last executing test programs: 8m2.519654334s ago: executing program 32 (id=376): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) 6m48.341646956s ago: executing program 33 (id=1734): add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) (async) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd26, 0x1000000, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x88e5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xe5b7, 0x904, 0x5, 0x5e0, 0x2}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000800}, 0xc0) add_key(&(0x7f0000000280)='dns_resolver\x00', 0x0, &(0x7f0000000340)="0000fffffff20002146a00f5ffffff9c77c5865c0006000200861f4104bfeacdd595007d000000000000000008c1d9a6175e1d3a5baa65a9995f1476d45514d358632da715ca529f52040ea4", 0x4c, r0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=rdma,port=0']) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') r2 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x6a, 0x2, 0x20000000, 0x3) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e23, @local}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, 0x120, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2c0546e7, 0x0, 0x7}) (async) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e23, @local}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, 0x120, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2c0546e7, 0x0, 0x7}) 6m40.650667924s ago: executing program 34 (id=2076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x8, 0x8000, 0x8, 0x0, {{0x1f, 0x4, 0x3, 0x9, 0x7c, 0x66, 0x0, 0xa, 0x4, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0xc, 0xdb, 0x0, 0x4, [0x6, 0x7]}, @ssrr={0x89, 0xf, 0x32, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, @loopback]}, @timestamp_addr={0x44, 0xc, 0x1f, 0x1, 0xe, [{@broadcast, 0x8001}]}, @timestamp_addr={0x44, 0x1c, 0x70, 0x1, 0xd, [{@empty, 0x6a9}, {@loopback, 0x7}, {@loopback, 0x8}]}, @rr={0x7, 0x17, 0x9f, [@dev={0xac, 0x14, 0x14, 0x33}, @broadcast, @local, @remote, @broadcast]}, @timestamp={0x44, 0xc, 0x4c, 0x0, 0x6, [0x5, 0x3]}]}}}}}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, &(0x7f00000001c0)={r6, r6, 0x0, 0x80000001, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[r6], 0x1}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r1, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x240040c1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@getchain={0x23, 0x66, 0xfcd66a900070b359, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010102}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x480040, 0x0) r11 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "d0c09ca8c9a044d18c1f59d1ed624a358f39cfc467329fec437c907e0ca7779ca8c0c2d26abf36f064770a70a88130dfa112562f1ad75b59c390ca9d280872fb", 0x40}, 0x48, 0xffffffffffffffff) keyctl$read(0xb, r11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="055ddc000000000000007b11980000000000f1a7676d83c6d75d850000000500000095003300000000009500a50500000000319e78bd503be35e6d"], &(0x7f0000000080)='GPL\x00', 0x5, 0xbf, &(0x7f000000cf3d)=""/191, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 6m4.179148257s ago: executing program 35 (id=2765): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000003e000701fcfffffffd9bdf25037c0000040038800c0001800800030004009d"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x54}}, 0x40800) 6m2.815095563s ago: executing program 36 (id=2777): syz_usb_connect(0x6, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) (async) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) (async) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000001c0)={0x3, [0x0, 0x0, 0x0]}) (async) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000600)="ca391cb1e0881b450a25", 0xa) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) (async) read$char_usb(r1, 0x0, 0x0) 5m34.789640224s ago: executing program 37 (id=3116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x400009) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x80, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) 5m19.889570318s ago: executing program 38 (id=3362): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x1fd, &(0x7f0000000480)=0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x4, 0x0, 0x1, [@typed={0x2c, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(r7, &(0x7f0000000140)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e) io_submit(r6, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0xf0, r5, &(0x7f00000000c0)='!', 0xb7f40}]) dup3(r5, r3, 0x80000) r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000540)=[@code={0xa, 0x68, {"420f01c20f78deb805000000b97b210c190f01d9c744240004000000c7442402f9bb0000c7442406000000000f011c24660f21eeb9920b00000f32660f38825eec460f01c266ba4100ecb805000000b9432500000f01d9"}}, @uexit={0x0, 0x18, 0x400}, @code={0xa, 0x67, {"d8f9b9800000c00f3235008000000f30c401e51596fd7f000064f30f0fb7000000009a0f20c035040000000f22c0c421a972f799460f2000b9800000c00f3235001000000f30c40281aaae0000000026f2440f017b4e"}}, @uexit={0x0, 0x18, 0x7}, @rdmsr={0x32, 0x18, {0x9ad}}], 0x117}) ioctl$KVM_GET_SREGS2(r9, 0x8140aecc, &(0x7f00000002c0)) close_range(r2, 0xffffffffffffffff, 0x0) 5m16.486466217s ago: executing program 39 (id=3415): socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="dc010000210000000400000000000000850000006d000000070000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f00000006c0)="0300f198aaae5a98ca0000850800", 0xe, 0x20044080, &(0x7f0000000200)={0x11, 0x2, r3, 0x1, 0xfe, 0x6, @random="7483ccb17b06"}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @local, 0x0}, &(0x7f0000000140)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x174, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x9e, 0x4, "095adca6c0131932c6c8d310501e173f6b642a0295c06326b3ad275db3a7ad2cc70e9b4b50d0172bbcad18de743cea1e620496e7675bd842eacab81bbddb30a449d1467e79fce4c6121774db180e40d6a616bc3ef86321be8c2a2deefc93af31a6bfd006756ec0132a24ee1f1325c6f4fe0ca60120af8e040c846c92f9c992cee449030962aaa5961410283ce37ffe6312d97608209cb9884bd1"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x174}, 0x1, 0x0, 0x0, 0xc004}, 0x8004) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x174, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x9e, 0x4, "095adca6c0131932c6c8d310501e173f6b642a0295c06326b3ad275db3a7ad2cc70e9b4b50d0172bbcad18de743cea1e620496e7675bd842eacab81bbddb30a449d1467e79fce4c6121774db180e40d6a616bc3ef86321be8c2a2deefc93af31a6bfd006756ec0132a24ee1f1325c6f4fe0ca60120af8e040c846c92f9c992cee449030962aaa5961410283ce37ffe6312d97608209cb9884bd1"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x174}, 0x1, 0x0, 0x0, 0xc004}, 0x8004) 4m0.368127212s ago: executing program 40 (id=4582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x100}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/reserved_size', 0xa94983, 0x22a) write$cgroup_int(r1, &(0x7f0000000000)=0xfe8e, 0x12) 3m52.878414109s ago: executing program 41 (id=4668): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x92) (async, rerun: 64) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) (async) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 3m36.233076913s ago: executing program 42 (id=4874): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000100)='=', 0x1, 0x4fed3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000080)=0x3ba, 0x5, 0x2) 3m15.86167358s ago: executing program 6 (id=4984): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={'\x00', 0x200, 0x1ff, 0x1, 0x10000053c2, 0x73c3f1c3}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xf, "fe4042c317ae82c6d1a51a1e45a732"}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4020000000000007b1148000000000085000000c4000000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'macsec0\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r2, 0x8949, &(0x7f0000000000)) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2008, &(0x7f00000007c0)) 3m15.858166505s ago: executing program 6 (id=4987): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) ioctl$I2C_PEC(r1, 0x708, 0x7) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x0, 0x0, 0x7, &(0x7f0000000000)={0x12, "a3dd982d0ba2d984c335f78f76704978a2f62f39d29c31372205cd39c53f80d4be"}}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xff05, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x94) dup(r0) 3m15.857776651s ago: executing program 6 (id=4989): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007"], 0x0, 0xc}, 0x94) unshare(0x6a040000) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_io_uring_submit(0x0, 0x0, 0x0) unshare(0x8000000) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="0700f9ffff8929ebc075f109000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r3, &(0x7f0000000480)=ANY=[], 0x125) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x0, 0x9, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x1fff, 0x0) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000000)={0x4, 0x2, 0x3, 0x1, "4620f63a4e6b5c12020e589e0e549fcfdeb92566761ad1c34caca1abe476fa96"}) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc18}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 3m15.853103841s ago: executing program 43 (id=4837): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) setreuid(0x0, 0xee01) socket$caif_stream(0x25, 0x1, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0xe, {{0x17, 0x4, 0x0, 0x37, 0x5c, 0x68, 0x0, 0x3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x1b, 0x2f, [@empty, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x13}]}, @ssrr={0x89, 0x1f, 0x4b, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @local, @empty, @broadcast, @broadcast]}, @timestamp={0x44, 0xc, 0xa9, 0x0, 0xe, [0x1, 0xfff]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1a, 0x1c, &(0x7f00000009c0)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9100000000000b5090100000000009500000000000000b509000002000000639a04fe00000000b509000000000000c39a04fee1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES8=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=r1, @ANYRESHEX=r1], &(0x7f0000000980)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x1b, '\x00', r2, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m15.82538729s ago: executing program 6 (id=4993): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0x0}}, './file0\x00'}) setresgid(0x0, 0xee01, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, 0x300) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='auxv\x00') pread64(r4, &(0x7f0000000140)=""/9, 0x9, 0x4) 3m15.733244852s ago: executing program 6 (id=4996): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x803) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000200)={r3, 0xfffe, 0x20, 0xd8ba, 0x9}, &(0x7f00000001c0)=0x18) r5 = socket(0x200000100000011, 0x803, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {0x2}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x15) chdir(&(0x7f0000000080)='./file1\x00') setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)={r4, 0xb4b8, 0xa9, "3ac71ef42eced1bce2af9c09ac9c3731812b925eae8ca428cd4cfa9ea4979dd1e5818c983236b9e8efc46e37a9aaab60fe44dbfce4c7fdff8c552a656a1d07a0cf69c65f792e7ccb871430352a717f3c9088517f2aa13596efbbfb46d8afb3dd4ea8d67f8336f855de0f3623f321abfba74c1ac8786a91997ad1d3b3dbd6b4a79fe77d765befcd828312f07b63ef30d8bcecec11818daf3a6dfeaad1f8577844739a354bf9dce6f742"}, 0xb1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000180)='mqueue\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x2000030, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) semget(0x0, 0x0, 0x200) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x40000) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 3m15.678956449s ago: executing program 6 (id=4999): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x12101, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$revoke(0x3, r2) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="7577b7573cb6443a678b6608edefe3e574e01fa2eae053613ce1a8ac8c2c3a5796af782043b3efdd37c39b68eeacdeff653402edc7b5b03ab197b468fe083df7c58029311ccbab729660d420e507236ea2026f99bbb53102db01721e930226d105f1ae10d78db5a251379e3313674f557a0471aa040c5eec9105f4acf8d23be29a177b97612c62a832b86459e620ef337592b2972489aee497f73711690bb7abd707d2bcdcc73b7d0a18bf6f12d17bf065d5b868c088e75276b6fd80b0d24eb53ca6", 0xc2, r2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSLCKTRMIOS(r1, 0x80047456, &(0x7f00000010c0)) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={{r0}, 0x4000100000001, 0x2, 0x1000}) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e25, 0xaf5, @empty, 0x7}, 0x1c) socket(0x18, 0xa, 0x3) sendto$inet6(r3, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000000)={0x4, 0x1, '\x00', [@ra={0x5, 0x2, 0x8000}, @ra]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) recvmmsg(r3, &(0x7f0000000040)=[{{0x0, 0x21, 0x0}, 0x5}], 0x1, 0x40000002, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x12101, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) (async) keyctl$revoke(0x3, r2) (async) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="7577b7573cb6443a678b6608edefe3e574e01fa2eae053613ce1a8ac8c2c3a5796af782043b3efdd37c39b68eeacdeff653402edc7b5b03ab197b468fe083df7c58029311ccbab729660d420e507236ea2026f99bbb53102db01721e930226d105f1ae10d78db5a251379e3313674f557a0471aa040c5eec9105f4acf8d23be29a177b97612c62a832b86459e620ef337592b2972489aee497f73711690bb7abd707d2bcdcc73b7d0a18bf6f12d17bf065d5b868c088e75276b6fd80b0d24eb53ca6", 0xc2, r2) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x80047456, &(0x7f00000010c0)) (async) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={{r0}, 0x4000100000001, 0x2, 0x1000}) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e25, 0xaf5, @empty, 0x7}, 0x1c) (async) socket(0x18, 0xa, 0x3) (async) sendto$inet6(r3, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000000)={0x4, 0x1, '\x00', [@ra={0x5, 0x2, 0x8000}, @ra]}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async) recvmmsg(r3, &(0x7f0000000040)=[{{0x0, 0x21, 0x0}, 0x5}], 0x1, 0x40000002, 0x0) (async) 3m0.593143028s ago: executing program 44 (id=4999): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x12101, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$revoke(0x3, r2) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="7577b7573cb6443a678b6608edefe3e574e01fa2eae053613ce1a8ac8c2c3a5796af782043b3efdd37c39b68eeacdeff653402edc7b5b03ab197b468fe083df7c58029311ccbab729660d420e507236ea2026f99bbb53102db01721e930226d105f1ae10d78db5a251379e3313674f557a0471aa040c5eec9105f4acf8d23be29a177b97612c62a832b86459e620ef337592b2972489aee497f73711690bb7abd707d2bcdcc73b7d0a18bf6f12d17bf065d5b868c088e75276b6fd80b0d24eb53ca6", 0xc2, r2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSLCKTRMIOS(r1, 0x80047456, &(0x7f00000010c0)) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={{r0}, 0x4000100000001, 0x2, 0x1000}) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e25, 0xaf5, @empty, 0x7}, 0x1c) socket(0x18, 0xa, 0x3) sendto$inet6(r3, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000000)={0x4, 0x1, '\x00', [@ra={0x5, 0x2, 0x8000}, @ra]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) recvmmsg(r3, &(0x7f0000000040)=[{{0x0, 0x21, 0x0}, 0x5}], 0x1, 0x40000002, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x12101, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) (async) keyctl$revoke(0x3, r2) (async) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="7577b7573cb6443a678b6608edefe3e574e01fa2eae053613ce1a8ac8c2c3a5796af782043b3efdd37c39b68eeacdeff653402edc7b5b03ab197b468fe083df7c58029311ccbab729660d420e507236ea2026f99bbb53102db01721e930226d105f1ae10d78db5a251379e3313674f557a0471aa040c5eec9105f4acf8d23be29a177b97612c62a832b86459e620ef337592b2972489aee497f73711690bb7abd707d2bcdcc73b7d0a18bf6f12d17bf065d5b868c088e75276b6fd80b0d24eb53ca6", 0xc2, r2) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x80047456, &(0x7f00000010c0)) (async) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={{r0}, 0x4000100000001, 0x2, 0x1000}) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e25, 0xaf5, @empty, 0x7}, 0x1c) (async) socket(0x18, 0xa, 0x3) (async) sendto$inet6(r3, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000000)={0x4, 0x1, '\x00', [@ra={0x5, 0x2, 0x8000}, @ra]}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async) recvmmsg(r3, &(0x7f0000000040)=[{{0x0, 0x21, 0x0}, 0x5}], 0x1, 0x40000002, 0x0) (async) 2m24.114788353s ago: executing program 7 (id=5401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}}, 0xb110ba5817e83d35) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}}, 0xb110ba5817e83d35) (async) 2m23.945117287s ago: executing program 7 (id=5407): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x45008600, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x40010, r1, 0x0) r2 = io_uring_setup(0x5be0, &(0x7f0000000000)={0x0, 0x400067c1, 0x2, 0x4000000, 0x20c}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000180)=""/244, 0xf4}], 0x1, 0xfffffff5, 0x6) close_range(r2, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000380)={0x2540000, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, {r1}}, 0xff20) 2m21.881660122s ago: executing program 5 (id=5422): r0 = syz_open_dev$dri(&(0x7f0000000480), 0x100, 0x80000) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f00000004c0)=0x800) r1 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffc000/0x2000)=nil) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) (async, rerun: 64) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000e40)={'#! ', '', [{0x20, '\xbb\xbb\xbb\xbb\xbb\xbb'}, {0x20, 'aead\x00'}, {0x20, '{.*$u${'}, {0x20, '],'}, {0x20, '/dev/ptmx\x00'}, {0x20, '}}\xad#,)L#+]&['}, {0x20, '/dev/usb/hiddev#\x00'}], 0xa, "74dcb36acf1e48a71b1dc58d5b04240e31d12da3512d023097aa1b267e6ac1b7158c0bf4df26688856ea89ebc7c3a58f1918d910b2735a135e6fc4a4c7ea27a163b53ce16780a5fa7bfe2900f92e50f7dd6c8dd776c8ae39059b4f96bf3073b65139c4b0af58de7fb9dda949a48482c63c6307adb3b9cd3666d5ff0ccc0dbc17ae549e2932a5c8b1195b8f470f11b5bf"}, 0xd6) recvmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) (async) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x3000) (async, rerun: 32) prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 32) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xc) (async) syz_usb_control_io(r4, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0x86, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x9, 0x70, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x18b, 0x40, 0x6}, {0x6, 0x24, 0x1a, 0xff}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x4, 0x8}, @acm={0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0xe, 0x6, 0x8001}, @acm={0x4, 0x24, 0x2, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xf1, 0x9, 0xde}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x80, 0x10, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x8, 0x0, 0x8}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xc9, 0x7, 0x3, 0x40, 0xda}, 0x19, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050f046a94231900020a1003020400801003000a1003020000ff030000000000006d40b199ec0dc873abb600"/58], 0x3, [{0xdf, &(0x7f0000000240)=@string={0xdf, 0x3, "ae691d0c741cd63edf7e3c47d139604e7d411d22528be36724e563865a22ccca81d7008a125212d80f689179f985a3abbebd73c3a2aee3753278850d9185cf0cb8635ab8b3ae2926ef3d1da5d3aa1b76f247f4dddf2e753ed18e2ada813bd1b59641f56805751306c5c1053154b0f5a6bad13f87933ba9772f8cb3c0f97d79c3051eca2d900884a00e6c57af2ceb5be7f8db68b0be8f6e49eb5f493454dd7b0e108c87edddb656b3d3a9a5b0a7eaf73cc6b7cff9c2f09e43601e95a5f94db6f028d9893be4f7503fa489f38f9729bb6e381101889a778d62aa8b3a8927"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x54}}, {0x49, &(0x7f0000000380)=@string={0x49, 0x3, "c21cb1135eccffdea4c808458d5c8070425160d43a75b57e53d3255835dbe88066e4832c3544b2b99da0a0db477cf91cc0fb9a0f95cbe2423ebfc548782175962016d467655d5a"}}]}) (async) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x3, 0xb23, 0x7, 0x42}) syz_usb_control_io(r4, &(0x7f0000000740)={0x2c, &(0x7f0000000500)={0x20, 0xb, 0xf1, {0xf1, 0xd, "0fbf4893eba3038c97a402c3edd77f2313bdbb1c4a733097dcc156211a73ab1a81b9a04932c6b644b7e707c6a6b2b6120d1f7412d1b71cd1319ff2ec5e834f364a28b05a32d8e038c1e9fd81e7cb4a53281334f3079c87fbbc69288fa7c530a2daa95bf02e776c094e8e18bf8d031fd6ea6b9184b19ec4f7288acbe19fa09d524977068098cfb43b2bd456343875bf3370e2c55bcdf2ab3f7b9d59da1ca36de5509be712d2630c6418f9f651260b405b1147f744b2967514c94f2449bb90884fafe4dbfb93b0d3f2572c856409fbb9c0c64110d9fa6897a339c2942cc9968aee78256860fb7889213d97fc155b0616"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}, &(0x7f0000000640)={0x0, 0xf, 0x67, {0x5, 0xf, 0x67, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x6, 0x9, 0x1, 0x0, 0x8}, @generic={0x19, 0x10, 0x1, "cbe89867ddae8178f13ea648c8ec415d6adccaaf19b6"}, @ss_container_id={0x14, 0x10, 0x4, 0x44, "9064ad45e57ac233fa12b8827dde66e6"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x41, 0x72, 0x2, 0x3ed2, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "44d2558fc56c497648cde76f2705592d"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xc8, 0x9, 0xd, 0xf}]}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x2, 0x8, 0x40, "7352052e", "f9dc89cd"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x8, 0x8, 0x2, 0x7, 0x8, 0x5cf}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x20, 0x17, 0x1a, "8fd3d8846bfc576e6334706c790473460d3a3ab2cf09d80792db"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0xb4}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x40, 0x2, [0xf000]}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000940)={0x40, 0xb, 0x2, "9f3f"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x4}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "c38d"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x3ff}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0xc}, &(0x7f0000000b80)={0x40, 0x21, 0x1}}) (async, rerun: 32) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x6000) (async, rerun: 32) r7 = msgget(0x0, 0x61) (async, rerun: 64) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000c80)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000000)={r10, 