0x6 [ 120.688145][ T826] hid-generic 0001:0004:0001.0005: unknown main item tag 0x5 [ 120.693356][ T826] hid-generic 0001:0004:0001.0005: item 0 1 0 11 parsing failed [ 120.698447][ T826] hid-generic 0001:0004:0001.0005: probe with driver hid-generic failed with error -22 [ 120.869881][ T8806] sit0: entered promiscuous mode [ 120.874382][ T8806] netlink: 'syz.6.739': attribute type 1 has an invalid length. [ 120.876963][ T8806] netlink: 1 bytes leftover after parsing attributes in process `syz.6.739'. [ 121.054211][ T40] kauditd_printk_skb: 2440 callbacks suppressed [ 121.054281][ T40] audit: type=1400 audit(1766282341.829:15691): avc: denied { create } for pid=8813 comm="syz.5.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.063333][ T40] audit: type=1400 audit(1766282341.829:15692): avc: denied { search } for pid=8812 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.070929][ T40] audit: type=1400 audit(1766282341.829:15693): avc: denied { search } for pid=8812 comm="rm" name="dhcpcd" dev="tmpfs" ino=1897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.077794][ T40] audit: type=1400 audit(1766282341.829:15694): avc: denied { search } for pid=8812 comm="rm" name="hook-state" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.085947][ T40] audit: type=1400 audit(1766282341.839:15695): avc: denied { write } for pid=8813 comm="syz.5.740" path="socket:[29018]" dev="sockfs" ino=29018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.094954][ T40] audit: type=1400 audit(1766282341.839:15696): avc: denied { write } for pid=8813 comm="syz.5.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.101432][ T40] audit: type=1400 audit(1766282341.839:15697): avc: denied { write } for pid=8813 comm="syz.5.740" path="socket:[29018]" dev="sockfs" ino=29018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.109395][ T40] audit: type=1400 audit(1766282341.839:15698): avc: denied { create } for pid=8813 comm="syz.5.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.115672][ T40] audit: type=1400 audit(1766282341.839:15699): avc: denied { write } for pid=8813 comm="syz.5.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.123265][ T40] audit: type=1400 audit(1766282341.869:15700): avc: denied { read write } for pid=7963 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.172769][ T8820] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 121.863976][ T8840] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 121.869075][ T8840] overlayfs: failed to set xattr on upper [ 121.871573][ T8840] overlayfs: ...falling back to redirect_dir=nofollow. [ 121.874474][ T8840] overlayfs: ...falling back to index=off. [ 121.877071][ T8840] overlayfs: ...falling back to uuid=null. [ 121.880164][ T8840] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 122.016908][ T8845] xfs: Unknown parameter 'discardÿ' [ 122.143325][ T24] usb 6-1: USB disconnect, device number 14 [ 122.165105][ T24] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 122.462731][ T8872] overlay: ./file0 is not a directory [ 122.518314][ T6015] usb 40-1: device descriptor read/8, error -110 [ 122.677439][ T8892] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.918673][ T6015] usb usb40-port1: attempt power cycle [ 123.025694][ T8914] netlink: 184 bytes leftover after parsing attributes in process `syz.4.767'. [ 123.038968][ T8914] xt_socket: unknown flags 0xd0 [ 123.047982][ T8908] netlink: 184 bytes leftover after parsing attributes in process `syz.4.767'. [ 123.058308][ T8908] xt_socket: unknown flags 0xd0 [ 123.491394][ T8941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=8941 comm=syz.4.774 [ 123.510303][ T6015] usb usb40-port1: unable to enumerate USB device [ 123.672911][ T8957] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.778'. [ 123.770396][ T8960] comedi comedi1: dac02: I/O port conflict (0x2,8) [ 124.085778][ T8982] netlink: 348 bytes leftover after parsing attributes in process `syz.1.785'. [ 124.091084][ T8982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.785'. [ 124.152917][ T8986] cgroup: release_agent respecified [ 124.156378][ T8986] binfmt_misc: register: failed to install interpreter file ./file0 [ 124.247137][ T8989] NILFS (nbd1): device size too small [ 124.369364][ T8999] netlink: 'syz.4.789': attribute type 11 has an invalid length. [ 124.613250][ T9008] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 124.619783][ T9011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9011 comm=syz.1.794 [ 124.623861][ T9011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9011 comm=syz.1.794 [ 124.763662][ T9015] block nbd5: shutting down sockets [ 124.941468][ T9032] cgroup: Unknown subsys name 'pcr' [ 125.378073][ T9051] trusted_key: encrypted_key: insufficient parameters specified [ 125.812550][ T9072] xt_TPROXY: Can be used only with -p tcp or -p udp [ 125.852955][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.810'. [ 125.868503][ T9072] : entered promiscuous mode [ 125.880820][ T9076] netlink: 'syz.5.811': attribute type 4 has an invalid length. [ 125.888892][ T9075] netlink: 'syz.5.811': attribute type 4 has an invalid length. [ 125.923763][ T9075] netlink: 'syz.5.811': attribute type 4 has an invalid length. [ 126.059933][ T40] kauditd_printk_skb: 3824 callbacks suppressed [ 126.059944][ T40] audit: type=1400 audit(1766282346.839:19525): avc: denied { mount } for pid=9079 comm="syz.6.812" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 126.084742][ T40] audit: type=1400 audit(1766282346.859:19526): avc: denied { map_create } for pid=9089 comm="syz.4.