0x5, 0x1b88c5b9, 0x8}, &(0x7f0000000080)=0x10) (async, rerun: 32) msgctl$IPC_INFO(r7, 0x3, &(0x7f0000000000)=""/53) (rerun: 32) 2m21.722052627s ago: executing program 5 (id=5424): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x2000) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0xc20, 0xadb12e32f182386c, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000280)="1201b1048020", 0x0, 0x0, 0x4, 0x0, 0x0}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_on}]}) 2m21.548114924s ago: executing program 7 (id=5426): r0 = socket(0x10, 0x803, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="8500000088000000c6c0a02b500b198e02be686268e4f970bd604b253b8fa7148fd82b17b8d24529c79e65dba6f4bcbbf3de8c102a591151e02731bc29ab0343197ccf4c0c4c143da2ca23a75ab7edb70e7d9c35c3014b6f9020f643a58fed88c4d6c3ecfdd96e408e1744f5a877a89316ddde24d407de4bb3d3b58a3807050b5b7c02c4b88ea78ef70eaa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@delchain={0x24, 0x65, 0xe0a, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xc, 0xa}, {0xd, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x8040) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}, {0x6, 0x3}]}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) (rerun: 32) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-256-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000004000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000001b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = fanotify_init(0x1a, 0x1) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x124) (async) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r12 = fanotify_init(0x8, 0x80000) fanotify_mark(r12, 0x105, 0x4800003a, r11, 0x0) (async) fanotify_mark(r9, 0x1, 0x4000001a, r10, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) (async) socket$nl_generic(0x10, 0x3, 0x10) 2m21.547788233s ago: executing program 5 (id=5427): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='nfs\x00', 0x2014000, &(0x7f0000000380)='(]:\x00') r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x180, 0x2}, 0x18) mkdirat(r2, &(0x7f0000000280)='./file1\x00', 0x46) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) r3 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x33) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x28, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0/file0\x00', 0x80, 0x2400}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x9, 0x7, 0x3, 0x1, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x8340}) ioctl$KVM_RUN(r7, 0xae80, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20080a0, &(0x7f00000001c0)={[{@size={'size', 0x3d, [0x65]}}]}) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) inotify_add_watch(r8, &(0x7f0000000400)='./file1\x00', 0x41000002) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@getchain={0x34, 0x66, 0x10, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xe, 0x5}, {0xffff, 0xa}, {0xd, 0xa}}, [{0x8, 0xb, 0x3}, {0x3, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) 2m20.443573975s ago: executing program 7 (id=5431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) (async) 2m19.271407567s ago: executing program 7 (id=5432): socket(0x15, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x55fa}, 0x8) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRES16=r1], 0x1000f) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x14c0348, 0x40, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x1a8) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1}}, 0x20) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) read(r6, &(0x7f0000000300)=""/239, 0xef) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000280)=0x3, 0x200000, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c27, 0x2a79, 0x4, 0x3, 0x1, 0x0, 0x0, 0x7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20102, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) 2m19.060565345s ago: executing program 0 (id=5435): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000000a, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x12, 0x1, 0x0, "c175f0b781eddc96e6d941c3a7f9582753f9ffff8cbae2850c67ea00"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r2, 0x10, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x34}}, 0x4044) socket$inet(0x2, 0x1, 0x100) 2m19.058747255s ago: executing program 8 (id=5436): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121701, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) (async, rerun: 32) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 2m18.964005819s ago: executing program 0 (id=5437): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="c0e1aaaa981b96c985c31f7fdc0ec4c209c8792f97a03f56a83327372e0bc40bcc6a35f65b6737f399b41c0df341d89894684d2d6135799738e8f8a1f9231642796f21e11d5e94acbf2bae875d67c8428d6776dbd58827afa798ae81b12749294cf974704c62e3ee0d42f4b31e1e2f047bf06de167362ae863769c30e1ea8364428d1332d0bb59440cde504c4c587aea4437bb0a0b224c27ecf521f18dfb46e6b6192239624f44b5d1d2380383c3d3d6e05937cea9724d05a56c25", 0xbb}, {&(0x7f00000000c0)="893f8bf7b05b7132de0c35523174e8abdfc23273186055df6366ece2842861166f72b12238cfc2dfe94122fc18c47d84597e20783c42814488", 0x39}], 0x2, 0xffeffffe, 0x5) 2m18.96359072s ago: executing program 8 (id=5438): kexec_load(0xfff, 0x0, &(0x7f0000000080), 0x2a0000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r1, r1, 0x2f, 0x0, 0x4, @void, @value=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="e02742f4680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kexec_load(0x3, 0x5, &(0x7f0000000400)=[{&(0x7f00000000c0)="904c2e49f17cd00809ebc50475b85d4ad6b00427fd9937304c5c5a54a889255efed173901e1c7f51e9d0e69c14dca87a92fc4a7b3c1dd69365652c2e0ff1c05d27f0070f41bc45d6b0ce539cede7d346ea7060667a655de8ae2f0d2311f3cad19698493ffbc0157f9a5e63f9338d", 0x6e, 0xffffffffffffffff, 0x9}, {&(0x7f0000000140)="51eff4fd160685bd4282a83a91b5c6be80003cc7750a0ac93d55f2e51b40371bb88d10f390385aa252ff7010cbe8d5aa52c2b2f29508d9de090e1e6b7ac87153ab6b49c1f960be4d0038793888540dcbc9be032fb2b83b226627189a250f03dbdb2ba6c96d1568f9de5936895fd0a8", 0x6f, 0xffffffffb64f7a10, 0xfffffffffffffff9}, {&(0x7f00000001c0)="0e52d00e4011c43d3396ef97b4245ecd36670d1c3d43cadd76cb4d24a3f8643380c5dd0ecab026e70d2ab401a0ff3c1896ee4fa7ccfcc78bfe1ec4cf6f32459919ff6010849e7dee82b8ac65090be2e3056c3dce9c3fbb25dea2f81b36f040bd41738f2ebec75cad4d52f03f1f31c85efa5d3f255769f1f8f61bef12ece0bf7ae9de17c5f4a4b7c0adfb4b02183c8e88434508d68c40b455202b53c2f3ef1eb5f25f3fa48d7f20eb27e0eeda540a7ecc9e30c24128f091ecd554a362d52ce56355c09c", 0xc3, 0x8, 0x1}, {&(0x7f00000002c0)="e1be55ac3f3acc0489ef1136d1c0e82a89cfcb91f3a134e3cb58f181cbe85b20f68b6480ff79cb96387fb7f213021a35ea8c7bfaa9404ff88477598a9c7dce99", 0x40, 0x3}, {&(0x7f0000000300)="d4a38cd6e362f5506ae3524386ed13efcc40aa0617b0558fbd71d39cd80ef8797bce1100b7132403c923e071e473d1b5d99577f078cbcb0de6c2b5947ea09b3fd0b7cd487f430abf73fc8afde53037f6e7ace3e03a65f91a8c4a3f33e6c5f6e57d9e4c9a74d95183585c1198e7870e784705bff888f49b236370141070e1d4974061b12f474c7f49a06df8dd9c81719bf7dc22168fdd0688384aaf05f4fa8548108e1ee8771b72966fc75b8b68ec520154ee02c5cf5f736bf733f61b699b3030b95de8c3cdb032ae4a", 0xc9, 0x3, 0x1}], 0x3e0000) 2m18.962988469s ago: executing program 8 (id=5439): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) getdents64(r1, &(0x7f0000000040)=""/110, 0x6e) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r2, 0x8931, &(0x7f0000000000)={'wlan0\x00'}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000280)={0x0, 0x1000000}) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000280)={0x0, 0x1000000}) 2m18.935264091s ago: executing program 0 (id=5440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x28}}, 0x40000) 2m18.934500153s ago: executing program 8 (id=5441): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f5101007f51010049f4e34e860200eb08000240000000000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000002c0)={{0xa, 0x4e21, 0x7fff, @loopback, 0xce6f}, {0xa, 0x4e20, 0x4, @private2, 0x200}, 0x0, {[0x0, 0x2, 0xfa9, 0x100, 0x1862ebe3, 0x5, 0xf8, 0x6]}}, 0x5c) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f320908400f300f0826f30fc7b2050000000f32660fc775022e0ffa600c980f320f3566b857000f00d0", 0x56}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) listen(0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) rmdir(&(0x7f0000000040)='./control\x00') (async) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r10, 0x3ba0, &(0x7f0000000080)={0x48}) ioctl$sock_bt_hci(r9, 0x800448d2, &(0x7f0000000000)) 2m18.842781152s ago: executing program 8 (id=5442): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) close(r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x138}}, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x1c, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000240012800b0001006272696467650000140002800800050001000000080001001c004aa0"], 0x44}}, 0x0) 2m18.842230243s ago: executing program 0 (id=5443): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x400) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000400)="66ec0800000f3266b8cbfc00000f23d80f21f86635000000300f23f8f0194ce6baf80c66b88ca2f58166efbafc0ced2e360f027d000f01c5d8301e76d58e02ba4300b00066b9940a00000f32e3fe"}], 0xaaaaaaaaaaaaa7a, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@my=0x1}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@hyper}, @hyper, 0x4, 0x10000000000000, 0x80000000002449, 0x1}) (async) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x74, r7, {}, {0x2}, {0x0, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8041}, 0x10) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@local, 0x1}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000000c0)={{}, @my=0x0, 0x8, 0x0, 0x7, 0x80, 0xfffffffffffffff7, 0x1000, 0x800}) (async, rerun: 32) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="ff54d84936f28346250066baa00066ed67f77b370fc7190fc75926640f0866ba430066b800000f08b805000000b9009000000f01d9", 0x35}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) r10 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x1, 0x0) fchdir(r11) (async) openat$cgroup_ro(r11, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x140) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x23971c1efd791db5) write$P9_RVERSION(r12, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) 2m18.841916225s ago: executing program 5 (id=5444): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$pppoe(0x18, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40034}, 0xc802) 2m18.830298484s ago: executing program 8 (id=5445): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0xf, @loopback, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) connect$inet6(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 2m18.727583341s ago: executing program 5 (id=5446): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) socket(0xa, 0x3, 0x3a) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x28}}, 0x802) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r3 = socket$inet6(0xa, 0x805, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r5, 0x1, 0x70bd31, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) (async) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) (async) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000001080)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="48b892640000000000000f23d80f21f835800000900f23f80f3266b80e000f00d0f4f2450fc26e000066baa00066b83f0066ef0f3566ba2000edc44135d849bcc4a1817d4a39", 0xfffffffffffffe56}], 0x1, 0x42, 0x0, 0xff11) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="f20f8b23192601c3c4235d6b150b0000008a0f015e00400ff401b666460b35b9fd0200000f3266baa000ad450f00160f07", 0x31}], 0x1, 0x80, 0x0, 0x0) (async) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCVHANGUP(r8, 0x5437, 0x200000000000000) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m18.727337763s ago: executing program 0 (id=5447): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080)={r1, 0x1, 0x48}) r2 = syz_open_dev$evdev(&(0x7f0000000380), 0xb, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f00000000c0)={0x3, 0x0, 0x2, 0x2, "412d13cc00"}) 2m18.694370183s ago: executing program 0 (id=5448): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x2, &(0x7f0000000000)=0x9b67, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000380)=0xe9) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x891d, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000c80)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8, 0x5, "4480f3ba"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x0) 2m15.155978405s ago: executing program 7 (id=5449): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000080000000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) 2m5.661231356s ago: executing program 5 (id=5450): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x11}) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x51) r3 = syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) ioctl$HIDIOCGRDESC(r3, 0x4030582a, &(0x7f0000000200)={0xd, "7954bbc8e80000000000000001"}) ioctl$UI_DEV_CREATE(r2, 0x5501) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000800100000400000028000000", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES16=r4, @ANYBLOB="00000000feffffff00000000f1a85fd62890948cb9293e61b2e2b4b1c81bf99d821557c9d9fd4db51c08f047efa4936409a25303719988c154fcb9f40d5fdd02ec93d3e0c664e96b8976"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), 0x0, 0x0) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe}, 0xc) 2m1.521342833s ago: executing program 45 (id=5445): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0xf, @loopback, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) connect$inet6(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 1m51.27420783s ago: executing program 46 (id=5448): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x2, &(0x7f0000000000)=0x9b67, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000380)=0xe9) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x891d, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000c80)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8, 0x5, "4480f3ba"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x0) 1m42.566091628s ago: executing program 47 (id=5450): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x11}) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x51) r3 = syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) ioctl$HIDIOCGRDESC(r3, 0x4030582a, &(0x7f0000000200)={0xd, "7954bbc8e80000000000000001"}) ioctl$UI_DEV_CREATE(r2, 0x5501) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000800100000400000028000000", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES16=r4, @ANYBLOB="00000000feffffff00000000f1a85fd62890948cb9293e61b2e2b4b1c81bf99d821557c9d9fd4db51c08f047efa4936409a25303719988c154fcb9f40d5fdd02ec93d3e0c664e96b8976"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), 0x0, 0x0) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe}, 0xc) 1m31.292953196s ago: executing program 48 (id=5449): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000080000000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) 30.484457328s ago: executing program 4 (id=5704): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x511000, 0x0) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$video(&(0x7f00000000c0), 0x8, 0x81002) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r3, 0xc040564b, &(0x7f0000000100)={0x3, 0x0, 0x2008, 0x1c51, 0x8, {0x3, 0x9}}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0xc, @win={{0xfffffffc, 0x0, 0x777dc71c, 0x400}, 0x2, 0x5, &(0x7f00000001c0)={{0x4, 0x4, 0x4, 0x4}, &(0x7f0000000180)={{0x4, 0x7, 0x9a49, 0xffffffff}, &(0x7f0000000140)={{0x9, 0x0, 0x101, 0x6}}}}, 0x9b8, &(0x7f0000000200)="6f79b137cecc3ef54318592c64db6fa14d2689bd4683bde74206d0a4860a11c347437bcaff23f8d375c0095d02f1988a835c9787ef607cd80eb224e28127530641aa3f037da75623a996e7d7145dcbefea63a8295f5721b6039b3cd95ae65d3b190f633ebe01028df7e2886f9b8076d10d2118de8ff49fc4d38bba02f6472fe12f5469da2062040ebe47c8b96d0473d77cb449e874f9ff150eb5e0d72e5cc78448", 0x9}}) r4 = syz_clone(0x14420000, &(0x7f00000003c0)="a0fb30a1726094dd9f252b7a0c567c3f86b3d4d1e6ef2b7e03774b4ec3b40b50", 0x20, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="0f6a0576") ptrace$getenv(0x4201, 0xffffffffffffffff, 0x3, &(0x7f00000004c0)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000580)={0x4, 0x7, {r4}, {r1}, 0x5, 0x7a67}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x1, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x9}}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0xa}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@obj_type}]}}) ioctl$VIDIOC_S_FBUF(r3, 0x4030560b, &(0x7f0000000800)={0x80, 0xa, &(0x7f0000000700)="e89067eab07554955ca8ec6a75f54f9ab5f2722e2bfb6498648939ccb7c953f55bc1e2652626b5b329833ee84f336ee450415876793811ac13922f2dec9977db368f02cf60f2d350a97c42418a0378d15788b4fce522d9c77dc20a9f74dd05a4e9ba6a0c4403b057101feb7306a9df6a8561f0d30979386cb5df056010888cdff8902f4897cdc13f0ec1b844c1a4674145abd8b8db17f6845ea756a60d1d2a89e492afbb2aa1a2f79d57e81c2adf342aace263023b1f0542ba3fc89f76dc463a544cb64ea822", {0x7f, 0x5, 0x38415261, 0x2, 0x4, 0x8, 0x2, 0x3ff}}) r7 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000840), 0x80800) getsockopt$PNPIPE_INITSTATE(r7, 0x113, 0x4, &(0x7f0000000880), &(0x7f00000008c0)=0x4) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000940)={0x0, @can, @nl=@kern={0x10, 0x0, 0x0, 0x8}, @rc={0x1f, @any, 0xfe}, 0x8000, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000900)='ip6gretap0\x00', 0xf, 0xfffffffffffffffd, 0x5}) ptrace$poke(0x5, r5, &(0x7f00000009c0), 0x100) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000a00)={0xf6, "b5565d8a3f8b6e364a51cb193f8ff834f445c2321e8b14e55a73ce230f32c0e3", 0x1, 0x10, 0xb, 0x9, 0x10, 0x4, 0x1, 0x2}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000a80)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x1, 0xfff}, &(0x7f0000000b00)=0xc) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000b80)={0x9, &(0x7f0000000b40)=[{0x8001, 0x8}, {0x4, 0x5}, {0x9, 0x8}, {0x24, 0x6}, {0x0, 0xf}, {0xb, 0x7}, {0x4, 0x20}, {0x9, 0x8}, {0x8, 0xb8e}]}) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000bc0)) socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet_sctp6_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000c80)={0x199beaf2, 0x7f}) r8 = io_uring_setup(0x62b7, &(0x7f0000000cc0)={0x0, 0xb917, 0x4, 0x2, 0x287}) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000d40)=[r7], 0x1) r9 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) ioctl$HIDIOCGFIELDINFO(r9, 0xc038480a, &(0x7f0000000dc0)={0x3, 0x3, 0x7, 0x10, 0x7, 0x5, 0xbc43, 0x8001, 0x400, 0x800, 0x5, 0xe, 0x9, 0x10}) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x8040ae9f, &(0x7f0000000e00)) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r5, &(0x7f0000000e40), 0x4001) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000e80)) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000001180)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001140)={&(0x7f0000000f40)={0x1fc, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x18}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf38f}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x689}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x843}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf22}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2640}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5fa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x807d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x1fc}}, 0x4181) 30.427386545s ago: executing program 4 (id=5706): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x34, 0x3c, 0x107, 0xfffffffd, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x4040) 30.327225326s ago: executing program 4 (id=5707): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c200"}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) (async) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0x1}}}, 0x24}}, 0x10) (async) r9 = userfaultfd(0x80801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_WAKE(r9, 0x8010aa02, &(0x7f0000000840)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) (async) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) syz_kvm_setup_cpu$x86(r2, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000100)="470f009756a60000c4837904869431808ddd66470f3882744e85640f01c266b8db008ed866440fd32c25f0000000b8010000000f01d9b8010000000f01c1c74424008000c0fec744240298fb0000c7442406000000000f01142466baf80cb888e07389ef66bafc0cb80a3923c9ef", 0x6e}], 0x1, 0x4d, 0x0, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) 30.106650594s ago: executing program 4 (id=5709): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') (async) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000340)='L', 0x1}], 0x1, 0x87fffff, 0x7, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@union={0x4, 0x1, 0x0, 0x5, 0x0, 0x2, [{0x7, 0x4, 0x5a7}]}]}, {0x0, [0x5f, 0x0, 0x30, 0x61, 0x61, 0x5f, 0x61]}}, 0x0, 0x39, 0x0, 0x1, 0x3}, 0x20) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) (async) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async) r3 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}]}}}]}, 0x60}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 29.244654411s ago: executing program 49 (id=5717): keyctl$dh_compute(0x15, &(0x7f00000000c0), 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073597a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c00014000000000000000002c0001800a0001006c696d69740000001c0002800c00024000000000100000000c0001"], 0x110}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x8, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x8, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x11, 0x4, @udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x48885}, 0x20008000) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) getsockopt$ax25_int(r4, 0x101, 0x9, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}]}}}]}, 0x60}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 11.73765433s ago: executing program 1 (id=5850): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000007bc0)=[{{&(0x7f00000061c0)={0xa, 0x4e22, 0xb5, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@flowinfo={{0x14, 0x29, 0xb, 0x6110ef9}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffdff}}], 0x30}}], 0x1, 0x4004800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x28, r2, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.665251275s ago: executing program 1 (id=5851): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1061, 0x80, 0x4, 0x1ab}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000001500)='l', 0x1}], 0x1, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x18c, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 11.664867583s ago: executing program 1 (id=5852): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="ad4326bd7000fcdb"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0) 11.607416023s ago: executing program 1 (id=5854): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="34001b00", @ANYRES16=r1, @ANYBLOB="010029bd7000000000008900000008000300", @ANYRES32=r3, @ANYBLOB="18001d801400008006000500b0000000050008002a000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x50, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8b}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x200}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x81}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x801) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002040, 0x0) r4 = socket(0x10, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r6, 0x2) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r7, 0x1) flock(r7, 0x1) flock(r6, 0x1) ioctl$CEC_RECEIVE(r5, 0xc0386106, &(0x7f00000010c0)={0xd51, 0x42e, 0xd3, 0xfffffffe, 0x7f, 0x7, "7bfcfd11ddae41917dae6d7063732856", 0x5c, 0x3, 0x1, 0x4, 0x8, 0xff}) r8 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)="71f5e580f6220aad7259714152c7becced708efe6a92c9164a21e6a1f421052346b5f847c9de6e1da902acc72970b8cab7683aa79e144ad762c8e47265dd4f71cc53a9b0a0718152b7b0e3d8280f2093a08b9588d0108073f042a8ebc1215a4efb6c411b53", 0x65, r8) r9 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/197, 0xc5, 0x0, &(0x7f0000000140)=""/101, 0x65}, &(0x7f0000000200)=0x40) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)='i', 0x1) r10 = openat$ttyS3(0xffffff9c, &(0x7f0000000380), 0x40040, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000180)=0x13) ioctl$TIOCSTI(r10, 0x5412, &(0x7f00000001c0)=0x7) getsockopt$bt_hci(r9, 0x0, 0x2, 0x0, &(0x7f0000001080)) 11.425946113s ago: executing program 1 (id=5857): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) poll(&(0x7f0000000040)=[{r1, 0x81}], 0x1, 0xad5) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="7bb5b1f476da9ea2978ee563112563a05f3db6b1ac88a63fb2632f0b66338154e15790d21a93b2b8cc4c9d09055f8f64dee2d9f6220ac92b0767762a35ea24406e824131f48e1bb9", @ANYBLOB="d63f60ff582a924d4f48ba6d26b1c6f18594a9033587ccbbe5d5e493dc84899cf28259716613465d2892658ee2edaa3f5a570bc804b8ad5a32ef4173e99524ba2ec0d8371ce8dcc71cb80c74839d95e85bd97f2f04ddbca89a8e9c7966f54f31437e5fa5053f810d7d0072491d56365e40c8ba2ed1b00645a045898066c158b722cdaf93690abb", @ANYBLOB="6c65846b1eb59d75b00ef9610f425a9d34c604ec41a6d05b4ac6d028b02bf78db0f98e45596ae88c2c14dc8c0a8de482b0ca39319e7f3d4f7c810761d8157da0ad684d9e1ae36adc6680a1a8c198ffb23edb6db0ef4fd9e56b6cc5d64f959169150b62b7b0f63ca19eeb8c850324af0a2fe1e14d65e71eb92677ec1967a1d335f9e8f6d9"], 0x2c}}, 0x40) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) shmat(r4, &(0x7f0000ff9000/0x4000)=nil, 0x6000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020028bd7000fddbdf253d000000080001007063690011000200303030303a30303a31302e300081562884008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4014) socket$nl_route(0x10, 0x3, 0x0) shmctl$SHM_UNLOCK(r4, 0xc) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYBLOB="b5"], 0x6c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r9, @ANYRESDEC=r7, @ANYRES8=r7], 0x7c}}, 0x80) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYBLOB="040029bd7000fedbdf254b0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e00a80066697273746e616d65000000"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 10.505301698s ago: executing program 1 (id=5869): r0 = add_key$fscrypt_provisioning(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x11220000) unshare(0x4000880) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={&(0x7f0000000040)="a8107f9a3207c393d6bb0b4b6a4c52", &(0x7f00000000c0)=""/210, &(0x7f00000001c0)="41d3dfb67982d1b44fb59736c89a7ae0f4b06acff30d2b141235c90fb4a7477c370636d95b1463a2b64b53bf779c65660896ef7944a2092776a4e02438f00af1970a7e45400464949dda8a2d9b2c49dc92b12a0fb139796930d8bb74b2ce01a4a9095dd2af1b899d4eb220bb93033adb84eb7f", &(0x7f0000000240)="3974d91f6f9c5ed071abf89407842f909dd9625c0ab37c81817348bdc8744a0c723c8077e65e4eed5a0c231e6cc18ae547225dcefe36f24112e43db30e39069255035393069b8fa46561fe4f994703499b05f029713e2f23b265d6eac6068b6f5aba4cbd72a1d488329ada7a85f70c201398337dcfa3f795ac7c4387c67841d0628687b9d3e5ebd42e5a7443946d9d82376f1bd2749060b9e09623b07ac287d9c4599e7f256c1c5da0d3e4ab0d8e42739816f859e3e91d778d4e4cf5987663d79f841e6808", 0xffffffff, r1, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd0c, 0x10, &(0x7f0000000000), 0x76}, 0x48) add_key$fscrypt_provisioning(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffb) (async) keyctl$setperm(0x5, r0, 0x11220000) (async) unshare(0x4000880) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={&(0x7f0000000040)="a8107f9a3207c393d6bb0b4b6a4c52", &(0x7f00000000c0)=""/210, &(0x7f00000001c0)="41d3dfb67982d1b44fb59736c89a7ae0f4b06acff30d2b141235c90fb4a7477c370636d95b1463a2b64b53bf779c65660896ef7944a2092776a4e02438f00af1970a7e45400464949dda8a2d9b2c49dc92b12a0fb139796930d8bb74b2ce01a4a9095dd2af1b899d4eb220bb93033adb84eb7f", &(0x7f0000000240)="3974d91f6f9c5ed071abf89407842f909dd9625c0ab37c81817348bdc8744a0c723c8077e65e4eed5a0c231e6cc18ae547225dcefe36f24112e43db30e39069255035393069b8fa46561fe4f994703499b05f029713e2f23b265d6eac6068b6f5aba4cbd72a1d488329ada7a85f70c201398337dcfa3f795ac7c4387c67841d0628687b9d3e5ebd42e5a7443946d9d82376f1bd2749060b9e09623b07ac287d9c4599e7f256c1c5da0d3e4ab0d8e42739816f859e3e91d778d4e4cf5987663d79f841e6808", 0xffffffff, r1, 0x4}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd0c, 0x10, &(0x7f0000000000), 0x76}, 0x48) (async) 5.833526486s ago: executing program 2 (id=5912): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x3, 0x0, 0x0, 0x51792e7248df3904}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x3ff}]}}}]}, 0x3c}}, 0x0) 5.743711436s ago: executing program 2 (id=5913): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r0 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xfa61, 0x2, 0x3, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000000090581010002000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') exit(0x1ff) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) 4.377445583s ago: executing program 3 (id=5915): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000480)={0x0, "b500e2279c2996817bb959eb2b238deda525e1dbdeffafbf2500"}) r4 = socket(0x1, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peekuser(0x3, r7, 0xa8) (async) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x54}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 4.144072511s ago: executing program 3 (id=5916): socket$phonet_pipe(0x23, 0x5, 0x2) syz_emit_vhci(0x0, 0x0) 4.083449607s ago: executing program 3 (id=5917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="7000000003060000000000000705000100070000000500010007000000050001000700000005000100070000000900020073797a320000000005000100070000000900020073f127ae4e1aa4d3b91532ff0a34797a3100000000050001000700000005000100070000000900020073797a300000000000008a7713683e1702b82968635df011b488295fbd6549e2"], 0x70}, 0x1, 0x0, 0x0, 0x404c080}, 0x60000080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x25) r4 = dup3(r2, r2, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000200)="0f07660f38801e66b84a008ed86672550f01d1ef0f201b65d0cdb9800000c00f3235008000000f3026660f38810453", 0x2f}], 0x1, 0x8, &(0x7f0000000300)=[@dstype3={0x7, 0xf}], 0x1) r5 = eventfd2(0x6, 0x80800) r6 = eventfd(0xfffffc6f) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x3, r6}) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$clear(0x7, r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000008e1850009500000025000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000a0417000000090006"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000001c0)={0x3, r5}) syz_clone3(&(0x7f0000000080)={0x2001080, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) r10 = syz_io_uring_setup(0x5a6f, &(0x7f0000000140)={0x0, 0xd785, 0x4, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000540)=0x0) r13 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$UHID_CREATE2(r13, 0x0, 0x1b) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) r15 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r15, 0x103, 0x6, 0x0, &(0x7f0000000880)) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x20102, 0x0, 0x28}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x0, {0x0, r14}}) setreuid(0x0, 0x0) io_uring_enter(r10, 0x4536, 0x6aaf, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) 3.583860061s ago: executing program 9 (id=5921): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000180)={0xf0f03c, 0x4}) sendto$inet(r0, 0x0, 0x0, 0x8802, &(0x7f0000000180)={0x2, 0x4e21, @private=0xa010101}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x25, [{{0x9, 0x2, 0x48}}]}}, 0xffffffffff600000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005fd0a00020005", 0x1d}], 0x1}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800800124000000000050015"], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) sendto$inet(r0, 0x0, 0x0, 0x4004084, 0x0, 0x0) 3.102452144s ago: executing program 3 (id=5922): ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, &(0x7f00000000c0)={0x41, &(0x7f0000000100)}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = userfaultfd(0x1) dup3(r1, r2, 0x80000) 2.591063948s ago: executing program 9 (id=5923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x5c1680, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) (async) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) shutdown(r2, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r4, &(0x7f0000000080)=""/237, 0xed, 0x0) (async) splice(r0, &(0x7f0000000100)=0xfff, r4, &(0x7f0000000140)=0x81, 0x1, 0x2) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x4, 0x9, 0x6, 0xb3b, 0x4, "a3150c2442d1d6a6"}) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x300000}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000140)={0x3, 0xffff, 0x46, 0xfdfdffff, 0xe}) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x899}]}]}, 0x5c}}, 0x8000) 2.474762981s ago: executing program 9 (id=5924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, 0xfc}, [@RTA_GATEWAY={0x14, 0x5, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x2, &(0x7f00000004c0)=@raw=[@map_fd], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) sendmsg$nl_route(r0, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x100, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x8040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="0e1d6c77e161"}]}, 0x40}}, 0x0) 1.776276746s ago: executing program 2 (id=5925): socket$phonet_pipe(0x23, 0x5, 0x2) syz_emit_vhci(0x0, 0x0) 1.66027202s ago: executing program 2 (id=5926): mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000a) r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x14, 0x0, @void}, 0x10) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) close_range(r0, r0, 0x0) 1.660092346s ago: executing program 2 (id=5927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x404a01, 0x0) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x4, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6f22e880}]}, @NFTA_CHAIN_USERDATA={0x4c, 0xc, "792f52e718ea9a2dee27803ca5543532d3d251144a188fede279244f522dfd950c30ebda5aaae556b5560404fa0186453f074bf240af743fedb052ec7b0e002c6474f5baa8e4af09"}]}, 0x74}, 0x1, 0x0, 0x0, 0x814}, 0x240080c1) 421.251233ms ago: executing program 9 (id=5928): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x2000000, 0x0, {{{@in6=@mcast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2e}, 0x0, 0x33}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffff1}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0xe6}}, 0x0, 0x1a0b1}}, 0xf8}}, 0x20000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x62, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0xd96}]}}}]}, 0x3c}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 302.434538ms ago: executing program 2 (id=5929): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x9, 0x6}, 'syz1\x00'}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0}) write$char_usb(r1, &(0x7f0000000040)="e2", 0xff0f) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x0, 0x3, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000280003802400008004000180040002800c0004"], 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)={0x5, 0x0, [{0x100000, 0x89, &(0x7f0000000440)=""/137}, {0x100000, 0xe9, &(0x7f0000000500)=""/233}, {0x100000, 0xad, &(0x7f0000000600)=""/173}, {0xf000, 0xfb, &(0x7f00000006c0)=""/251}, {0x4, 0x3b, &(0x7f0000000040)=""/59}]}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r6}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$UI_DEV_CREATE(r0, 0x5501) 294.155723ms ago: executing program 3 (id=5930): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0xe361, 0x101001) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"51ae197ce84c5ad87b9fffc3ad381331", 0x0, 0x0, {0x6bf76291, 0x3}, {0x4, 0x5}, 0x9f7, [0x6, 0x1, 0x6838, 0x2, 0x9, 0x6, 0x7, 0x2ce4, 0x7, 0x0, 0xa87, 0x7, 0x5, 0x7ff, 0xfff, 0x4]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000001c0)={{}, r2, 0x18, @inherit={0x60, &(0x7f0000000140)={0x1, 0x3, 0x8001, 0x7057214, {0x8, 0x6, 0x0, 0x6, 0x9}, [0xfffffffffffffff9, 0x9, 0x4]}}, @subvolid=0xc}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r4 = memfd_secret(0x0) ioctl$BLKROSET(r4, 0x125d, &(0x7f00000011c0)=0x868) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000001200)={0x0, 0xfffffff9, 0x6, 0x5, 0x1, [0x0, 0x0], [0x2, 0x5, 0x8, 0x704], [0x7, 0x5, 0xfd7, 0x5], [0xd, 0x1b, 0x800]}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000001280)={r5}) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000001300)={0x8, &(0x7f00000012c0)=[{}, {}, {}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r4, 0xc0406429, &(0x7f0000001440)={r6, 0x3, &(0x7f0000001340)=[0xc23, 0x7f, 0x7fff], &(0x7f0000001380)=[0x8000, 0x0, 0xfffffff8], 0x60, 0x2, 0x72b, &(0x7f00000013c0)=[0x6, 0x5ca3], &(0x7f0000001400)=[0x9, 0xf502, 0xffff, 0x7fffffff, 0x10]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001480)={{r3}, r1, 0x2, @unused=[0x8, 0x7f, 0x9, 0x6], @devid}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002540)={r4, &(0x7f0000002480)="ffa2fc79e5f342b36a728b5eac2f10c5a06e2686b61b80095c4f6b1b43aa9a1d67f5731cb31d234a1d5b138333ea1844bbd58ddbed1c5a30f667f62441a66b0972094fabc2c56f82c808a6b7", &(0x7f0000002500)=""/48}, 0x20) ioctl$BLKRRPART(r4, 0x125f, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000002580)={0x1, [[0x2, 0x7, 0x430, 0x2, 0x1, 0xfff, 0xa, 0xf], [0x1b4e51d0, 0x8, 0xfffffff8, 0x9, 0x80000001, 0x400, 0xdc9, 0x41], [0xfffffffc, 0x8000, 0x0, 0x1, 0x8, 0x28, 0x1, 0x10000]], '\x00', [{0x20}, {0x55ae, 0x400, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x9, 0x1, 0x0, 0x1}, {0x2, 0xb16, 0x0, 0x1, 0x0, 0x1}, {0xd, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x9, 0x0, 0x0, 0x1}, {0x1, 0x6, 0x1, 0x1, 0x1}, {0xb, 0x1, 0x1, 0x0, 0x1}, {0x9, 0x5, 0x0, 0x0, 0x1}, {0x2, 0x6, 0x0, 0x1, 0x0, 0x1}, {0x100, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x10e, 0x1, 0x0, 0x1, 0x1}], '\x00', 0xfe}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002800), 0x200000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x39) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000002840)={r5}) close_range(r7, r8, 0x2) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000028c0)=[@textreal={0x8, &(0x7f0000002880)="ba4000ec0f350f01df0f300f21ae660fc7b3c00066b9800000c00f326635000400000f302e0fc71e00800f070f35", 0x2e}], 0x1, 0x12, &(0x7f0000002900), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000002940)) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002ac0)={@cgroup=r4, 0x2f, 0x0, 0x8001, &(0x7f00000029c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000002a00)=[0x0, 0x0], &(0x7f0000002a40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002a80)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002b40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, r4, 0x1, 0x1, 0x1}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002bc0)={0xc, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002b00)={@map=r10, r4, 0x2f, 0x2020, 0x0, @void, @void, @value=r11, @void, r9}, 0x20) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000002c00)={{&(0x7f0000ff3000/0x2000)=nil, 0x2000}, 0x2}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000002c40)={0x1, [0x0]}, &(0x7f0000002c80)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000002cc0)=r12, 0x4) open_tree(r4, &(0x7f0000002d00)='./file0\x00', 0x88180) 150.476597ms ago: executing program 3 (id=5931): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="02000000000080008000120008000100767469367400020060"], 0xa0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe00000100000000050013"], 0xd0}}, 0x2400c800) r3 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000400000000000000000f0000000c00068004000200040005002c000380080001008000000008000100000000000800020000000000000000000c00038008000300"/82], 0x58}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="03000800010000000000140000004500801614929b05000190780a010100ac1414aa0400907800000000450000000000001100110000ac1414aa7f"], 0xfdef) 100.522723ms ago: executing program 9 (id=5932): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="e954ea64269685e227a428b02434c40163078a09b62ff2c814fdc38484c586976a77f98ad2d478e34273a9c80e00dd1ce3caabc15424eba4486c1f8b802a6077e75995e3b7b651476eedb636e28b7ae26bb070a86404c4b773a4039c592440f7ec13a134bb6f8444f2d2209fba798cc99b"], 0x0, 0x26, 0x0, 0x8000000}, 0x28) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00001d6000/0x1000)=nil, 0x1000, 0x17) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000006380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r4, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r4, &(0x7f00000000c0)={0x20, 0x0, r5, {0x0, 0x4, 0xbef}}, 0x20) (async) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r3}, 0x94) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r6, 0x4) (async) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000100)=0x3) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r8, 0x0, 0xb, 0x0, &(0x7f0000000040)) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r7, 0x80845663, &(0x7f0000000140)={0x0, @reserved}) 0s ago: executing program 9 (id=5933): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESHEX, @ANYRES16=0x0], &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x560c, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)='t\xa3D)\xcb(/\x00\xd9\xf8x\xf2\x9dw$\xaeF\x03\x91\xbe\x13r\xcc\xd7\xec&\x9f\xd4U\x1e$\x93\x938\xaa\x1e\x92\x9fk\xef\xe1\xfe\x11\x89\xf1\x8fX\x8c\xb0l\xda\xd0\xc1#\x89\x97g\xe1\xd2\xdd\xa3lzM:\x17\x06\x1d<\xb2\x8e\xb2\xa1J(\\Q\xef\xfa\xff\xff\xff\xff\xff\xff\xffs\xa6\x98q\xba\x02\xbe\xd0\xa5D\x13]Uo\x84\x00') r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) sendmsg$can_raw(r2, &(0x7f0000000080)={&(0x7f0000000180), 0x10, &(0x7f0000000140)={&(0x7f0000000800)=@canfd={{0x1}, 0x1e, 0x3, 0x0, 0x0, "29ee418aff4ecf10d0cd3c3da63227fbe18a29dcf817d65b8f0cd8a618b77b7584abff7ca74865916420879d8a031ca5f099f2ae328a96069a6a57aecc59c2a4"}, 0x48}, 0x2, 0x0, 0x0, 0x20040080}, 0x8004) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x2, &(0x7f00000009c0)=ANY=[@ANYBLOB="26623dee804ed6a5f352a448e69143f9bba014b1fb31f1eba6c37a9c83b080157e43cab7294caf1ba8be635fd9f7276b48f6d1866673403e7b751cf4bc010ca824e571f5f626213be048a895be9106e68b0ff2cf4f0023e8d87a4ec28853906fdd8386fe14d51320ac4516a73c9579d293e3ee0972204fd1dd3f2480fbfeefaf4baf5df4765e22dcff8a1470357d63438fd0acff23fe683b9a0a59264f4038e244fea87567541aee88b7d91c7cb48fc7a04139d2fd1e736ec0e8c635d441f6dee217b780b411e0f88965efbcfa6dacbafeef22631b314e7bfbfae3", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x204, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = getuid() fchown(r1, r7, 0xee00) signalfd(r4, &(0x7f0000000480)={[0x6]}, 0x8) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r10, 0xf505, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="cd", @ANYRESDEC=r10, @ANYBLOB="aaef4478bf09b45b4e3c97c8ece6f280b601fa94d47a222611589a1ca890154fa426780a92ed164ea637a0b182f27b01f2af8f16197136430cd4a90ef5d73aff19606049787100b121"], 0x30}}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(r9, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="040000000000", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000040) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffd, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) 0s ago: executing program 3 (id=5937): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000000)=0x2, 0x4) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001f40)={r8, r7, 0x25, 0x0, @val=@netkit={@void, @value=r8}}, 0x1c) syz_emit_ethernet(0x26, &(0x7f0000000c40)=ANY=[@ANYBLOB="836fc28421c70374806a6eed88a8020081003200d9689fd1788f5056bc1161f45542080500fa"], 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) splice(r5, 0x0, r3, 0x0, 0x7ffff040, 0x1200000000000000) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000040)='proc\x00', &(0x7f0000001500)="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", 0x1000) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000280)={'c6xdigio\x00', [0x4, 0x5, 0x3ff, 0x601, 0x578, 0x1, 0x5, 0x5c95239b, 0x805, 0x7ff, 0x2, 0x1, 0xffffff31, 0x4, 0x1, 0x1, 0x5, 0xbebd, 0x1, 0x201, 0xbe8, 0xfffffff9, 0x9, 0x20001e56, 0x9, 0x3, 0x3c, 0x81, 0x4, 0x8000000, 0x1]}) r9 = fsmount(r0, 0x0, 0xa) r10 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r10, 0x0) fchdir(r9) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xe8b80, 0x95) lseek(r11, 0x104, 0x1) r12 = inotify_init1(0x80800) inotify_add_watch(r12, &(0x7f0000000240)='.