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 126.092407][ T40] audit: type=1400 audit(1766282346.859:19527): avc: denied { read write } for pid=5942 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.100581][ T40] audit: type=1400 audit(1766282346.859:19528): avc: denied { perfmon } for pid=9089 comm="syz.4.815" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 126.107130][ T40] audit: type=1400 audit(1766282346.859:19530): avc: denied { map_read map_write } for pid=9089 comm="syz.4.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 126.113642][ T40] audit: type=1400 audit(1766282346.859:19529): avc: denied { read write open } for pid=5942 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.121455][ T40] audit: type=1400 audit(1766282346.869:19531): avc: denied { ioctl } for pid=5942 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.131889][ T40] audit: type=1400 audit(1766282346.869:19532): avc: denied { prog_load } for pid=9089 comm="syz.4.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 126.137698][ T40] audit: type=1400 audit(1766282346.869:19533): avc: denied { bpf } for pid=9089 comm="syz.4.815" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 126.165379][ T40] audit: type=1400 audit(1766282346.869:19534): avc: denied { perfmon } for pid=9089 comm="syz.4.815" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 126.296007][ T9104] program syz.1.816 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.304832][ T9103] program syz.1.816 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.332474][ T9105] netlink: 'syz.6.818': attribute type 2 has an invalid length. [ 126.335296][ T9106] netlink: 'syz.6.818': attribute type 2 has an invalid length. [ 126.339796][ T9105] !: entered promiscuous mode [ 126.348822][ T9106] !: left promiscuous mode [ 126.400210][ T9108] netlink: 'syz.5.819': attribute type 1 has an invalid length. [ 126.467518][ T9108] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.544685][ T9108] veth3: entered promiscuous mode [ 126.558818][ T9108] bond3: (slave veth3): Enslaving as an active interface with a down link [ 126.636169][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.819'. [ 126.639891][ T9108] netlink: 12 bytes leftover after parsing attributes in process `syz.5.819'. [ 126.643368][ T9116] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 126.662638][ T9128] netlink: 'syz.1.824': attribute type 8 has an invalid length. [ 126.689329][ T9132] netlink: 44 bytes leftover after parsing attributes in process `syz.5.819'. [ 126.709614][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.823'. [ 126.710282][ T9116] bond4 (unregistering): Released all slaves [ 126.737714][ T9130] erspan0: entered promiscuous mode [ 127.039376][ T9153] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 127.042302][ T9153] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 127.079015][ T9153] vhci_hcd vhci_hcd.0: Device attached [ 127.091923][ T9154] vhci_hcd: connection closed [ 127.092580][ T1253] vhci_hcd vhci_hcd.1: stop threads [ 127.096682][ T1253] vhci_hcd vhci_hcd.1: release socket [ 127.099578][ T1253] vhci_hcd vhci_hcd.1: disconnect device [ 127.118283][ T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 127.187205][ T9158] netlink: zone id is out of range [ 127.193608][ T9158] netlink: zone id is out of range [ 127.195197][ T9158] netlink: zone id is out of range [ 127.203339][ T9158] netlink: zone id is out of range [ 127.204927][ T9158] netlink: zone id is out of range [ 127.206531][ T9158] netlink: zone id is out of range [ 127.210578][ T9158] netlink: zone id is out of range [ 127.212150][ T9158] netlink: zone id is out of range [ 127.213680][ T9158] netlink: zone id is out of range [ 127.215225][ T9158] netlink: zone id is out of range [ 127.228469][ T9158] trusted_key: syz.4.833 sent an empty control message without MSG_MORE. [ 127.279695][ T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 127.282958][ T24] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 127.287829][ T24] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.314043][ T24] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 127.319150][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.322206][ T24] usb 10-1: Product: syz [ 127.323544][ T24] usb 10-1: Manufacturer: syz [ 127.325006][ T24] usb 10-1: SerialNumber: syz [ 127.367611][ T24] hub 10-1:1.0: bad descriptor, ignoring hub [ 127.370533][ T24] hub 10-1:1.0: probe with driver hub failed with error -5 [ 127.373808][ T9168] netlink: 'syz.6.834': attribute type 10 has an invalid length. [ 127.381824][ T9168] bridge_slave_1: left allmulticast mode [ 127.384192][ T9168] bridge_slave_1: left promiscuous mode [ 127.386669][ T9168] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.395378][ T9168] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 127.403715][ T9168] netlink: 'syz.6.834': attribute type 10 has an invalid length. [ 127.589749][ T24] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 127.998069][ T9187] .