\x00', 0x60000726) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)=@sco={0x1f, @none}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/179, 0xb3}, {&(0x7f0000000600)=""/249, 0xf9}], 0x4, &(0x7f0000000700)=""/83, 0x53}, 0x2100) getdents64(r11, 0x0, 0x4f) kernel console output (not intermixed with test programs): .844643][T24457] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 392.930734][T24457] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.934315][T24457] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 392.951314][T24467] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5298'. [ 393.014129][T24457] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.017674][T24457] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 393.136972][T24457] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 393.156028][T24457] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 393.171559][T24457] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 393.188195][T24457] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 393.219043][ T34] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 393.258286][T24457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.275852][T24457] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.283784][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.286068][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.293925][T17084] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.296189][T17084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.369086][ T34] usb 13-1: Using ep0 maxpacket: 8 [ 393.375177][ T34] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 393.381757][ T6021] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 393.382063][ T34] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 393.390678][ T34] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 393.394735][ T34] usb 13-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 393.400823][ T34] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 393.405836][ T34] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 393.414588][ T34] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 393.421021][ T34] usb 13-1: config 168 interface 0 has no altsetting 0 [ 393.424374][ T34] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 393.426993][ T34] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 393.430947][ T34] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 393.438964][ T34] usb 13-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 393.443066][ T34] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 393.446679][ T34] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 393.450906][ T34] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 393.456354][ T34] usb 13-1: config 168 interface 0 has no altsetting 0 [ 393.460092][T24457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.461355][ T34] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 393.465576][ T34] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 393.471317][ T34] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 393.475742][ T34] usb 13-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 393.479926][ T34] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 393.482918][T24457] veth0_vlan: entered promiscuous mode [ 393.483476][ T34] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 393.487494][T24457] veth1_vlan: entered promiscuous mode [ 393.488677][ T34] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 393.488696][ T34] usb 13-1: config 168 interface 0 has no altsetting 0 [ 393.490977][ T34] usb 13-1: string descriptor 0 read error: -22 [ 393.499687][ T34] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 393.503283][ T34] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.514222][T24457] veth0_macvtap: entered promiscuous mode [ 393.517719][T24457] veth1_macvtap: entered promiscuous mode [ 393.518290][ T34] adutux 13-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 393.525144][T24457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.533496][T24457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.541412][T17084] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.545905][T17084] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.548697][T17084] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.553770][T17084] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.595171][T11577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.597764][T11577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.616246][T11577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.619496][T11577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.651986][ T40] audit: type=1400 audit(1049224.519:2913): avc: denied { name_bind 0x1000000 } for pid=24497 comm="syz.0.5296" path="socket:[121825]" dev="sockfs" ino=121825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 393.662952][T24498] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 393.675329][T24498] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 393.713600][ T40] audit: type=1400 audit(1049224.579:2914): avc: denied { read write } for pid=24473 comm="syz.8.5300" name="lp0" dev="devtmpfs" ino=3538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 393.714253][ T34] usb 13-1: USB disconnect, device number 7 [ 393.724573][ T40] audit: type=1400 audit(1049224.579:2915): avc: denied { open } for pid=24473 comm="syz.8.5300" path="/dev/usb/lp0" dev="devtmpfs" ino=3538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 393.748637][T24504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.223260][T24534] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5312'. [ 394.299661][ T5332] Bluetooth: hci2: command tx timeout [ 394.302200][ T5381] pmem0: [POWERTEC] [ 394.535658][T24553] overlayfs: failed to resolve './file0': -2 [ 394.708492][ T40] audit: type=1400 audit(1049225.568:2916): avc: denied { shutdown } for pid=24557 comm="syz.8.5319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 394.724042][ T40] audit: type=1400 audit(1049225.568:2917): avc: denied { read } for pid=24557 comm="syz.8.5319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 395.021455][T24576] netlink: 'syz.0.5324': attribute type 1 has an invalid length. [ 395.024023][T24576] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5324'. [ 395.202668][ T6056] usb 10-1: USB disconnect, device number 15 [ 395.211902][ T6056] usblp0: removed [ 395.244117][T24585] loop9: detected capacity change from 0 to 7 [ 395.248194][T23714] loop9: [ 395.249246][T23714] loop9: partition table partially beyond EOD, truncated [ 395.395900][T24589] lo speed is unknown, defaulting to 1000 [ 395.599451][T24593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=24593 comm=syz.7.5328 [ 395.649707][T24598] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5329'. [ 395.655280][T24598] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 395.657385][T24598] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 395.661248][T24598] vhci_hcd vhci_hcd.0: Device attached [ 395.663002][ T6021] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 395.663787][T24600] vhci_hcd: connection closed [ 395.666195][ T1178] vhci_hcd: stop threads [ 395.669240][ T1178] vhci_hcd: release socket [ 395.671699][ T1178] vhci_hcd: disconnect device [ 395.867158][ T6021] usb 10-1: Using ep0 maxpacket: 16 [ 395.931752][ T6021] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.935351][ T6021] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.939018][ T6021] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 395.961427][ T6021] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 395.964728][ T6021] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.981085][ T6021] usb 10-1: config 0 descriptor?? [ 396.070806][ T34] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 396.246831][ T34] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 396.256215][ T34] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 396.259938][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 396.265476][ T34] usb 5-1: SerialNumber: syz [ 396.380670][ T5332] Bluetooth: hci2: command tx timeout [ 396.439230][ T6021] HID 045e:07da: Invalid code 65791 type 1 [ 396.463982][ T6021] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:045E:07DA.000E/input/input32 [ 396.485718][ T6021] microsoft 0003:045E:07DA.000E: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 396.491867][ T34] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 396.506076][ T34] usb 5-1: USB disconnect, device number 11 [ 396.523031][T24608] tmpfs: Bad value for 'mpol' [ 396.626294][T24612] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5334'. [ 396.703384][T24590] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 396.719725][ T40] audit: type=1400 audit(1049227.577:2918): avc: denied { listen } for pid=24613 comm="syz.7.5335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 396.733838][ T40] audit: type=1400 audit(1049227.597:2919): avc: denied { accept } for pid=24613 comm="syz.7.5335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 396.786127][ T6056] usb 10-1: USB disconnect, device number 16 [ 396.928304][T24615] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5335'. [ 398.463789][ T5332] Bluetooth: hci2: command tx timeout [ 400.542654][ T5332] Bluetooth: hci2: command tx timeout [ 405.715015][ C1] sched: DL replenish lagged too much [ 409.534205][ T40] audit: type=1326 audit(1049240.391:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24649 comm="syz.5.5338" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57e1f8ebe9 code=0x7ffe0000 [ 409.534520][T24650] netlink: 'syz.0.5340': attribute type 2 has an invalid length. [ 409.550059][T24650] netlink: 'syz.0.5340': attribute type 1 has an invalid length. [ 409.552547][T24650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5340'. [ 409.556181][T24654] netlink: 'syz.0.5340': attribute type 2 has an invalid length. [ 409.559143][T24654] netlink: 'syz.0.5340': attribute type 1 has an invalid length. [ 409.561668][T24654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5340'. [ 409.603480][T24659] mkiss: ax0: crc mode is auto. [ 409.742171][T24683] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5347'. [ 409.811602][T24686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=24686 comm=syz.8.5347 [ 409.839875][T24688] bridge0: entered allmulticast mode [ 409.841767][T24688] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5348'. [ 409.844112][ T40] audit: type=1400 audit(1049240.701:2921): avc: denied { ioctl } for pid=24687 comm="syz.7.5348" path="socket:[124513]" dev="sockfs" ino=124513 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 409.846997][T24688] bridge_slave_1: left allmulticast mode [ 409.855229][T24688] bridge_slave_1: left promiscuous mode [ 409.857339][T24688] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.861489][ T40] audit: type=1400 audit(1049240.721:2922): avc: denied { setattr } for pid=24689 comm="syz.8.5349" path="socket:[123009]" dev="sockfs" ino=123009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 409.877988][T24688] bridge_slave_0: left allmulticast mode [ 409.887738][T24688] bridge_slave_0: left promiscuous mode [ 409.890235][T24688] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.940635][T24688] bridge0 (unregistering): left allmulticast mode [ 410.136649][T24710] trusted_key: encrypted_key: insufficient parameters specified [ 410.201570][ T6056] hid-generic 0000:0004:8000.000F: unknown main item tag 0x0 [ 410.207629][ T6056] hid-generic 0000:0004:8000.000F: unknown main item tag 0x0 [ 410.210407][ T6056] hid-generic 0000:0004:8000.000F: unknown main item tag 0x0 [ 410.226164][ T6056] hid-generic 0000:0004:8000.000F: hidraw1: HID v100.01 Device [syz0] on syz0 [ 410.282639][T24715] fido_id[24715]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 410.294402][T24717] binder: 24714:24717 unknown command 0 [ 410.296645][T24717] binder: 24714:24717 ioctl c0306201 200000000080 returned -22 [ 410.363225][T24729] 9p: Unknown access argument 18446744073709551615: -34 [ 410.459028][T24739] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.5362'. [ 410.515643][T24750] netlink: 'syz.8.5365': attribute type 1 has an invalid length. [ 410.524681][T24750] 8021q: adding VLAN 0 to HW filter on device bond1 [ 410.532041][T24750] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 410.539577][T24750] vlan2: entered allmulticast mode [ 410.541518][T24750] veth1: entered allmulticast mode [ 410.543753][T24750] veth1: entered promiscuous mode [ 410.555006][T24750] veth1: left promiscuous mode [ 410.559810][T24750] bond1: (slave vlan2): making interface the new active one [ 410.562212][T24750] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 410.576293][T24750] veth1: entered promiscuous mode [ 410.581034][T24750] vlan2: entered promiscuous mode [ 410.582879][T24750] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 410.619590][T24757] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 410.622421][T24757] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 410.627031][T24757] trusted_key: encrypted_key: insufficient parameters specified [ 410.629977][T24757] netlink: 136 bytes leftover after parsing attributes in process `syz.5.5367'. [ 410.874667][ T6040] libceph: connect (1)[c::]:6789 error -101 [ 410.876669][ T6040] libceph: mon0 (1)[c::]:6789 connect error [ 410.882869][ T6040] libceph: connect (1)[c::]:6789 error -101 [ 410.884992][ T6040] libceph: mon0 (1)[c::]:6789 connect error [ 411.049748][T13923] libceph: connect (1)[c::]:6789 error -101 [ 411.101524][T13923] libceph: mon0 (1)[c::]:6789 connect error [ 411.149965][ T6040] libceph: connect (1)[c::]:6789 error -101 [ 411.157130][ T6040] libceph: mon0 (1)[c::]:6789 connect error [ 411.221839][ T40] audit: type=1400 audit(1049242.080:2923): avc: denied { setopt } for pid=24781 comm="syz.7.5373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 411.513844][T24792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24792 comm=syz.0.5375 [ 411.529094][T24763] ceph: No mds server is up or the cluster is laggy [ 411.533770][T24770] ceph: No mds server is up or the cluster is laggy [ 411.619710][T13923] libceph: connect (1)[c::]:6789 error -101 [ 411.658219][T13923] libceph: mon0 (1)[c::]:6789 connect error [ 411.732904][T24796] sctp: [Deprecated]: syz.8.5379 (pid 24796) Use of int in max_burst socket option. [ 411.732904][T24796] Use struct sctp_assoc_value instead [ 411.831304][T24804] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5381'. [ 412.214997][T24812] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5380'. [ 412.217852][T24812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5380'. [ 412.251063][T24816] XFS (nbd0): no-recovery mounts must be read-only. [ 412.332401][T24813] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 412.383993][T24815] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 412.399370][T24819] netlink: 'syz.7.5385': attribute type 1 has an invalid length. [ 412.452625][T24821] bond2: (slave geneve2): making interface the new active one [ 412.455203][T24821] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 412.457933][T17072] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 412.462381][T17072] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 412.465234][T17072] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 412.467937][T17072] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 412.471247][T24819] zonefs (nbd7) ERROR: Not a zoned block device [ 412.516278][T24824] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 412.540570][T17060] Bluetooth: hci3: Frame reassembly failed (-84) [ 412.684993][T24838] syzkaller0: entered promiscuous mode [ 412.686825][T24838] syzkaller0: entered allmulticast mode [ 412.711690][T24813] /dev/sr0: Can't open blockdev [ 412.942002][T24815] /dev/sr0: Can't open blockdev [ 414.549725][ T5332] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 415.101172][T24851] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.212883][T24851] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.247097][T24875] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5402'. [ 415.383851][T24851] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.435944][T24888] netlink: 'syz.5.5408': attribute type 1 has an invalid length. [ 415.450784][ T40] audit: type=1400 audit(1049246.308:2924): avc: denied { map } for pid=24887 comm="syz.5.5408" path="socket:[123717]" dev="sockfs" ino=123717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 415.743611][T24851] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.790172][ T6040] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 415.824903][ T40] audit: type=1400 audit(1049246.668:2925): avc: denied { bind } for pid=24904 comm="syz.5.5412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 415.850179][ T40] audit: type=1400 audit(1049246.668:2926): avc: denied { connect } for pid=24904 comm="syz.5.5412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 415.894151][T24892] lo speed is unknown, defaulting to 1000 [ 415.950221][ T6040] usb 12-1: Using ep0 maxpacket: 32 [ 415.968005][ T6040] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.978699][ T6040] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.990497][ T6040] usb 12-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 415.993420][ T6040] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.187433][ T6040] usb 12-1: config 0 descriptor?? [ 416.443739][T24907] syz.5.5412 (24907): drop_caches: 1 [ 416.449519][T24921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5415'. [ 416.452892][T24921] netlink: 'syz.0.5415': attribute type 20 has an invalid length. [ 416.459514][T17084] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.463049][T17084] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.467173][T17084] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.470296][T17084] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.473547][T24921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5415'. [ 416.476457][T24921] netlink: 'syz.0.5415': attribute type 20 has an invalid length. [ 416.584234][T24907] syz.5.5412 (24907): drop_caches: 1 [ 416.630845][ T6040] savu 0003:1E7D:2D5A.0010: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 416.709504][T24936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5420'. [ 417.057887][ T6040] usb 12-1: USB disconnect, device number 7 [ 417.465614][ T75] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.472683][ T75] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.477884][ T75] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.507401][ T1178] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.549453][T24949] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 417.652986][T24951] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5425'. [ 417.692588][T24954] netlink: 'syz.0.5428': attribute type 6 has an invalid length. [ 417.712066][T24954] netlink: 'syz.0.5428': attribute type 6 has an invalid length. [ 417.899826][T24952] veth0: entered promiscuous mode [ 417.925320][T24951] veth0: left promiscuous mode [ 418.085699][ T40] audit: type=1400 audit(1049248.947:2927): avc: denied { mount } for pid=24960 comm="syz.5.5427" name="/" dev="hugetlbfs" ino=124790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 418.088058][T24961] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 418.125319][T17060] Bluetooth: hci3: Frame reassembly failed (-84) [ 418.183509][ T40] audit: type=1400 audit(1049249.046:2928): avc: denied { remount } for pid=24960 comm="syz.5.5427" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 418.183513][T24961] hugetlbfs: Bad value 'e' for mount option 'size' [ 418.183513][T24961] [ 418.198133][T24966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24966 comm=syz.8.5429 [ 419.006976][T24971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5430'. [ 420.152557][ T5332] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 420.351800][T25000] binder: 24999:25000 ioctl c018620c 200000000280 returned -22 [ 420.363878][T25001] binder: 24999:25001 ioctl c018620c 200000000280 returned -22 [ 420.446605][ T40] audit: type=1400 audit(1049251.305:2929): avc: denied { unmount } for pid=21717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 420.469453][T25011] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5442'. [ 420.515763][T25020] siw: device registration error -23 [ 420.618481][T25025] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5445'. [ 420.625858][T25025] bridge_slave_1: left allmulticast mode [ 420.628487][T25025] bridge_slave_1: left promiscuous mode [ 420.631128][T25025] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.656766][T25025] bridge_slave_0: left allmulticast mode [ 420.663954][T25025] bridge_slave_0: left promiscuous mode [ 420.684224][T25025] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.319431][T17072] vlan2: left promiscuous mode [ 441.094642][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 491.373036][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 491.375417][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 491.377703][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 491.380263][ T5981] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 491.382581][ T5981] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 491.385748][ T5981] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 491.390755][ T5981] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 491.392745][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 491.395576][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 491.465993][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 491.468621][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 491.470880][T25045] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 491.473304][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 491.475783][ T5332] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 491.478423][ T5332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 491.492673][ T5332] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 491.495323][ T5332] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 491.499409][ T5332] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 491.502360][ T5332] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 491.505080][ T5332] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 491.634481][T17075] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.637677][T17075] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.771382][T25041] lo speed is unknown, defaulting to 1000 [ 491.870982][T17075] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.875311][T17075] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.891534][T25049] lo speed is unknown, defaulting to 1000 [ 491.914027][T25041] chnl_net:caif_netlink_parms(): no params data found [ 491.976116][T25050] lo speed is unknown, defaulting to 1000 [ 491.994606][T17075] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.997842][T17075] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.032956][T25042] lo speed is unknown, defaulting to 1000 [ 492.188457][ C2] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 492.931218][T17075] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.934728][T17075] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.971381][T25041] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.973746][T25041] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.976413][T25041] bridge_slave_0: entered allmulticast mode [ 492.979298][T25041] bridge_slave_0: entered promiscuous mode [ 492.983262][T25041] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.986063][T25041] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.989566][T25041] bridge_slave_1: entered allmulticast mode [ 492.992901][T25041] bridge_slave_1: entered promiscuous mode [ 493.093252][T25041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.116768][T25050] chnl_net:caif_netlink_parms(): no params data found [ 493.126206][T25041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.166465][T25042] chnl_net:caif_netlink_parms(): no params data found [ 493.177180][T25049] chnl_net:caif_netlink_parms(): no params data found [ 493.213434][T25041] team0: Port device team_slave_0 added [ 493.275807][T25041] team0: Port device team_slave_1 added [ 493.469609][ T5332] Bluetooth: hci1: command tx timeout [ 493.477059][T25041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.481505][T25041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.490666][T25041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.498676][T17075] bridge_slave_1: left allmulticast mode [ 493.503225][T17075] bridge_slave_1: left promiscuous mode [ 493.505215][T17075] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.517806][T17075] bridge_slave_0: left allmulticast mode [ 493.520703][T17075] bridge_slave_0: left promiscuous mode [ 493.523148][T17075] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.552728][ T5332] Bluetooth: hci3: command tx timeout [ 493.555100][ T5332] Bluetooth: hci0: command tx timeout [ 493.557455][ T5977] Bluetooth: hci2: command tx timeout [ 493.962354][T17075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.977514][T17075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.985001][T17075] bond0 (unregistering): Released all slaves [ 494.009007][T25050] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.016501][T25050] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.019132][T25050] bridge_slave_0: entered allmulticast mode [ 494.022087][T25050] bridge_slave_0: entered promiscuous mode [ 494.028586][T25041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.032266][T25041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.043033][T25041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.100992][T25050] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.104025][T25050] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.107087][T25050] bridge_slave_1: entered allmulticast mode [ 494.114237][T25050] bridge_slave_1: entered promiscuous mode [ 494.325925][T25050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.341952][T25049] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.345000][T25049] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.348074][T25049] bridge_slave_0: entered allmulticast mode [ 494.353871][T25049] bridge_slave_0: entered promiscuous mode [ 494.361379][T25049] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.364433][T25049] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.367755][T25049] bridge_slave_1: entered allmulticast mode [ 494.371521][T25049] bridge_slave_1: entered promiscuous mode [ 494.387489][T25042] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.390801][T25042] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.393219][T25042] bridge_slave_0: entered allmulticast mode [ 494.395916][T25042] bridge_slave_0: entered promiscuous mode [ 494.401698][T25050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.458242][T25042] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.461590][T25042] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.463963][T25042] bridge_slave_1: entered allmulticast mode [ 494.466337][T25042] bridge_slave_1: entered promiscuous mode [ 494.492589][T25041] hsr_slave_0: entered promiscuous mode [ 494.496194][T25041] hsr_slave_1: entered promiscuous mode [ 494.499096][T25041] debugfs: 'hsr0' already exists in 'hsr' [ 494.502181][T25041] Cannot create hsr debugfs directory [ 494.574199][T25050] team0: Port device team_slave_0 added [ 494.577661][T25049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.583044][T25049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.599387][T25042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.626002][T25050] team0: Port device team_slave_1 added [ 494.693612][T25042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.777742][T25050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.782945][T25050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.792305][T25050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.799424][T25049] team0: Port device team_slave_0 added [ 494.810833][T25049] team0: Port device team_slave_1 added [ 494.837594][T17075] hsr_slave_0: left promiscuous mode [ 494.842279][T17075] hsr_slave_1: left promiscuous mode [ 494.844864][T17075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.847209][T17075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.851765][T17075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.854108][T17075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.863399][T17075] veth1_macvtap: left promiscuous mode [ 494.865611][T17075] veth0_macvtap: left promiscuous mode [ 494.867499][T17075] veth1_vlan: left promiscuous mode [ 494.869174][T17075] veth0_vlan: left promiscuous mode [ 495.267905][T17075] team0 (unregistering): Port device team_slave_1 removed [ 495.318836][T17075] team0 (unregistering): Port device team_slave_0 removed [ 495.550441][ T5977] Bluetooth: hci1: command tx timeout [ 495.630324][ T5332] Bluetooth: hci3: command tx timeout [ 495.630393][T25045] Bluetooth: hci0: command tx timeout [ 495.633337][ T5977] Bluetooth: hci2: command tx timeout [ 495.689300][T25050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.692324][T25050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.703957][T25050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.776774][T25042] team0: Port device team_slave_0 added [ 495.836508][T25049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.839454][T25049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.854773][T25049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.861456][T25042] team0: Port device team_slave_1 added [ 495.912959][T25049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.915458][T25049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.924419][T25049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.026315][T25042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.029314][T25042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.040163][T25042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.071770][T25050] hsr_slave_0: entered promiscuous mode [ 496.075222][T25050] hsr_slave_1: entered promiscuous mode [ 496.077919][T25050] debugfs: 'hsr0' already exists in 'hsr' [ 496.081020][T25050] Cannot create hsr debugfs directory [ 496.087306][T25042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.091568][T25042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.105762][T25042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.210984][T25049] hsr_slave_0: entered promiscuous mode [ 496.214434][T25049] hsr_slave_1: entered promiscuous mode [ 496.218154][T25049] debugfs: 'hsr0' already exists in 'hsr' [ 496.221319][T25049] Cannot create hsr debugfs directory [ 496.246274][T25041] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.306745][T25042] hsr_slave_0: entered promiscuous mode [ 496.309472][T25042] hsr_slave_1: entered promiscuous mode [ 496.312242][T25042] debugfs: 'hsr0' already exists in 'hsr' [ 496.314026][T25042] Cannot create hsr debugfs directory [ 496.323246][T25041] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.447548][T25041] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.520350][T25041] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.356468][T25042] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 497.366025][T25049] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 497.374935][T25049] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 497.380285][T25049] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 497.386994][T25049] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 497.453463][T25042] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 497.495750][T25049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.504314][T25049] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.508877][T17075] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.511521][T17075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.519110][T11573] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.521828][T11573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.624194][T25042] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 497.631389][ T5977] Bluetooth: hci1: command tx timeout [ 497.712624][ T5977] Bluetooth: hci0: command tx timeout [ 497.712645][T25045] Bluetooth: hci2: command tx timeout [ 497.712669][T25045] Bluetooth: hci3: command tx timeout [ 497.719961][T25042] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 497.798026][T25049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.849938][T25049] veth0_vlan: entered promiscuous mode [ 497.856522][T25042] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 497.880969][T25042] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 497.939058][T25042] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 497.949706][T25042] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 497.966446][T25049] veth1_vlan: entered promiscuous mode [ 498.023689][T25041] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 498.037099][T25041] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 498.062922][T25041] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 498.097899][T25041] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 498.109116][T25049] veth0_macvtap: entered promiscuous mode [ 498.148079][T25049] veth1_macvtap: entered promiscuous mode [ 498.168032][T25050] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 498.194284][T25050] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 498.214240][T25050] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 498.258592][T25050] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 498.278426][T25049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.308481][T25049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.339311][ T1178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.357593][ T1178] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.380700][ T1178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.387068][ T1178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.393494][T25042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.436618][T25041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.457049][T25042] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.497302][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.500625][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.509072][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.511656][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.531149][T25042] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 498.534877][T25042] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 498.547255][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.547898][T25041] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.550010][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.583299][T11573] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.585522][T11573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.605591][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.608154][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.618129][T25050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.622725][T17060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.628086][T17060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.673400][T25050] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.693927][T17084] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.696223][T17084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.724223][T17075] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.726786][T17075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.760116][T25050] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 498.765163][T25050] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 498.795727][T25042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.844306][T25042] veth0_vlan: entered promiscuous mode [ 498.864584][T25042] veth1_vlan: entered promiscuous mode [ 498.901282][T25042] veth0_macvtap: entered promiscuous mode [ 498.919395][T25042] veth1_macvtap: entered promiscuous mode [ 498.942860][T25050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.963035][T25042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.968657][T25042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.996620][ T1178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.000631][ T1178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.015531][ T1178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.035786][T25041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.049073][ T1178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.130277][T25050] veth0_vlan: entered promiscuous mode [ 499.142033][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.144513][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.152782][T25050] veth1_vlan: entered promiscuous mode [ 499.169077][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.176408][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.199734][T25050] veth0_macvtap: entered promiscuous mode [ 499.203896][T25050] veth1_macvtap: entered promiscuous mode [ 499.210370][T25045] Bluetooth: hci2: unexpected cc 0x1407 length: 4 < 9 [ 499.210805][T25236] netlink: 'syz.1.5458': attribute type 10 has an invalid length. [ 499.229583][T25050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.236453][T25236] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 499.272219][T25236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 499.311199][T25050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.331235][ T75] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.336983][ T75] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.340031][ T75] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.345421][ T40] audit: type=1400 audit(1049330.166:2930): avc: denied { getopt } for pid=25240 comm="syz.2.5452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 499.366698][ T40] audit: type=1400 audit(1049330.166:2931): avc: denied { relabelfrom } for pid=25240 comm="syz.2.5452" name="NETLINK" dev="sockfs" ino=126870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 499.375257][ T40] audit: type=1400 audit(1049330.166:2932): avc: denied { relabelto } for pid=25240 comm="syz.2.5452" name="NETLINK" dev="sockfs" ino=126870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 499.390676][T25041] veth0_vlan: entered promiscuous mode [ 499.396541][ T75] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.467079][T25041] veth1_vlan: entered promiscuous mode [ 499.503548][T25041] veth0_macvtap: entered promiscuous mode [ 499.508432][T25041] veth1_macvtap: entered promiscuous mode [ 499.525651][T11577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.528216][T11577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.541067][T25041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.557913][T25041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.575205][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.579687][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.586204][ T1178] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.596791][ T1178] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.603784][ T40] audit: type=1400 audit(1049330.426:2933): avc: denied { append } for pid=25252 comm="syz.1.5462" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 499.610941][ T1178] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.627939][ T1178] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.667293][T17060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.675564][T17060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.710808][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.713952][T25045] Bluetooth: hci1: command tx timeout [ 499.717117][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.792802][T25045] Bluetooth: hci0: command tx timeout [ 499.792823][ T5332] Bluetooth: hci3: command tx timeout [ 499.870697][T25264] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 499.954971][T25280] binder: 25279:25280 ioctl c0306201 200000000080 returned -14 [ 499.980182][T25284] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 499.985668][T25284] syz.9.5468: attempt to access beyond end of device [ 499.985668][T25284] nbd9: rw=0, sector=64, nr_sectors = 1 limit=0 [ 499.990290][T25284] syz.9.5468: attempt to access beyond end of device [ 499.990290][T25284] nbd9: rw=0, sector=256, nr_sectors = 1 limit=0 [ 499.995912][T25284] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 499.998985][T25284] syz.9.5468: attempt to access beyond end of device [ 499.998985][T25284] nbd9: rw=0, sector=512, nr_sectors = 1 limit=0 [ 500.003371][T25284] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 500.006409][T25284] UDF-fs: warning (device nbd9): udf_load_vrs: No anchor found [ 500.008817][T25284] UDF-fs: Scanning with blocksize 512 failed [ 500.012828][T25284] syz.9.5468: attempt to access beyond end of device [ 500.012828][T25284] nbd9: rw=0, sector=64, nr_sectors = 2 limit=0 [ 500.017016][T25284] syz.9.5468: attempt to access beyond end of device [ 500.017016][T25284] nbd9: rw=0, sector=512, nr_sectors = 2 limit=0 [ 500.021520][T25284] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 500.026002][T25284] syz.9.5468: attempt to access beyond end of device [ 500.026002][T25284] nbd9: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 500.030556][T25284] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 500.034085][T25284] UDF-fs: warning (device nbd9): udf_load_vrs: No anchor found [ 500.036533][T25284] UDF-fs: Scanning with blocksize 1024 failed [ 500.038708][T25284] syz.9.5468: attempt to access beyond end of device [ 500.038708][T25284] nbd9: rw=0, sector=64, nr_sectors = 4 limit=0 [ 500.043333][T25284] syz.9.5468: attempt to access beyond end of device [ 500.043333][T25284] nbd9: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 500.047505][T25284] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 500.050920][T25284] syz.9.5468: attempt to access beyond end of device [ 500.050920][T25284] nbd9: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 500.055308][T25284] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 500.058263][T25284] UDF-fs: warning (device nbd9): udf_load_vrs: No anchor found [ 500.060649][T25284] UDF-fs: Scanning with blocksize 2048 failed [ 500.063068][T25284] syz.9.5468: attempt to access beyond end of device [ 500.063068][T25284] nbd9: rw=0, sector=64, nr_sectors = 8 limit=0 [ 500.067271][T25284] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 500.070828][T25284] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 500.074934][T25284] UDF-fs: warning (device nbd9): udf_load_vrs: No anchor found [ 500.077819][T25284] UDF-fs: Scanning with blocksize 4096 failed [ 500.079898][T25284] UDF-fs: warning (device nbd9): udf_fill_super: No partition found (1) [ 500.137263][T25288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.709258][ T40] audit: type=1400 audit(1049331.525:2934): avc: denied { accept } for pid=25317 comm="syz.1.5478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 500.797045][T25325] block nbd9: Unsupported socket: shutdown callout must be supported. [ 500.800609][T25325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=794 sclass=netlink_route_socket pid=25325 comm=syz.9.5479 [ 500.897893][T25328] netlink: 'syz.4.5482': attribute type 1 has an invalid length. [ 500.900639][T25328] netlink: 600 bytes leftover after parsing attributes in process `syz.4.5482'. [ 