`: renamed from bond0 (while UP) [ 128.054738][ T9184] __nla_validate_parse: 2 callbacks suppressed [ 128.054749][ T9184] netlink: 64 bytes leftover after parsing attributes in process `syz.5.829'. [ 128.181631][ T9195] bond0: entered promiscuous mode [ 128.183812][ T9195] bond0: entered allmulticast mode [ 128.186251][ T9195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.250373][ T9144] usb 10-1: reset high-speed USB device number 3 using dummy_hcd [ 128.380833][ T9208] netlink: 24 bytes leftover after parsing attributes in process `syz.6.842'. [ 128.388357][ T9144] usb 10-1: device descriptor read/64, error -71 [ 128.650134][ T9144] usb 10-1: reset high-speed USB device number 3 using dummy_hcd [ 128.788389][ T9144] usb 10-1: device descriptor read/64, error -71 [ 129.039433][ T9144] usb 10-1: reset high-speed USB device number 3 using dummy_hcd [ 129.072641][ T9144] usb 10-1: device descriptor read/8, error -71 [ 129.219899][ T9233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.848'. [ 129.221840][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.847'. [ 129.333332][ T9144] usb 10-1: reset high-speed USB device number 3 using dummy_hcd [ 129.360470][ T9144] usb 10-1: device descriptor read/8, error -71 [ 129.478427][ T5965] usb 10-1: USB disconnect, device number 3 [ 129.499305][ T5965] usblp0: removed [ 129.581690][ T9250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.852'. [ 129.658312][ T5965] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 129.692906][ T9252] netlink: 32 bytes leftover after parsing attributes in process `syz.4.854'. [ 129.798269][ T5965] usb 10-1: device descriptor read/64, error -71 [ 129.926449][ T9265] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 130.275373][ T9284] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 130.509517][ T9289] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 130.568977][ T9297] comedi: No check for data length of config insn id 1341262751 is implemented [ 130.572484][ T9297] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 130.576093][ T9297] comedi: Assuming n=15 is correct [ 130.863789][ T9320] netlink: 4 bytes leftover after parsing attributes in process `syz.5.869'. [ 130.917480][ T5941] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 131.070887][ T40] kauditd_printk_skb: 3415 callbacks suppressed [ 131.070899][ T40] audit: type=1400 audit(1766282351.849:22951): avc: denied { create } for pid=9326 comm="syz.1.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 131.072175][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'. [ 131.072954][ T40] audit: type=1400 audit(1766282351.849:22952): avc: denied { write } for pid=9326 comm="syz.1.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 131.073937][ T40] audit: type=1400 audit(1766282351.839:22950): avc: denied { ioctl } for pid=7253 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.147650][ T40] audit: type=1400 audit(1766282351.859:22953): avc: denied { execute } for pid=9326 comm="syz.1.873" path="/213/pids.current" dev="tmpfs" ino=1171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 131.155961][ T40] audit: type=1400 audit(1766282351.859:22954): avc: denied { write } for pid=9326 comm="syz.1.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.178986][ T40] audit: type=1400 audit(1766282351.879:22955): avc: denied { create } for pid=9325 comm="syz.6.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 131.185437][ T40] audit: type=1400 audit(1766282351.949:22956): avc: denied { read write } for pid=8018 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.214644][ T40] audit: type=1400 audit(1766282351.949:22957): avc: denied { read write open } for pid=8018 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.224153][ T40] audit: type=1400 audit(1766282351.949:22958): avc: denied { ioctl } for pid=8018 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.258326][ T40] audit: type=1400 audit(1766282351.969:22959): avc: denied { read write } for pid=7963 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.509285][ T9350] validate_nla: 66 callbacks suppressed [ 131.509297][ T9350] netlink: 'syz.6.878': attribute type 4 has an invalid length. [ 132.083806][ T9367] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 132.087978][ T9367] overlayfs: overlapping lowerdir path [ 132.168512][ T9372] syzkaller0: entered promiscuous mode [ 132.170914][ T9372] syzkaller0: entered allmulticast mode [ 132.951470][ T9418] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.898'. [ 133.121590][ T9430] netlink: 4 bytes leftover after parsing attributes in process `syz.6.899'. [ 133.179703][ T9434] netlink: 'syz.6.903': attribute type 10 has an invalid length. [ 133.204190][ T9434] net_ratelimit: 3 callbacks suppressed [ 133.204201][ T9434] wlan1: mtu less than device minimum [ 133.207860][ T9434] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 133.379966][ T9440] program syz.4.904 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.384314][ T9440] netlink: 6 bytes leftover after parsing attributes in process `syz.4.904'. [ 133.387160][ T9440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.468312][ T8881] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 133.498491][ T9446] netlink: 'syz.5.907': attribute type 30 has an invalid length. [ 133.528040][ T9446] bond4: option arp_missed_max: invalid value (0) [ 133.531020][ T9446] bond4: option arp_missed_max: allowed values 1 - 255 [ 133.536675][ T9446] bond4 (unregistering): Released all slaves [ 133.557894][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.908'. [ 133.623254][ T8881] usb 11-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 133.626609][ T8881] usb 11-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 133.640231][ T8881] usb 11-1: config 220 interface 0 has no altsetting 0 [ 133.647850][ T8881] usb 11-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 133.652621][ T8881] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.655048][ T8881] usb 11-1: Product: syz [ 133.656469][ T8881] usb 11-1: Manufacturer: syz [ 133.658022][ T8881] usb 11-1: SerialNumber: syz [ 133.822751][ T9457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.911'. [ 133.898506][ T8881] uvcvideo 11-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 133.900941][ T8881] uvcvideo 11-1:220.0: No valid video chain found. [ 133.904319][ T8881] usb 11-1: USB disconnect, device number 2 [ 133.922998][ T6195] udevd[6195]: setting owner of /dev/bus/usb/011/002 to uid=0, gid=0 failed: No such file or directory [ 134.168488][ T9466] Invalid logical block size (1) [ 134.299054][ T9533] SELinux: failed to load policy [ 134.390305][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.917'. [ 134.390342][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.917'. [ 134.390349][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.917'. [ 134.390355][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.917'. [ 134.514107][ T9758] netlink: 20 bytes leftover after parsing attributes in process `syz.6.918'. [ 134.645288][ T5941] Bluetooth: Unexpected continuation frame (len 62) [ 134.812883][ T9888] netlink: 80 bytes leftover after parsing attributes in process `syz.5.923'. [ 134.830263][ T9888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9888 comm=syz.5.923 [ 134.957489][ T9895] xt_l2tp: v2 doesn't support IP mode [ 135.015612][ T9893] block device autoloading is deprecated and will be removed. [ 135.303099][ T9912] syz_tun: entered allmulticast mode [ 135.310554][ T9911] syz_tun: left allmulticast mode [ 135.318514][ T9919] overlay: ./file0 is not a directory [ 135.351428][ T9921] loop4: detected capacity change from 0 to 524288000 [ 135.424135][ T8881] hid (null): invalid report_size 58537 [ 135.426232][ T8881] hid (null): unknown global tag 0xd [ 135.428668][ T8881] hid (null): unknown global tag 0xc [ 135.432667][ T8881] hid (null): unknown global tag 0xe4 [ 135.434504][ T8881] hid (null): unknown global tag 0x52 [ 135.436248][ T8881] hid (null): global environment stack underflow [ 135.446747][ T8881] hid (null): invalid report_size 222345300 [ 135.450354][ T8881] hid (null): unknown global tag 0xf4 [ 135.452178][ T8881] hid (null): invalid report_size 34522 [ 135.454472][ T8881] hid (null): report_id 1483988276 is invalid [ 135.456815][ T8881] hid (null): global environment stack underflow [ 135.475631][ T8881] hid (null): unknown global tag 0x56 [ 135.478019][ T8881] hid (null): unknown global tag 0xe [ 135.482969][ T8881] hid (null): report_id 2864353419 is invalid [ 135.485562][ T8881] hid (null): global environment stack underflow [ 135.493112][ T8881] hid (null): invalid report_count 703512408 [ 135.497916][ T8881] hid-generic BD41:B7F614B1:9D708363.0006: unknown main item tag 0x0 [ 135.501963][ T9923] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 135.506256][ T8881] hid-generic BD41:B7F614B1:9D708363.0006: unknown main item tag 0x2 [ 135.509633][ T8881] hid-generic BD41:B7F614B1:9D708363.0006: unknown main item tag 0x4 [ 135.514443][ T8881] hid-generic BD41:B7F614B1:9D708363.0006: unexpected long global item [ 135.518431][ T8881] hid-generic BD41:B7F614B1:9D708363.0006: probe with driver hid-generic failed with error -22 [ 135.668988][ T9932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.690119][ T9932] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.772430][ T9932] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.823514][ T9932] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.893955][ T9932] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.013203][ T9944] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 136.095449][ T40] kauditd_printk_skb: 1410 callbacks suppressed [ 136.095460][ T40] audit: type=1400 audit(1766282356.869:24370): avc: denied { create } for pid=9945 comm="syz.1.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 136.106783][ T40] audit: type=1400 audit(1766282356.879:24371): avc: denied { prog_load } for pid=9945 comm="syz.1.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 136.114445][ T40] audit: type=1400 audit(1766282356.879:24372): avc: denied { bpf } for pid=9945 comm="syz.1.943" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 136.123229][ T40] audit: type=1400 audit(1766282356.879:24373): avc: denied { perfmon } for pid=9945 comm="syz.1.943" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 136.130215][ T9946] netlink: 'syz.1.943': attribute type 1 has an invalid length. [ 136.131692][ T40] audit: type=1400 audit(1766282356.879:24374): avc: denied { perfmon } for pid=9945 comm="syz.1.943" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 136.138390][ T6016] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 136.141565][ T40] audit: type=1400 audit(1766282356.879:24375): avc: denied { perfmon } for pid=9945 comm="syz.1.943" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 136.150115][ T40] audit: type=1400 audit(1766282356.889:24376): avc: denied { perfmon } for pid=9945 comm="syz.1.943" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 136.156629][ T40] audit: type=1400 audit(1766282356.889:24377): avc: denied { bpf } for pid=9945 comm="syz.1.943" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 136.163893][ T40] audit: type=1400 audit(1766282356.889:24378): avc: denied { bpf } for pid=9945 comm="syz.1.943" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 136.172524][ T40] audit: type=1400 audit(1766282356.889:24379): avc: denied { prog_run } for pid=9945 comm="syz.1.