500.986203][T25339] lo speed is unknown, defaulting to 1000 [ 501.413132][T25353] xt_policy: too many policy elements [ 501.761181][ T40] audit: type=1326 audit(1049332.575:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25364 comm="syz.9.5491" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a1a38ebe9 code=0x0 [ 502.436105][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.848815][T25384] netlink: 'syz.9.5494': attribute type 10 has an invalid length. [ 502.851608][ T5332] Bluetooth: hci0: unexpected cc 0x1407 length: 4 < 9 [ 502.853826][ T6021] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 502.863725][T25384] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 502.867197][T25384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 503.010076][ T6021] usb 6-1: device descriptor read/64, error -71 [ 503.231724][T25400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5499'. [ 503.280047][ T6021] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 503.359965][T25402] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 503.421216][ T6021] usb 6-1: device descriptor read/64, error -71 [ 503.434381][T25413] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5502'. [ 503.527592][ T6021] usb usb6-port1: attempt power cycle [ 503.572280][T25420] lo speed is unknown, defaulting to 1000 [ 503.663000][T25436] fuse: Unknown parameter ''rPd(00000000000000000000' [ 503.813193][T25446] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 503.886786][ T6021] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 503.919181][ T6021] usb 6-1: device descriptor read/8, error -71 [ 504.174559][ T6021] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 504.204994][ T6021] usb 6-1: device descriptor read/8, error -71 [ 504.334738][ T6021] usb usb6-port1: unable to enumerate USB device [ 504.559968][T25458] lo speed is unknown, defaulting to 1000 [ 504.667105][T25464] tmpfs: Bad value for 'mpol' [ 504.733995][ T5332] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 504.742430][T25468] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5516'. [ 504.789156][T25470] lo speed is unknown, defaulting to 1000 [ 505.178171][ T40] audit: type=1400 audit(1049335.983:2936): avc: granted { setsecparam } for pid=25473 comm="syz.2.5517" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 505.523988][ T40] audit: type=1326 audit(1049336.333:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25481 comm="syz.1.5520" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb3358ebe9 code=0x0 [ 506.444620][T25501] netlink: 120 bytes leftover after parsing attributes in process `syz.1.5524'. [ 507.376732][T25506] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 507.379115][T25511] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 507.413294][T25504] netlink: 'syz.1.5525': attribute type 2 has an invalid length. [ 507.415780][T25504] netlink: 'syz.1.5525': attribute type 8 has an invalid length. [ 507.427754][T25504] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.5525'. [ 507.879464][T25535] trusted_key: encrypted_key: insufficient parameters specified [ 507.972683][T15574] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 508.019067][T25535] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5531'. [ 508.126336][ T840] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 508.136593][T15574] usb 14-1: device descriptor read/64, error -71 [ 508.280349][T25550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5533'. [ 508.283395][T25550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5533'. [ 508.289330][T17084] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.289333][T25550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5533'. [ 508.289354][T17084] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.292300][T25550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5533'. [ 508.292384][ T840] usb 9-1: Using ep0 maxpacket: 8 [ 508.294949][T17084] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.310262][T17084] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.326432][ T840] usb 9-1: config index 0 descriptor too short (expected 12306, got 18) [ 508.329102][ T840] usb 9-1: config 102 has too many interfaces: 120, using maximum allowed: 32 [ 508.332028][ T840] usb 9-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 508.352089][ T840] usb 9-1: config 102 has 0 interfaces, different from the descriptor's value: 120 [ 508.362847][ T840] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 508.365767][ T840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.376474][ T840] usb 9-1: Product: syz [ 508.377847][ T840] usb 9-1: Manufacturer: syz [ 508.379384][ T840] usb 9-1: SerialNumber: syz [ 508.406445][T15574] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 508.491561][T25556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5535'. [ 508.499221][T25556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59477 sclass=netlink_route_socket pid=25556 comm=syz.2.5535 [ 508.578143][T15574] usb 14-1: device descriptor read/64, error -71 [ 508.704905][T15574] usb usb14-port1: attempt power cycle [ 509.066910][T15574] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 509.107559][T15574] usb 14-1: device descriptor read/8, error -71 [ 509.111077][ T840] usb 9-1: USB disconnect, device number 18 [ 509.357220][T15574] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 509.415703][T15574] usb 14-1: device descriptor read/8, error -71 [ 509.441431][T25584] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5539'. [ 509.469570][T25585] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 509.479791][T25585] SELinux: failed to load policy [ 509.537177][T15574] usb usb14-port1: unable to enumerate USB device [ 509.576892][ T40] audit: type=1400 audit(1049340.381:2938): avc: denied { create } for pid=25589 comm="syz.2.5542" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 510.387921][T13250] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 510.500007][ T5332] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 510.502545][ T5332] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 510.518483][T13250] usb 6-1: device descriptor read/64, error -71 [ 510.778578][T13250] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 510.917937][T13250] usb 6-1: device descriptor read/64, error -71 [ 511.027905][T13250] usb usb6-port1: attempt power cycle [ 511.037265][T25639] tipc: Started in network mode [ 511.041229][T25639] tipc: Node identity 7f000001, cluster identity 4711 [ 511.044745][T25639] tipc: Enabled bearer , priority 10 [ 511.062665][T25639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5553'. [ 511.075089][T25639] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 511.081214][T25639] tipc: Enabled bearer , priority 10 [ 511.136065][T25643] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 511.358611][T25631] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 511.360915][T25631] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 511.363195][T25631] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 511.374699][T25631] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 511.385481][T25631] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 511.387636][T25631] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 511.399651][T13250] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 511.401766][T25631] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 511.412067][T25631] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 511.414099][T25631] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 511.423548][T25631] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 511.429799][T13250] usb 6-1: device descriptor read/8, error -71 [ 511.668370][T13250] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 511.672917][T25045] Bluetooth: hci1: unexpected cc 0x1407 length: 4 < 9 [ 511.675096][T25045] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 511.675672][T25661] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 511.679318][T25661] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 511.692074][T25661] vhci_hcd vhci_hcd.0: Device attached [ 511.703262][T25663] vhci_hcd: connection closed [ 511.703450][T17060] vhci_hcd: stop threads [ 511.706322][T17060] vhci_hcd: release socket [ 511.707655][T13250] usb 6-1: device descriptor read/8, error -71 [ 511.707685][T17060] vhci_hcd: disconnect device [ 511.819915][T13250] usb usb6-port1: unable to enumerate USB device [ 511.854546][ T40] audit: type=1400 audit(1049342.660:2939): avc: denied { mounton } for pid=25669 comm="syz.9.5557" path="/31/file0" dev="gadgetfs" ino=127555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 511.863963][T25672] netlink: 'syz.2.5563': attribute type 1 has an invalid length. [ 511.866467][T25672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.068892][T15574] tipc: Node number set to 2130706433 [ 512.138528][T25694] __nla_validate_parse: 1 callbacks suppressed [ 512.138540][T25694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5570'. [ 512.193871][T25696] binder: BINDER_SET_CONTEXT_MGR already set [ 512.202506][T25696] binder: 25695:25696 ioctl 4018620d 200000000040 returned -16 [ 512.217424][T25692] lo speed is unknown, defaulting to 1000 [ 512.296323][T25705] bio_check_eod: 2 callbacks suppressed [ 512.296333][T25705] syz.2.5573: attempt to access beyond end of device [ 512.296333][T25705] loop2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 512.304725][T25707] program syz.4.5574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 512.307749][T25705] qnx4: unable to read the superblock [ 512.310598][ T40] audit: type=1400 audit(1049343.119:2940): avc: denied { map } for pid=25704 comm="syz.4.5574" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 513.124891][T25729] random: crng reseeded on system resumption [ 513.184906][T25730] Restarting kernel threads ... [ 513.186892][T25730] Done restarting kernel threads. [ 513.399078][T25045] Bluetooth: hci2: command 0x0c1a tx timeout [ 513.479536][T25045] Bluetooth: hci3: command 0x0c1a tx timeout [ 515.480163][T25045] Bluetooth: hci2: command 0x0c1a tx timeout [ 515.560602][T25045] Bluetooth: hci3: command 0x0c1a tx timeout [ 517.489404][T25745] 9pnet_fd: Insufficient options for proto=fd [ 517.561282][T25045] Bluetooth: hci2: command 0x0c1a tx timeout [ 517.579768][T25045] Bluetooth: hci3: unexpected cc 0x1407 length: 4 < 9 [ 517.582083][T25045] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 518.004325][T25775] vlan2: entered promiscuous mode [ 518.005907][T25775] veth1_to_team: entered promiscuous mode [ 518.007716][T25775] vlan2: entered allmulticast mode [ 518.009264][T25775] veth1_to_team: entered allmulticast mode [ 518.054493][ T40] audit: type=1400 audit(1049348.867:2941): avc: denied { bind } for pid=25778 comm="syz.1.5594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 518.289233][ T40] audit: type=1400 audit(1049349.096:2942): avc: denied { getopt } for pid=25795 comm="syz.1.5598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 518.986650][T25805] vlan2: entered promiscuous mode [ 518.988773][T25805] bridge0: entered promiscuous mode [ 519.006832][T25807] bridge1: entered promiscuous mode [ 519.122855][T25815] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25815 comm=syz.1.5605 [ 519.128374][T25815] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=25815 comm=syz.1.5605 [ 519.941445][T25818] loop2: detected capacity change from 0 to 7 [ 519.948265][ C0] blk_print_req_error: 31 callbacks suppressed [ 519.948278][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 519.953515][ C0] buffer_io_error: 23 callbacks suppressed [ 519.953525][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 519.959346][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 519.963133][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 519.966922][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 519.970025][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 519.973058][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 519.976073][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 519.980211][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 519.983172][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 519.986107][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 519.988986][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 519.991838][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 519.995009][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 519.997680][T25818] ldm_validate_partition_table(): Disk read failed. [ 520.000393][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 520.003538][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 520.006616][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 520.009700][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 520.012710][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 520.015812][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 520.018794][T25818] Dev loop2: unable to read RDB block 0 [ 520.020982][T25818] loop2: unable to read partition table [ 520.024023][T25818] loop2: partition table beyond EOD, truncated [ 520.027501][T25818] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 520.069296][T25824] tmpfs: Bad value for 'mpol' [ 520.075223][T25045] Bluetooth: unknown link type 40 [ 520.077495][T25045] Bluetooth: hci3: connection err: -111 [ 520.090580][T25826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 520.159430][T25822] binder: 25819:25822 unknown command 0 [ 520.161599][T25822] binder: 25819:25822 ioctl c0306201 200000000080 returned -22 [ 520.796540][T25820] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 520.801036][T25820] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 520.809527][T25820] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 520.812321][T25820] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 520.823684][T25835] program syz.2.5612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 520.827590][T25835] ata1.00: invalid service action 31 [ 520.951639][T25839] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5614'. [ 520.956521][T25839] openvswitch: netlink: Key 9 has unexpected len 8 expected 4 [ 520.992429][T25841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5615'. [ 521.001555][T25841] openvswitch: netlink: Flow actions attr not present in new flow. [ 521.207902][T25852] netlink: 'syz.9.5618': attribute type 3 has an invalid length. [ 521.218412][T25850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5617'. [ 521.240855][T25850] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 521.246841][T25850] bond1: (slave vti0): Error -95 calling set_mac_address [ 521.270983][T25855] netlink: 212376 bytes leftover after parsing attributes in process `syz.9.5618'. [ 521.301456][T25857] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5619'. [ 521.413221][ T40] audit: type=1400 audit(1049352.225:2943): avc: denied { setopt } for pid=25861 comm="syz.2.5621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 521.481796][T25865] SELinux: syz.2.5622 (25865) set checkreqprot to 1. This is no longer supported. [ 521.937261][T25885] Bluetooth: MGMT ver 1.23 [ 522.017109][T25045] Bluetooth: hci3: unexpected cc 0x1407 length: 4 < 9 [ 522.020409][T25045] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 522.289974][T25906] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 522.289974][T25906] The task syz.1.5637 (25906) triggered the difference, watch for misbehavior. [ 522.413062][T25909] fuse: Unknown parameter 'hash' [ 522.416118][ T40] audit: type=1400 audit(1049353.224:2944): avc: denied { setattr } for pid=25908 comm="syz.2.5628" path="/dev/ttyS3" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 522.533678][T15574] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 522.694599][T15574] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 522.698484][T15574] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 522.701801][T15574] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.722032][T15574] usb 6-1: config 0 descriptor?? [ 522.730894][T25906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 522.773206][T25045] Bluetooth: hci3: unexpected cc 0x1407 length: 4 < 9 [ 522.775627][T25045] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 522.843870][ T5332] Bluetooth: hci1: command 0x0c1a tx timeout [ 522.846370][T25045] Bluetooth: hci2: command 0x0c1a tx timeout [ 522.910693][T25922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.164209][T15574] elan 0003:04F3:0755.0011: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 523.260542][T15574] usb 6-1: USB disconnect, device number 35 [ 523.271725][T25925] fido_id[25925]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/6-1/report_descriptor': No such file or directory [ 523.327921][T25928] netlink: del zone limit has 4 unknown bytes [ 523.365299][ T40] audit: type=1400 audit(1049354.174:2945): avc: denied { setattr } for pid=25926 comm="syz.1.5644" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 523.894404][T15574] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 524.044294][T15574] usb 9-1: Using ep0 maxpacket: 8 [ 524.048008][T15574] usb 9-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 524.052484][T15574] usb 9-1: config 1 interface 0 has no altsetting 0 [ 524.058534][T15574] usb 9-1: New USB device found, idVendor=0dfc, idProduct=0106, bcdDevice= 0.40 [ 524.061561][T15574] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.064692][T15574] usb 9-1: Product: М [ 524.066088][T15574] usb 9-1: Manufacturer: 풡歒崠䪄槎㶮ᦆ檖얆ꬬ淏訡ଝ뫗覺ᇥꅎ蒲쫃⡤鿳௄찡ꓹ跪㹡跧옇닞額瀞솂㻱幽፝⓭럭≧쥆 [ 524.071283][T15574] usb 9-1: SerialNumber: ѕ [ 524.181466][T25045] Bluetooth: hci2: unexpected cc 0x1407 length: 4 < 9 [ 524.183836][T25045] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 524.251128][T25955] netlink: 596 bytes leftover after parsing attributes in process `syz.1.5653'. [ 524.489179][T15574] usbhid 9-1:1.0: can't add hid device: -71 [ 524.493438][T15574] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 524.499710][T15574] usb 9-1: USB disconnect, device number 19 [ 524.738438][T25965] kvm: kvm [25964]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0x60000001 [ 524.742049][T25965] kvm: kvm [25964]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0x60000001 [ 524.749230][T25967] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 524.752426][T25967] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 524.768129][T25965] kvm: kvm [25964]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x60000001 [ 524.789548][T25965] kvm: kvm [25964]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0x60000001 [ 524.792982][T25965] kvm: kvm [25964]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0x60000001 [ 524.811891][T25965] kvm_intel: kvm [25964]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x1d9) = 0x60000001 [ 524.924844][T25045] Bluetooth: hci1: command 0x0c1a tx timeout [ 525.352274][T25974] lo speed is unknown, defaulting to 1000 [ 525.378386][T25973] delete_channel: no stack [ 525.430456][T25979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5662'. [ 526.194604][T26011] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 526.203518][T26011] overlayfs: missing 'lowerdir' [ 526.243538][ T40] audit: type=1400 audit(1049357.042:2946): avc: denied { setattr } for pid=26013 comm="syz.2.5672" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=134420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 526.435799][T13250] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 526.573581][T26025] devpts: Bad value for 'max' [ 526.591435][T13250] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 526.599808][T26027] netlink: 'syz.1.5676': attribute type 2 has an invalid length. [ 526.599897][T13250] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.609458][T13250] usb 9-1: Product: syz [ 526.611077][T13250] usb 9-1: Manufacturer: syz [ 526.612594][T13250] usb 9-1: SerialNumber: syz [ 526.622934][T13250] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 526.639318][ T6040] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 526.805708][T15574] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 526.916579][T26047] orangefs: client-core tried to read wrong size [ 526.955846][T15574] usb 7-1: Using ep0 maxpacket: 8 [ 526.962767][T15574] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 526.996058][T15574] usb 7-1: config 0 has no interface number 0 [ 526.999191][T15574] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 527.003961][T15574] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 527.014009][T15574] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 527.018562][T25045] Bluetooth: hci1: command 0x0c1a tx timeout [ 527.023486][T15574] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 527.035827][T15574] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 527.040066][T15574] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 527.042821][T15574] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.052187][T15574] usb 7-1: config 0 descriptor?? [ 527.057218][T15574] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 527.073225][T26056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5684'. [ 527.124979][T26056] lo speed is unknown, defaulting to 1000 [ 527.188380][ T40] audit: type=1400 audit(1049357.992:2947): avc: denied { connect } for pid=26055 comm="syz.1.5684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 527.261348][T26024] ldusb 7-1:0.55: Couldn't submit interrupt_in_urb -90 [ 527.268727][T15574] usb 7-1: USB disconnect, device number 13 [ 527.271848][T15574] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 527.566319][T13250] usb 9-1: USB disconnect, device number 20 [ 527.681154][T26068] fuse: Unknown parameter 'Cd' [ 527.726238][ T6040] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 527.729219][ T6040] ath9k_htc: Failed to initialize the device [ 527.733182][T13250] usb 9-1: ath9k_htc: USB layer deinitialized [ 527.887314][ T40] audit: type=1400 audit(1049358.692:2948): avc: denied { map } for pid=26071 comm="syz.1.5687" path="/proc/261/net/pfkey" dev="proc" ino=4026535716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 527.976879][T26079] SELinux: Context system_u:object_r:gpg_exec_t:s0 is not valid (left unmapped). [ 527.980166][ T40] audit: type=1400 audit(1049358.782:2949): avc: denied { relabelto } for pid=26078 comm="syz.2.5690" name="file0" dev="tmpfs" ino=334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:gpg_exec_t:s0" [ 527.980502][T26080] 9pnet_fd: Insufficient options for proto=fd [ 527.992377][ T40] audit: type=1400 audit(1049358.782:2950): avc: denied { associate } for pid=26078 comm="syz.2.5690" name="file0" dev="tmpfs" ino=334 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:gpg_exec_t:s0" [ 528.003989][T26082] 9pnet_fd: Insufficient options for proto=fd [ 528.020964][ T40] audit: type=1400 audit(1049358.782:2951): avc: denied { mounton } for pid=26078 comm="syz.2.5690" path="/59/file0" dev="tmpfs" ino=334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:gpg_exec_t:s0" [ 528.024380][T26081] netlink: set zone limit has 4 unknown bytes [ 528.032511][ T40] audit: type=1400 audit(1049358.812:2952): avc: denied { rmdir } for pid=26078 comm="syz.2.5690" name="file0" dev="tmpfs" ino=334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:gpg_exec_t:s0" [ 528.082630][T26085] veth1_to_batadv: entered promiscuous mode [ 528.137002][T26089] syz.2.5693: attempt to access beyond end of device [ 528.137002][T26089] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 528.146375][T26089] efs: cannot read volume header [ 528.275273][T26101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5696'. [ 528.390738][T26096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5696'. [ 528.405992][T26096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5696'. [ 528.421881][T26096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5696'. [ 528.426203][T26096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5696'. [ 528.434524][T26096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5696'. [ 528.764763][T26114] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5702'. [ 528.932028][T26123] : entered promiscuous mode [ 529.064073][T26130] SELinux: Context system_u:object_r:gpg_agent_exec_t:s0 is not valid (left unmapped). [ 529.087183][ T40] audit: type=1400 audit(1049359.891:2953): avc: denied { relabelto } for pid=26129 comm="syz.1.5705" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 529.096106][ T40] audit: type=1400 audit(1049359.891:2954): avc: denied { associate } for pid=26129 comm="syz.1.5705" name="fuse" dev="devtmpfs" ino=105 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 529.291019][ T40] audit: type=1400 audit(1049360.091:2955): avc: denied { read } for pid=26134 comm="syz.4.5709" name="file0" dev="9p" ino=35913982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 529.499873][T26145] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5712'. [ 529.659891][T26151] tunl0: entered allmulticast mode [ 529.664821][T26151] bridge0: port 3(syz_tun) entered blocking state [ 529.673124][T25045] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 529.677137][T26151] bridge0: port 3(syz_tun) entered disabled state [ 529.680020][T26151] syz_tun: entered allmulticast mode [ 529.683126][T26151] syz_tun: entered promiscuous mode [ 529.685714][T26151] bridge0: port 3(syz_tun) entered blocking state [ 529.688504][T26151] bridge0: port 3(syz_tun) entered forwarding state [ 529.948493][T26158] netlink: 'syz.9.5716': attribute type 2 has an invalid length. [ 529.950979][T26158] netlink: 100 bytes leftover after parsing attributes in process `syz.9.5716'. [ 530.180380][T13250] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 530.238702][T26159] netlink: 'syz.9.5716': attribute type 2 has an invalid length. [ 530.262994][T17084] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.341342][T17084] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.372963][T13250] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 530.376236][T13250] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 530.388598][T13250] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 530.395983][T13250] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 530.407827][ T5332] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 530.413022][T13250] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.415527][ T5332] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 530.418248][T13250] usb 6-1: Product: syz [ 530.419660][T13250] usb 6-1: Manufacturer: syz [ 530.421206][T13250] usb 6-1: SerialNumber: syz [ 530.422687][ T5332] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 530.428327][T13250] cdc_ncm 6-1:1.0: skipping garbage [ 530.430009][T13250] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 530.432399][T13250] cdc_ncm 6-1:1.0: bind() failure [ 530.435457][ T5332] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 530.443685][ T5332] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 530.489890][T26169] nfs: Unknown parameter '' [ 530.633913][T17084] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.887965][T26174] netlink: 'syz.9.5722': attribute type 6 has an invalid length. [ 530.890485][T26174] netlink: 'syz.9.5722': attribute type 5 has an invalid length. [ 530.893039][T26174] netlink: 'syz.9.5722': attribute type 4 has an invalid length. [ 530.926060][T17084] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.161945][T17084] bridge_slave_1: left allmulticast mode [ 531.164467][T17084] bridge_slave_1: left promiscuous mode [ 531.168619][T17084] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.179733][T17084] bridge_slave_0: left allmulticast mode [ 531.184369][T17084] bridge_slave_0: left promiscuous mode [ 531.190606][T17084] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.111262][ T40] audit: type=1800 audit(1049362.909:2956): pid=26189 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.5725" name="/" dev="9p" ino=2 res=0 errno=0 [ 532.249702][T26191] netlink: 'syz.9.5726': attribute type 1 has an invalid length. [ 532.257890][T17084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.261023][T26192] netlink: 'syz.9.5726': attribute type 1 has an invalid length. [ 532.263404][T26192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.276252][T26191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.279599][T17084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.293967][T17084] bond0 (unregistering): Released all slaves [ 532.297989][T17084] bond1 (unregistering): Released all slaves [ 532.340882][T26163] lo speed is unknown, defaulting to 1000 [ 532.358620][T26196] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 532.362151][T26194] IPVS: stopping backup sync thread 26196 ... [ 532.469605][T26163] chnl_net:caif_netlink_parms(): no params data found [ 532.550981][T17084] : left promiscuous mode [ 532.608995][T25045] Bluetooth: hci3: command tx timeout [ 532.635815][T26163] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.641153][T26163] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.647023][T26163] bridge_slave_0: entered allmulticast mode [ 532.659281][T26163] bridge_slave_0: entered promiscuous mode [ 532.672421][T26163] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.674675][T26163] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.676922][T26163] bridge_slave_1: entered allmulticast mode [ 532.689590][T26163] bridge_slave_1: entered promiscuous mode [ 532.776253][ T840] usb 6-1: USB disconnect, device number 36 [ 532.903753][T26163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.910676][T26163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.012047][T26163] team0: Port device team_slave_0 added [ 533.021170][T26163] team0: Port device team_slave_1 added [ 533.045953][T26119] syz.2.5703 (26119): drop_caches: 2 [ 533.066298][T26163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.071029][T26163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.086352][T26163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.127978][T26163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.140410][T26163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.149962][T26163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.174273][T17084] hsr_slave_0: left promiscuous mode [ 533.195121][T17084] hsr_slave_1: left promiscuous mode [ 533.197282][T17084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.207656][T17084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.216918][T17084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.220785][T17084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.428628][T17084] veth1_macvtap: left promiscuous mode [ 533.432036][T17084] veth0_macvtap: left promiscuous mode [ 533.433771][T17084] veth1_vlan: left promiscuous mode [ 533.435407][T17084] veth0_vlan: left promiscuous mode [ 533.439894][T26227] overlayfs: cannot append lower layer [ 533.459025][T26227] futex_wake_op: syz.9.5731 tries to shift op by 32; fix this program [ 533.499500][ T40] audit: type=1400 audit(1049364.299:2957): avc: denied { read write } for pid=26229 comm="syz.9.5732" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 533.509297][ T40] audit: type=1400 audit(1049364.299:2958): avc: denied { open } for pid=26229 comm="syz.9.5732" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 533.538826][ T40] audit: type=1400 audit(1049364.329:2959): avc: denied { ioctl } for pid=26229 comm="syz.9.5732" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 534.219127][T17084] team0 (unregistering): Port device team_slave_1 removed [ 534.312252][T17084] team0 (unregistering): Port device team_slave_0 removed [ 534.556001][T26240] sctp: [Deprecated]: syz.2.5735 (pid 26240) Use of int in maxseg socket option. [ 534.556001][T26240] Use struct sctp_assoc_value instead [ 534.689775][T25045] Bluetooth: hci3: command tx timeout [ 535.047349][T26240] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 535.227106][T13250] IPVS: starting estimator thread 0... [ 535.319888][T26246] IPVS: using max 54 ests per chain, 129600 per kthread [ 535.804670][T26245] tipc: Bearer : already 2 bearers with priority 10 [ 535.807015][T26245] tipc: Bearer : trying with adjusted priority [ 535.809455][T26245] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 535.812049][T26245] tipc: Enabled bearer , priority 9 [ 535.815920][T26163] hsr_slave_0: entered promiscuous mode [ 535.818161][T26163] hsr_slave_1: entered promiscuous mode [ 535.820510][T26163] debugfs: 'hsr0' already exists in 'hsr' [ 535.822419][T26163] Cannot create hsr debugfs directory [ 535.900255][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 535.940688][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 535.960627][T26250] __nla_validate_parse: 3 callbacks suppressed [ 535.960640][T26250] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5739'. [ 536.094078][T26163] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.097394][T26163] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 536.104838][T26163] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 536.207110][T26163] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.210777][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 536.214819][T26163] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 536.219041][T26163] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 536.375774][T26276] tipc: Enabling of bearer rejected, already enabled [ 536.379277][ T40] audit: type=1400 audit(1049367.167:2960): avc: granted { setsecparam } for pid=26273 comm="syz.2.5742" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 536.475806][T26163] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.479135][T26163] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 536.490357][T26163] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 536.565845][T26163] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.569178][T26163] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 536.574961][T26163] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 536.674916][T26163] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 536.687637][T26163] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 536.695758][T26163] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 536.703564][T26163] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 536.736033][T26163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.740661][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 536.744636][T26163] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.755421][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.757738][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.766989][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.769277][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.772017][T25045] Bluetooth: hci3: command tx timeout [ 536.941034][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 536.948113][T26163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.971665][T26163] veth0_vlan: entered promiscuous mode [ 536.975850][T26163] veth1_vlan: entered promiscuous mode [ 536.988995][T26163] veth0_macvtap: entered promiscuous mode [ 536.995221][T26163] veth1_macvtap: entered promiscuous mode [ 537.006459][T26163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.011962][T26163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.024805][ T1178] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.027972][ T1178] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.033600][ T1178] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.036392][ T1178] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.087535][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.090267][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.109479][T11577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.122629][T11577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.231377][T26317] netlink: 344 bytes leftover after parsing attributes in process `syz.3.5746'. [ 537.407867][T26323] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 537.409946][T26323] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 537.413077][T26323] vhci_hcd vhci_hcd.0: Device attached [ 537.415627][T26323] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 537.417692][T26323] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 537.420044][T26323] vhci_hcd vhci_hcd.0: Device attached [ 537.422924][T26323] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 537.424985][T26323] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 537.427374][T26323] vhci_hcd vhci_hcd.0: Device attached [ 537.431242][T26329] vhci_hcd: connection closed [ 537.431384][T26326] vhci_hcd: connection closed [ 537.431515][ T75] vhci_hcd: stop threads [ 537.433077][T26324] vhci_hcd: connection closed [ 537.440281][ T75] vhci_hcd: release socket [ 537.443661][ T75] vhci_hcd: disconnect device [ 537.450268][ T75] vhci_hcd: stop threads [ 537.453423][ T75] vhci_hcd: release socket [ 537.454896][ T75] vhci_hcd: disconnect device [ 537.461400][ T75] vhci_hcd: stop threads [ 537.463804][ T75] vhci_hcd: release socket [ 537.465246][ T75] vhci_hcd: disconnect device [ 537.811359][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 537.981258][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 538.331503][ T6040] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 538.421909][T26371] netlink: 'syz.3.5757': attribute type 1 has an invalid length. [ 538.440288][T26372] macvlan2: entered promiscuous mode [ 538.442906][T26372] macvlan2: entered allmulticast mode [ 538.483030][ T6040] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 538.485826][ T6040] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 538.492413][ T6040] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 538.495504][ T6040] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 538.499442][ T6040] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 538.506282][ T6040] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 538.509590][ T6040] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 538.513071][ T6040] usb 6-1: Product: syz [ 538.514518][ T6040] usb 6-1: Manufacturer: syz [ 538.519304][ T6040] cdc_wdm 6-1:1.0: skipping garbage [ 538.521173][ T6040] cdc_wdm 6-1:1.0: skipping garbage [ 538.530375][ T6040] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 538.534490][ T6040] cdc_wdm 6-1:1.0: Unknown control protocol [ 538.555394][T26377] trusted_key: encrypted_key: insufficient parameters specified [ 538.718529][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 538.721413][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 538.724438][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 538.727238][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 538.730213][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 538.733022][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 538.736956][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 538.739789][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 538.742703][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 538.745512][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 538.748311][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 538.751277][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 538.754259][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 538.757212][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 538.759960][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 538.762676][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 538.765816][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 538.768576][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 538.771272][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 538.774074][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 538.781358][ T6040] usb 6-1: USB disconnect, device number 37 [ 538.784177][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 538.851787][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 538.854307][T25045] Bluetooth: hci3: command tx timeout [ 539.111260][T26388] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=26388 comm=syz.9.5763 [ 539.115484][ T40] audit: type=1400 audit(1049369.916:2961): avc: denied { getopt } for pid=26387 comm="syz.9.5763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 539.244141][T26394] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 539.247061][T26394] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 539.249791][ T40] audit: type=1400 audit(1049370.046:2962): avc: denied { firmware_load } for pid=26393 comm="syz.3.5764" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 539.259562][T26394] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 539.533032][T26402] vlan2: entered promiscuous mode [ 539.535839][T26402] vlan2: entered allmulticast mode [ 539.540567][T26402] hsr_slave_1: entered allmulticast mode [ 539.795253][ T54] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 539.955014][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 539.988196][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 539.991634][ T54] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 539.997131][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.006737][ T54] usb 6-1: config 0 descriptor?? [ 540.062272][ C2] net_ratelimit: 2 callbacks suppressed [ 540.062284][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 540.096863][T26413] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5770'. [ 540.277972][ T54] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 540.512154][T26422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=26422 comm=syz.3.5772 [ 540.532275][T26422] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 540.667277][ T6040] usb 6-1: USB disconnect, device number 38 [ 540.708778][T26431] syz.9.5777: attempt to access beyond end of device [ 540.708778][T26431] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 540.712929][T26431] (syz.9.5777,26431,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 540.715315][T26431] (syz.9.5777,26431,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 540.717600][T26431] (syz.9.5777,26431,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 540.720334][T26431] (syz.9.5777,26431,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 540.914545][T26436] smc: net device bond0 applied user defined pnetid SYZ0 [ 540.932753][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 541.014386][ T40] audit: type=1400 audit(1049371.815:2963): avc: denied { remount } for pid=26441 comm="syz.3.5781" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 541.103077][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 541.227709][T26466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5787'. [ 541.373193][T26477] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 541.723632][T26493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=26493 comm=syz.1.5796 [ 541.775747][T26497] tmpfs: Bad value for 'mpol' [ 541.973386][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 542.143378][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 543.013808][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 543.173966][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 544.054350][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 544.214558][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 544.388053][ T40] audit: type=1400 audit(1049375.173:2964): avc: denied { create } for pid=26515 comm="syz.2.5801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 544.452694][T26528] trusted_key: encrypted_key: insufficient parameters specified [ 544.471269][T26530] ubi: mtd0 is already attached to ubi31 [ 544.527591][T26535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5805'. [ 544.825069][ T840] IPVS: starting estimator thread 0... [ 544.897627][ T40] audit: type=1400 audit(1049375.693:2965): avc: denied { getopt } for pid=26547 comm="syz.3.5811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 544.897778][T26550] tmpfs: Invalid gid '0x00000000ffffffff' [ 