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 136.316817][ T6016] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 136.320360][ T6016] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.323081][ T6016] usb 9-1: Product: syz [ 136.324899][ T6016] usb 9-1: Manufacturer: syz [ 136.326848][ T6016] usb 9-1: SerialNumber: syz [ 136.549473][ T6016] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 136.558387][ T6016] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 136.561663][ T6016] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 136.570263][ T6016] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 136.584799][ T6016] usb 9-1: USB disconnect, device number 9 [ 136.661030][ T9959] lo speed is unknown, defaulting to 1000 [ 136.665425][ T9959] lo speed is unknown, defaulting to 1000 [ 136.671343][ T9959] lo speed is unknown, defaulting to 1000 [ 136.677019][ T9961] bridge_slave_1: default FDB implementation only supports local addresses [ 136.693693][ T62] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.698880][ T62] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.702271][ T62] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.705956][ T62] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.719480][ T62] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.730812][ T62] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.742225][ T62] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.750678][ T62] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.781880][ T826] lo speed is unknown, defaulting to 1000 [ 136.784415][ T9959] infiniband syz0: set active [ 136.786677][ T9959] infiniband syz0: added lo [ 136.822364][ T9959] RDS/IB: syz0: added [ 136.824566][ T9959] smc: adding ib device syz0 with port count 1 [ 136.825881][ T9969] netlink: 'syz.5.950': attribute type 10 has an invalid length. [ 136.827223][ T9959] smc: ib device syz0 port 1 has no pnetid [ 136.852422][ T9969] veth0_vlan: left promiscuous mode [ 136.856012][ T9969] veth0_vlan: entered promiscuous mode [ 136.860486][ T9969] team0: Device veth0_vlan failed to register rx_handler [ 136.876767][ T826] lo speed is unknown, defaulting to 1000 [ 136.881334][ T9959] lo speed is unknown, defaulting to 1000 [ 137.002802][ T9959] lo speed is unknown, defaulting to 1000 [ 137.063537][ T9976] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9976 comm=syz.5.953 [ 137.119222][ T9959] lo speed is unknown, defaulting to 1000 [ 137.306019][ T9991] fuse: Bad value for 'user_id' [ 137.308135][ T9991] fuse: Bad value for 'user_id' [ 137.308929][ T9959] lo speed is unknown, defaulting to 1000 [ 137.712071][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.715861][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.738285][ T5981] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 137.868702][ T5981] usb 9-1: device descriptor read/64, error -71 [ 137.913399][T10023] cgroup2: Unknown parameter 'euid' [ 138.128302][ T5981] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 138.258244][ T5981] usb 9-1: device descriptor read/64, error -71 [ 138.368421][ T5981] usb usb9-port1: attempt power cycle [ 138.718267][ T5981] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 138.739685][ T5981] usb 9-1: device descriptor read/8, error -71 [ 138.823934][T10028] __nla_validate_parse: 13 callbacks suppressed [ 138.823945][T10028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.970'. [ 138.978665][ T5981] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 138.999692][ T5981] usb 9-1: device descriptor read/8, error -71 [ 139.118362][ T5981] usb usb9-port1: unable to enumerate USB device [ 141.101332][ T40] kauditd_printk_skb: 354 callbacks suppressed [ 141.101349][ T40] audit: type=1400 audit(1766282361.879:24734): avc: denied { module_request } for pid=10035 comm="syz.4.972" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 141.181395][ T40] audit: type=1400 audit(1766282361.959:24735): avc: denied { sys_module } for pid=10035 comm="syz.4.972" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 141.190568][ T40] audit: type=1400 audit(1766282361.959:24736): avc: denied { module_request } for pid=10035 comm="syz.4.972" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 152.662088][ T40] audit: type=1400 audit(1766282373.439:24737): avc: denied { execute } for pid=10044 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 152.670298][ T40] audit: type=1400 audit(1766282373.439:24738): avc: denied { execute_no_trans } for pid=10044 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 152.678464][ T40] audit: type=1400 audit(1766282373.439:24739): avc: denied { execute } for pid=10044 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 152.691121][ T1417] ================================================================== [ 152.693713][ T1417] BUG: KASAN: slab-use-after-free in handle_tx+0x5a5/0x630 [ 152.696072][ T1417] Read of size 8 at addr ffff888034b2a020 by task aoe_tx0/1417 [ 152.696080][ T40] audit: type=1400 audit(1766282373.469:24740): avc: denied { execmem } for pid=10044 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 152.700418][ T1417] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 152.700431][ T1417] CPU: 0 UID: 0 PID: 1417 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.700446][ T1417] Tainted: [L]=SOFTLOCKUP [ 152.700450][ T1417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 152.700456][ T1417] Call Trace: [ 152.700460][ T1417] [ 152.700465][ T1417] dump_stack_lvl+0x116/0x1f0 [ 152.700489][ T1417] print_report+0xcd/0x630 [ 152.700503][ T1417] ? __virt_addr_valid+0x81/0x610 [ 152.700513][ T1417] ? __phys_addr+0xe8/0x180 [ 152.700522][ T1417] ? handle_tx+0x5a5/0x630 [ 152.700537][ T1417] kasan_report+0xe0/0x110 [ 152.700550][ T1417] ? handle_tx+0x5a5/0x630 [ 152.700565][ T1417] handle_tx+0x5a5/0x630 [ 152.700581][ T1417] dev_hard_start_xmit+0x97/0x6e0 [ 152.700599][ T1417] __dev_queue_xmit+0x6d7/0x4650 [ 152.700616][ T1417] ? rcu_is_watching+0x12/0xc0 [ 152.700625][ T1417] ? finish_task_switch.isra.0+0x207/0xbd0 [ 152.700642][ T1417] ? __pfx___dev_queue_xmit+0x10/0x10 [ 152.700658][ T1417] ? __lock_acquire+0x436/0x2890 [ 152.700670][ T1417] ? ref_tracker_free+0x37c/0x830 [ 152.700688][ T1417] ? do_raw_spin_lock+0x12c/0x2b0 [ 152.700702][ T1417] ? find_held_lock+0x2b/0x80 [ 152.700717][ T1417] ? skb_dequeue+0x126/0x180 [ 152.700730][ T1417] ? find_held_lock+0x2b/0x80 [ 152.700745][ T1417] ? rcu_is_watching+0x12/0xc0 [ 152.700755][ T1417] tx+0xcc/0x190 [ 152.700768][ T1417] ? __pfx_tx+0x10/0x10 [ 152.700779][ T1417] kthread+0x1e4/0x3e0 [ 152.700791][ T1417] ? find_held_lock+0x2b/0x80 [ 152.700805][ T1417] ? __pfx_kthread+0x10/0x10 [ 152.700816][ T1417] ? __pfx_default_wake_function+0x10/0x10 [ 152.700832][ T1417] ? lockdep_hardirqs_on+0x7c/0x110 [ 152.700845][ T1417] ? __kthread_parkme+0x19e/0x250 [ 152.700855][ T1417] ? __pfx_kthread+0x10/0x10 [ 152.700866][ T1417] kthread+0x3c5/0x780 [ 152.700877][ T1417] ? __pfx_kthread+0x10/0x10 [ 152.700889][ T1417] ? rcu_is_watching+0x12/0xc0 [ 152.700898][ T1417] ? __pfx_kthread+0x10/0x10 [ 152.700910][ T1417] ret_from_fork+0x983/0xb10 [ 152.700921][ T1417] ? __pfx_ret_from_fork+0x10/0x10 [ 152.700932][ T1417] ? __switch_to+0x7af/0x10d0 [ 152.700945][ T1417] ? __pfx_kthread+0x10/0x10 [ 152.700961][ T1417] ret_from_fork_asm+0x1a/0x30 [ 152.700979][ T1417] [ 152.700983][ T1417] [ 152.700985][ T1417] Allocated by task 8920: [ 152.700990][ T1417] kasan_save_stack+0x33/0x60 [ 152.701002][ T1417] kasan_save_track+0x14/0x30 [ 152.701013][ T1417] __kasan_kmalloc+0xaa/0xb0 [ 152.701023][ T1417] alloc_tty_struct+0x96/0x8c0 [ 152.701034][ T1417] tty_init_dev.part.0+0x1e/0x500 [ 152.701046][ T1417] tty_open+0xa4f/0xf90 [ 152.701056][ T1417] chrdev_open+0x234/0x6a0 [ 152.701070][ T1417] do_dentry_open+0x748/0x1590 [ 152.701082][ T1417] vfs_open+0x82/0x3f0 [ 152.701089][ T1417] path_openat+0x2078/0x3140 [ 152.701102][ T1417] do_filp_open+0x20b/0x470 [ 152.701115][ T1417] do_sys_openat2+0x121/0x290 [ 152.701123][ T1417] __x64_sys_openat+0x174/0x210 [ 152.701132][ T1417] do_syscall_64+0xcd/0xf80 [ 152.701143][ T1417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.701153][ T1417] [ 152.701155][ T1417] Freed by task 24: [ 152.701160][ T1417] kasan_save_stack+0x33/0x60 [ 152.701170][ T1417] kasan_save_track+0x14/0x30 [ 152.701181][ T1417] kasan_save_free_info+0x3b/0x60 [ 152.701196][ T1417] __kasan_slab_free+0x5f/0x80 [ 152.701208][ T1417] kfree+0x2f8/0x6e0 [ 152.701216][ T1417] process_one_work+0x9ba/0x1b20 [ 152.701228][ T1417] worker_thread+0x6c8/0xf10 [ 152.701240][ T1417] kthread+0x3c5/0x780 [ 152.701250][ T1417] ret_from_fork+0x983/0xb10 [ 152.701260][ T1417] ret_from_fork_asm+0x1a/0x30 [ 152.701274][ T1417] [ 152.701277][ T1417] Last potentially related work creation: [ 152.701280][ T1417] kasan_save_stack+0x33/0x60 [ 152.701290][ T1417] kasan_record_aux_stack+0xa7/0xc0 [ 152.707467][ T40] audit: type=1400 audit(1766282373.479:24741): avc: denied { write } for pid=5863 comm="syz-executor" path="pipe:[1774]" dev="pipefs" ino=1774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 152.708248][ T1417] insert_work+0x36/0x230 [ 152.708262][ T1417] __queue_work+0x94f/0x10e0 [ 152.708274][ T1417] queue_work_on+0x1a4/0x1f0 [ 152.708286][ T1417] release_tty+0x4de/0x5d0 [ 152.708295][ T1417] tty_release_struct+0xb7/0xe0 [ 152.708305][ T1417] tty_release+0xe2d/0x1470 [ 152.708314][ T1417] __fput+0x402/0xb70 [ 152.708322][ T1417] task_work_run+0x150/0x240 [ 152.715572][ T40] audit: type=1400 audit(1766282373.479:24742): avc: denied { write } for pid=5863 comm="syz-executor" path="pipe:[1774]" dev="pipefs" ino=1774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 152.716916][ T1417] do_exit+0x87f/0x2bd0 [ 152.718092][ T40] audit: type=1400 audit(1766282373.479:24743): avc: denied { write } for pid=5863 comm="syz-executor" path="pipe:[1774]" dev="pipefs" ino=1774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 152.719052][ T1417] do_group_exit+0xd3/0x2a0 [ 152.719064][ T1417] get_signal+0x2671/0x26d0 [ 152.719078][ T1417] arch_do_signal_or_restart+0x8f/0x7e0 [ 152.719092][ T1417] exit_to_user_mode_loop+0x8c/0x540 [ 152.719107][ T1417] do_syscall_64+0x4ee/0xf80 [ 152.719119][ T1417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.719129][ T1417] [ 152.719131][ T1417] The buggy address belongs to the object at ffff888034b2a000 [ 152.719131][ T1417] which belongs to the cache kmalloc-cg-2k of size 2048 [ 152.719140][ T1417] The buggy address is located 32 bytes inside of [ 152.719140][ T1417] freed 2048-byte region [ffff888034b2a000, ffff888034b2a800) [ 152.719150][ T1417] [ 152.719152][ T1417] The buggy address belongs to the physical page: [ 152.719157][ T1417] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34b28 [ 152.719166][ T1417] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 152.889625][ T1417] memcg:ffff888036061101 [ 152.891016][ T1417] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 152.893412][ T1417] page_type: f5(slab) [ 152.894712][ T1417] raw: 00fff00000000040 ffff88801b44c140 dead000000000100 dead000000000122 [ 152.897467][ T1417] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888036061101 [ 152.900224][ T1417] head: 00fff00000000040 ffff88801b44c140 dead000000000100 dead000000000122 [ 152.902975][ T1417] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888036061101 [ 152.905726][ T1417] head: 00fff00000000003 ffffea0000d2ca01 00000000ffffffff 00000000ffffffff [ 152.908537][ T1417] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 152.911309][ T1417] page dumped because: kasan: bad access detected [ 152.913381][ T1417] page_owner tracks the page as allocated [ 152.915210][ T1417] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8018, tgid 8018 (syz-executor), ts 100721046573, free_ts 98644178826 [ 152.921926][ T1417] post_alloc_hook+0x1af/0x220 [ 152.923497][ T1417] get_page_from_freelist+0xd0b/0x31a0 [ 152.925250][ T1417] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 152.927194][ T1417] alloc_pages_mpol+0x1fb/0x550 [ 152.928774][ T1417] new_slab+0x2c3/0x430 [ 152.930144][ T1417] ___slab_alloc+0xe18/0x1c90 [ 152.931681][ T1417] __slab_alloc.constprop.0+0x63/0x110 [ 152.933445][ T1417] __kmalloc_node_track_caller_noprof+0x4d6/0x930 [ 152.935511][ T1417] kmemdup_noprof+0x29/0x60 [ 152.937000][ T1417] neigh_sysctl_register+0xb2/0x670 [ 152.938683][ T1417] addrconf_sysctl_register+0xb9/0x1f0 [ 152.940464][ T1417] ipv6_add_dev+0xb31/0x15f0 [ 152.941968][ T1417] addrconf_notify+0x53e/0x19f0 [ 152.943556][ T1417] notifier_call_chain+0xbc/0x3e0 [ 152.945189][ T1417] call_netdevice_notifiers_info+0xbe/0x110 [ 152.947133][ T1417] register_netdevice+0x1792/0x21d0 [ 152.948822][ T1417] page last free pid 7963 tgid 7963 stack trace: [ 152.950858][ T1417] __free_frozen_pages+0x7df/0x1170 [ 152.952554][ T1417] __put_partials+0x130/0x170 [ 152.954083][ T1417] qlist_free_all+0x4c/0xf0 [ 152.955567][ T1417] kasan_quarantine_reduce+0x195/0x1e0 [ 152.957332][ T1417] __kasan_slab_alloc+0x69/0x90 [ 152.958914][ T1417] __kmalloc_cache_noprof+0x282/0x800 [ 152.960673][ T1417] __netdev_adjacent_dev_insert+0x228/0xc10 [ 152.962582][ T1417] __netdev_upper_dev_link+0x3d7/0x7f0 [ 152.964357][ T1417] netdev_master_upper_dev_link+0x9f/0xd0 [ 152.966193][ T1417] hsr_add_port+0x5d2/0xc00 [ 152.967731][ T1417] hsr_dev_finalize+0x7a6/0xd00 [ 152.969312][ T1417] hsr_newlink+0x4ab/0xab0 [ 152.970775][ T1417] rtnl_newlink+0xc19/0x1f50 [ 152.972285][ T1417] rtnetlink_rcv_msg+0x95e/0xe90 [ 152.973883][ T1417] netlink_rcv_skb+0x158/0x420 [ 152.975445][ T1417] netlink_unicast+0x5aa/0x870 [ 152.977016][ T1417] [ 152.977807][ T1417] Memory state around the buggy address: [ 152.979622][ T1417] ffff888034b29f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 152.982191][ T1417] ffff888034b29f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 152.984755][ T1417] >ffff888034b2a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.987345][ T1417] ^ [ 152.989004][ T1417] ffff888034b2a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.991588][ T1417] ffff888034b2a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.994154][ T1417] ================================================================== [ 152.996830][ T1417] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 152.999169][ T1417] CPU: 0 UID: 0 PID: 1417 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.002545][ T1417] Tainted: [L]=SOFTLOCKUP [ 153.003967][ T1417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 153.007425][ T1417] Call Trace: [ 153.008531][ T1417] [ 153.009510][ T1417] dump_stack_lvl+0x3d/0x1f0 [ 153.011040][ T1417] vpanic+0x640/0x6f0 [ 153.012352][ T1417] panic+0xca/0xd0 [ 153.013580][ T1417] ? __pfx_panic+0x10/0x10 [ 153.015163][ T1417] ? check_panic_on_warn+0x1f/0xb0 [ 153.016871][ T1417] check_panic_on_warn+0xab/0xb0 [ 153.018582][ T1417] end_report+0x107/0x160 [ 153.020050][ T1417] kasan_report+0xee/0x110 [ 153.021531][ T1417] ? handle_tx+0x5a5/0x630 [ 153.023014][ T1417] handle_tx+0x5a5/0x630 [ 153.024411][ T1417] dev_hard_start_xmit+0x97/0x6e0 [ 153.026093][ T1417] __dev_queue_xmit+0x6d7/0x4650 [ 153.027775][ T1417] ? rcu_is_watching+0x12/0xc0 [ 153.029372][ T1417] ? finish_task_switch.isra.0+0x207/0xbd0 [ 153.031318][ T1417] ? __pfx___dev_queue_xmit+0x10/0x10 [ 153.033068][ T1417] ? __lock_acquire+0x436/0x2890 [ 153.034682][ T1417] ? ref_tracker_free+0x37c/0x830 [ 153.036344][ T1417] ? do_raw_spin_lock+0x12c/0x2b0 [ 153.037992][ T1417] ? find_held_lock+0x2b/0x80 [ 153.039544][ T1417] ? skb_dequeue+0x126/0x180 [ 153.041065][ T1417] ? find_held_lock+0x2b/0x80 [ 153.042607][ T1417] ? rcu_is_watching+0x12/0xc0 [ 153.044181][ T1417] tx+0xcc/0x190 [ 153.045369][ T1417] ? __pfx_tx+0x10/0x10 [ 153.046742][ T1417] kthread+0x1e4/0x3e0 [ 153.048122][ T1417] ? find_held_lock+0x2b/0x80 [ 153.049657][ T1417] ? __pfx_kthread+0x10/0x10 [ 153.051190][ T1417] ? __pfx_default_wake_function+0x10/0x10 [ 153.053086][ T1417] ? lockdep_hardirqs_on+0x7c/0x110 [ 153.054778][ T1417] ? __kthread_parkme+0x19e/0x250 [ 153.056426][ T1417] ? __pfx_kthread+0x10/0x10 [ 153.057958][ T1417] kthread+0x3c5/0x780 [ 153.059309][ T1417] ? __pfx_kthread+0x10/0x10 [ 153.060827][ T1417] ? rcu_is_watching+0x12/0xc0 [ 153.062388][ T1417] ? __pfx_kthread+0x10/0x10 [ 153.063905][ T1417] ret_from_fork+0x983/0xb10 [ 153.065630][ T1417] ? __pfx_ret_from_fork+0x10/0x10 [ 153.067391][ T1417] ? __switch_to+0x7af/0x10d0 [ 153.068934][ T1417] ? __pfx_kthread+0x10/0x10 [ 153.070458][ T1417] ret_from_fork_asm+0x1a/0x30 [ 153.072046][ T1417] [ 153.073671][ T1417] Kernel Offset: disabled [ 153.075105][ T1417] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:59:33 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85326625 RDI=ffffffff9aeedc00 RBP=ffffffff9aeedbc0 RSP=ffffc90006dbf3d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000034 R14=ffffffff9aeedbc0 R15=ffffffff853265c0 RIP=ffffffff8532664f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff19ffb42f8 CR3=0000000012bf9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=000000000000001f Opmask02=00000000ffff7fdf Opmask03=0000000001041000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555fd5a1c900 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f66a6ff1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f66a6ff1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff00ffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373262ca6d02a13 7373262cd21656c3 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737273737326 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555fd5a13df0 0000555fd5a1c900 0000555fd5a27770 0000555fd5a0a480 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555fd5a155d0 0000555fd5a0bf50 0000000000000061 0000000000000034 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9f0c1ad3c0cd9c2a e674a8c2f5a66986 e7e067bab7277222 077fb702589b88ea ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 09e8d86baa0d1378 3bcd36094c070d30 315b1b1b923cfd3c 758b4ba663990152 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 19f37e8f98f3675b 0d249a669b956d07 9b04e7c61a0e8f87 e090081a6d3b353b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9b088b074c329b53 e5c67fffe738d00d 0ef74b09092919f9 52c74f21ade3a23d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=00000000000000c6 RCX=ffffffff819d0e81 RDX=ffff88801eada4c0 RSI=ffffffff819d0e6f RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000078fb20 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=ffff88801eadaff0 R12=1ffff920000f1f66 R13=0000000000000200 R14=ffff88802a6ca4c0 R15=ffffc9000078fbe8 RIP=ffffffff819d0e78 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555578d35c8 CR3=00000000252bd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561bc8d8f600 0000561bc8d8f600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0b8d1200 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d7a7973223d6d6d 6f63203434303031 3d6469702020726f 66207d2065747563 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74653a725f746365 6a626f3a746f6f72 3d747865746e6f63 7420745f6d646173 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 79733a725f6d6461 7379733a746f6f72 3d747865746e6f63 7320303230323d6f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69202231616473 223d766564202272 6f7475636578652d 7a79732f223d6874 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 61702022726f7475 636578652d7a7973 223d6d6d6f632034 343030313d646970 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=1ffff92001bddf15 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8daa79d4 RDI=ffff88802df9ce04 RBP=0000000000000000 RSP=ffffc9000deef890 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=ffff88802df9d4b0 R12=ffffffff8ba97820 R13=00000000000001ae R14=0000000000000000 R15=ffff88802df9c980 RIP=ffffffff818a4fc2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6af5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc938c3f52 CR3=000000000e184000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000015422003 Opmask01=0000000000000001 Opmask02=00000000ffff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000a60ce07b 00000000cec3662e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 75977cce71fa6584 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ad5b6a0c1c8d5eea 5e6d08c7db387f15 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000e280 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8001000080010000 8fcf020080010000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005da300005da3 00005da480010000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8047840000005da3 80010000352b5c00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005da337699800 9b6f460000005da3 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 efe770e8ad07deb1 9f2e25714d2bc3a3 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 eab97ac8c5831ebc 6aa1196fa41ccf26 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6168730073257325 7325204650420050 5241006e65706f5f 667062203a732500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444d560056005600 5600054650420050 5241004b40554a5f 435547051f560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000e0024 0000000100000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80410004803e0004 0000000032796870 0038000900000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000e0024 0000000100000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000003e8 0000271000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2030352000656564 0a65640a20363164 685f20206761206e 6120203120003634 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000040000000 RBX=ffff888028f4c980 RCX=ffffffff815e5cd4 RDX=ffff88801def8000 RSI=ffffffff815e5e2d RDI=ffff88801def8020 RBP=ffff88801def8000 RSP=ffffc90000197c38 R8 =0000000000000003 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81bee6d1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bf5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb8ea5156e8 CR3=0000000036055000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 726f662064696c61 766e692220210058 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d766765735f 656c646e61683d53 4e4f4954504f5f4e 4153410063657865 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb8ea51d100 00007fb8e99ba460 00007fb8e99ba478 00007fb8e99ba4c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000