544.909764][T26552] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5812'. [ 544.914359][ T40] audit: type=1400 audit(1049375.693:2966): avc: denied { mounton } for pid=26547 comm="syz.3.5811" path="/25/file0" dev="tmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 544.934916][T26546] IPVS: using max 54 ests per chain, 129600 per kthread [ 544.947329][T26555] random: crng reseeded on system resumption [ 545.080059][T26559] xt_policy: too many policy elements [ 545.087715][T26559] net_ratelimit: 1 callbacks suppressed [ 545.087726][T26559] openvswitch: netlink: Key type 7170 is out of range max 32 [ 545.094859][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 545.096096][T26558] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 545.153163][T26563] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 545.155532][T26563] overlayfs: failed to set xattr on upper [ 545.157345][T26563] overlayfs: ...falling back to redirect_dir=nofollow. [ 545.159505][T26563] overlayfs: ...falling back to index=off. [ 545.161390][T26563] overlayfs: ...falling back to uuid=null. [ 545.163283][T26563] overlayfs: ...falling back to xino=off. [ 545.265230][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 545.279377][T26570] random: crng reseeded on system resumption [ 545.289702][T26570] Unrecognized hibernate image header format! [ 545.291679][T26570] PM: hibernation: Image mismatch: architecture specific data [ 545.442142][T26572] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5820'. [ 545.454468][T26572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.455332][T26574] fuse: Unknown parameter '/jfpNsW' [ 546.135482][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 546.295486][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 546.442042][T26572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.536977][T26600] openvswitch: netlink: Key type 12298 is out of range max 32 [ 546.546332][T26601] openvswitch: netlink: Key type 12298 is out of range max 32 [ 546.582208][T26602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5828'. [ 546.633219][T26604] Bluetooth: MGMT ver 1.23 [ 546.635269][T26604] Bluetooth: hci0: invalid len left 7, exp >= 13 [ 546.643051][ T40] audit: type=1400 audit(1049377.432:2967): avc: denied { recv } for pid=26596 comm="syz.1.5828" saddr=172.20.20.170 src=20001 daddr=172.20.20.170 dest=20001 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 546.659471][ T40] audit: type=1400 audit(1049377.442:2968): avc: denied { ioctl } for pid=26603 comm="syz.9.5830" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 546.668658][ T40] audit: type=1400 audit(1049377.462:2969): avc: denied { recv } for pid=5667 comm="dbus-daemon" saddr=127.0.0.1 src=33318 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 546.701513][T26598] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26598 comm=syz.1.5828 [ 546.713360][T26598] FAT-fs (sr0): bogus number of reserved sectors [ 546.715292][T26598] FAT-fs (sr0): Can't find a valid FAT filesystem [ 546.720337][ T40] audit: type=1400 audit(1049377.472:2970): avc: denied { bind } for pid=26605 comm="syz.2.5829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 546.744145][ T40] audit: type=1400 audit(1049377.472:2971): avc: denied { accept } for pid=26605 comm="syz.2.5829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 546.754326][ T40] audit: type=1400 audit(1049377.472:2972): avc: denied { read } for pid=26605 comm="syz.2.5829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 546.791577][ T40] audit: type=1400 audit(1049377.472:2973): avc: denied { create } for pid=26605 comm="syz.2.5829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 546.891373][T26617] gtp0: entered promiscuous mode [ 547.175945][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 547.336287][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 547.423143][T25045] Bluetooth: hci1: unexpected event 0x2c length: 7 < 17 [ 547.582318][T26674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5850'. [ 547.658412][T26683] netlink: 'syz.1.5852': attribute type 30 has an invalid length. [ 547.662190][T26683] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 547.665494][T26683] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 547.743678][ T5332] Bluetooth: hci3: hardware error 0x01 [ 547.932991][T26699] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5856'. [ 547.938719][T26699] ip6gretap0: entered promiscuous mode [ 548.014292][T26705] geneve2: entered promiscuous mode [ 548.021737][T26705] geneve2: entered allmulticast mode [ 548.064092][T26713] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5857'. [ 548.216395][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 548.228109][T26724] netlink: 'syz.2.5863': attribute type 11 has an invalid length. [ 548.342661][T26732] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.5865'. [ 548.542676][T26743] netlink: 'syz.9.5866': attribute type 1 has an invalid length. [ 548.760669][T26752] comedi comedi3: comedi_config --init_data is deprecated [ 548.761108][T26747] gretap1: entered promiscuous mode [ 548.763555][T26752] overlayfs: failed to resolve './file1': -2 [ 548.973965][T26770] nfs: Unknown parameter '' [ 548.984518][T26765] can0: slcan on ptm1. [ 549.149621][T26764] can0 (unregistered): slcan off ptm1. [ 549.193675][T26783] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5875'. [ 549.223770][T26786] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5876'. [ 549.234447][T26787] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5876'. [ 549.388073][T26801] /dev/sr0: Can't open blockdev [ 549.407990][T26809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=26809 comm=syz.9.5881 [ 549.430868][ T40] kauditd_printk_skb: 142 callbacks suppressed [ 549.430878][ T40] audit: type=1400 audit(1049380.221:3116): avc: denied { write } for pid=26810 comm="syz.3.5882" name="igmp6" dev="proc" ino=4026536347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 549.520979][ T40] audit: type=1400 audit(1049380.311:3117): avc: denied { read } for pid=26810 comm="syz.3.5882" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 549.533948][ T40] audit: type=1400 audit(1049380.311:3118): avc: denied { open } for pid=26810 comm="syz.3.5882" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 549.542881][ T40] audit: type=1400 audit(1049380.311:3119): avc: denied { ioctl } for pid=26810 comm="syz.3.5882" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 549.590173][ T40] audit: type=1400 audit(1049380.381:3120): avc: denied { setopt } for pid=26812 comm="syz.9.5883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 549.623596][ T40] audit: type=1400 audit(1049380.411:3121): avc: denied { getopt } for pid=26817 comm="syz.9.5884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 549.624311][T26818] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5884'. [ 549.633151][ T40] audit: type=1400 audit(1049380.411:3122): avc: denied { read } for pid=26817 comm="syz.9.5884" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 549.655725][ T40] audit: type=1400 audit(1049380.411:3123): avc: denied { open } for pid=26817 comm="syz.9.5884" path="/dev/ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 549.674438][ T40] audit: type=1400 audit(1049380.441:3124): avc: denied { append } for pid=26819 comm="syz.9.5885" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 549.687238][ T40] audit: type=1400 audit(1049380.461:3125): avc: denied { bind } for pid=26819 comm="syz.9.5885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 549.721811][T26825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5886'. [ 549.787783][T25045] Bluetooth: hci1: unexpected cc 0x1407 length: 4 < 9 [ 549.789899][T25045] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 549.819374][ T5332] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 549.930248][T26827] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1954005275 (125056337600 ns) > initial count (69329932160 ns). Using initial count to start timer. [ 549.939329][T26827] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3503323016 (224212673024 ns) > initial count (219510975936 ns). Using initial count to start timer. [ 550.282018][ T6056] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 550.297446][ C0] net_ratelimit: 3 callbacks suppressed [ 550.297463][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 550.429625][ T6056] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.433256][ T6056] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 550.436197][ T6056] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 550.457751][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 550.460900][ T6056] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 550.463822][ T6056] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.466320][ T6056] usb 7-1: Product: syz [ 550.468138][ T6056] usb 7-1: Manufacturer: syz [ 550.469751][ T6056] usb 7-1: SerialNumber: syz [ 550.486571][ T6056] cdc_ncm 7-1:1.0: skipping garbage [ 550.488482][ T6056] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 550.490663][ T6056] cdc_ncm 7-1:1.0: bind() failure [ 550.494671][T26848] binder: 26847:26848 ioctl c0306201 2000000003c0 returned -14 [ 551.338085][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 551.469385][T26862] ata1.00: invalid cdb length 6 [ 551.508328][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 551.526046][T26867] Lens B: ================= START STATUS ================= [ 551.533225][T26867] Lens B: Focus, Absolute: 0 [ 551.534794][T26867] Lens B: ================== END STATUS ================== [ 551.560794][T26872] netlink: 'syz.9.5900': attribute type 5 has an invalid length. [ 551.563757][T26872] netlink: 'syz.9.5900': attribute type 7 has an invalid length. [ 551.571069][T26872] : entered promiscuous mode [ 551.573372][T26875] netlink: 'syz.9.5900': attribute type 28 has an invalid length. [ 551.576439][T26875] netlink: 'syz.9.5900': attribute type 3 has an invalid length. [ 551.582336][T26872] netlink: 'syz.9.5900': attribute type 28 has an invalid length. [ 551.585458][T26872] netlink: 'syz.9.5900': attribute type 3 has an invalid length. [ 551.590725][T26875] __nla_validate_parse: 1 callbacks suppressed [ 551.590736][T26875] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5900'. [ 551.596795][T26872] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5900'. [ 551.740939][T26879] netlink: 'syz.9.5902': attribute type 10 has an invalid length. [ 551.744552][T26879] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.747541][T26879] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.772793][T26879] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.775775][T26879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.778989][T26879] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.781933][T26879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.803930][T26879] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 551.811219][T26880] geneve2: entered promiscuous mode [ 551.813325][T26880] geneve2: entered allmulticast mode [ 551.833125][T17075] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 551.836598][T17075] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 551.857095][T17075] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 551.865961][T17075] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 551.930836][T26882] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5903'. [ 551.934533][T26882] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5903'. [ 551.955015][T26882] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5903'. [ 551.955074][T17075] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.963326][T17075] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.971552][T26882] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5903'. [ 551.971577][T17075] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.991569][T17075] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.378881][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 552.548541][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 553.014423][T15574] usb 7-1: USB disconnect, device number 14 [ 553.112785][T26890] netlink: 'syz.2.5904': attribute type 1 has an invalid length. [ 553.120821][T26890] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5904'. [ 553.129767][ T5332] Bluetooth: hci0: unexpected cc 0x1407 length: 4 < 9 [ 553.131889][ T5332] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 553.366074][T26901] tap0: tun_chr_ioctl cmd 1074025675 [ 553.367756][T26901] tap0: persist enabled [ 553.380276][T26901] tap0: tun_chr_ioctl cmd 1074025672 [ 553.382084][T26901] tap0: ignored: set checksum enabled [ 553.384283][T26901] tap0: tun_chr_ioctl cmd 1074025675 [ 553.386055][T26901] tap0: persist enabled [ 553.409024][T26901] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x2160 (0x33424752, 6, 0, 0, 0) [ 553.418992][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 553.579201][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 553.851940][T17075] bridge_slave_1: left allmulticast mode [ 553.869250][T17075] bridge_slave_1: left promiscuous mode [ 553.871354][T17075] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.934316][T17075] bridge_slave_0: left allmulticast mode [ 553.949545][T17075] bridge_slave_0: left promiscuous mode [ 553.951637][T17075] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.012156][T15574] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 554.175272][T15574] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.181065][T15574] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.187881][T15574] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 554.198532][T15574] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.201466][T15574] usb 7-1: Product: syz [ 554.202912][T15574] usb 7-1: Manufacturer: syz [ 554.209446][T15574] usb 7-1: SerialNumber: syz [ 554.228550][T15574] usb 7-1: selecting invalid altsetting 1 [ 554.332286][T17075] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 554.459509][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 554.629631][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 554.636929][T15574] cdc_ncm 7-1:1.0: failed GET_NTB_PARAMETERS [ 554.639106][T15574] cdc_ncm 7-1:1.0: bind() failure [ 555.006317][T17075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.034900][T17075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.056673][T17075] bond0 (unregistering): Released all slaves [ 555.251397][T17075] bond1 (unregistering): Released all slaves [ 555.255331][T17075] bond2 (unregistering): Released all slaves [ 555.329020][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 555.329033][ T40] audit: type=1400 audit(1049386.108:3156): avc: granted { setsecparam } for pid=26932 comm="syz.3.5917" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 555.337521][ T40] audit: type=1400 audit(1049386.108:3157): avc: denied { create } for pid=26932 comm="syz.3.5917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 555.344168][ T40] audit: type=1400 audit(1049386.108:3158): avc: denied { getopt } for pid=26932 comm="syz.3.5917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 555.352367][ T40] audit: type=1400 audit(1049386.138:3159): avc: denied { connect } for pid=26936 comm="syz.9.5918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 555.500008][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 555.601616][T17075] tipc: Disabling bearer [ 555.603577][T17075] tipc: Left network mode [ 555.659885][T17075] IPVS: stopping backup sync thread 16815 ... [ 555.670363][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 555.990263][ T6021] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 556.080601][T17075] hsr_slave_0: left promiscuous mode [ 556.085043][T17075] hsr_slave_1: left promiscuous mode [ 556.087180][T17075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.110618][T17075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.170476][ T6021] usb 14-1: too many configurations: 37, using maximum allowed: 8 [ 556.177755][ T40] audit: type=1400 audit(1049386.957:3160): avc: denied { ioctl } for pid=26948 comm="syz.3.5922" path="socket:[140561]" dev="sockfs" ino=140561 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 556.183739][ T6021] usb 14-1: string descriptor 0 read error: -71 [ 556.187533][ T6021] usb 14-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 556.189498][ T5332] Bluetooth: hci0: adv larger than maximum supported [ 556.190429][ T6021] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.195112][ T6021] usb 14-1: can't set config #1, error -71 [ 556.198885][ T5332] Bluetooth: hci0: Malformed LE Event: 0x0d [ 556.210856][ T6021] usb 14-1: USB disconnect, device number 6 [ 556.540556][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 556.700619][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 556.822434][T26956] IPv6: NLM_F_CREATE should be specified when creating new route [ 557.556500][ T6021] usb 7-1: USB disconnect, device number 15 [ 557.581039][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 557.658117][T26963] netlink: 'syz.2.5927': attribute type 11 has an invalid length. [ 557.737893][T17075] team0 (unregistering): Port device team_slave_1 removed [ 557.751266][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 557.903779][T17075] team0 (unregistering): Port device team_slave_0 removed [ 558.621581][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 558.791904][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 558.928883][T26966] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5928'. [ 558.951420][ T40] audit: type=1400 audit(1049389.716:3161): avc: denied { nlmsg_read } for pid=26965 comm="syz.9.5928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 559.022352][ T40] audit: type=1400 audit(1049389.816:3162): avc: denied { read write } for pid=26969 comm="syz.2.5929" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 559.029601][ T40] audit: type=1400 audit(1049389.816:3163): avc: denied { open } for pid=26969 comm="syz.2.5929" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 559.052326][T26970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5929'. [ 559.055158][T26970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5929'. [ 559.063152][ T40] audit: type=1400 audit(1049389.826:3164): avc: denied { ioctl } for pid=26969 comm="syz.2.5929" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 559.102282][T26970] input: syz1 as /devices/virtual/input/input35 [ 559.104491][T26970] input: failed to attach handler leds to device input35, error: -6 [ 559.113543][ T40] audit: type=1400 audit(1049389.896:3165): avc: denied { read } for pid=5366 comm="acpid" name="event4" dev="devtmpfs" ino=3626 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 559.181534][T26979] fuse: Unknown parameter '&b' [ 559.186306][T26978] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5931'. [ 559.194489][T26978] syzkaller1: entered promiscuous mode [ 559.196403][T26978] syzkaller1: entered allmulticast mode [ 559.210191][T26979] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5933'. [ 559.345521][T26988] loop6: detected capacity change from 0 to 7 [ 559.367883][T26066] Dev loop6: unable to read RDB block 7 [ 559.369716][T26066] loop6: unable to read partition table [ 559.371626][T26066] loop6: partition table beyond EOD, truncated [ 559.460597][T26991] comedi comedi3: c6xdigio: I/O port conflict (0x4,3) [ 559.468455][T26991] ================================================================== [ 559.471034][T26991] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 559.473542][T26991] Read of size 8 at addr ffff88803c702230 by task syz.3.5937/26991 [ 559.476826][T26991] [ 559.478981][T26991] CPU: 2 UID: 0 PID: 26991 Comm: syz.3.5937 Not tainted syzkaller #0 PREEMPT(full) [ 559.478999][T26991] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 559.479007][T26991] Call Trace: [ 559.479012][T26991] [ 559.479018][T26991] dump_stack_lvl+0x116/0x1f0 [ 559.479051][T26991] print_report+0xcd/0x630 [ 559.479066][T26991] ? __virt_addr_valid+0x81/0x610 [ 559.479083][T26991] ? __phys_addr+0xe8/0x180 [ 559.479098][T26991] ? sysfs_remove_file_ns+0x63/0x70 [ 559.479111][T26991] kasan_report+0xe0/0x110 [ 559.479125][T26991] ? sysfs_remove_file_ns+0x63/0x70 [ 559.479139][T26991] sysfs_remove_file_ns+0x63/0x70 [ 559.479152][T26991] driver_remove_file+0x4a/0x60 [ 559.479167][T26991] bus_remove_driver+0x224/0x2c0 [ 559.479178][T26991] driver_unregister+0x76/0xb0 [ 559.479191][T26991] comedi_device_detach_locked+0x12f/0xa50 [ 559.479205][T26991] comedi_device_detach+0x67/0xb0 [ 559.479216][T26991] comedi_device_attach+0x43d/0x900 [ 559.479229][T26991] do_devconfig_ioctl+0x1b1/0x710 [ 559.479244][T26991] ? __mutex_lock+0x1c5/0x1060 [ 559.479264][T26991] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 559.479285][T26991] comedi_unlocked_ioctl+0x165d/0x2f00 [ 559.479305][T26991] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 559.479323][T26991] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 559.479338][T26991] ? do_vfs_ioctl+0x128/0x14f0 [ 559.479356][T26991] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 559.479373][T26991] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 559.479393][T26991] ? rcu_is_watching+0x12/0xc0 [ 559.479408][T26991] ? __fget_files+0x204/0x3c0 [ 559.479419][T26991] ? hook_file_ioctl_common+0x145/0x410 [ 559.479432][T26991] ? selinux_file_ioctl+0x180/0x270 [ 559.479447][T26991] ? selinux_file_ioctl+0xb4/0x270 [ 559.479463][T26991] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 559.479480][T26991] __x64_sys_ioctl+0x18e/0x210 [ 559.479498][T26991] do_syscall_64+0xcd/0x4c0 [ 559.479510][T26991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.479523][T26991] RIP: 0033:0x7f2aaeb8ebe9 [ 559.479533][T26991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.479545][T26991] RSP: 002b:00007f2aafa9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 559.479556][T26991] RAX: ffffffffffffffda RBX: 00007f2aaedb5fa0 RCX: 00007f2aaeb8ebe9 [ 559.479564][T26991] RDX: 0000200000000280 RSI: 0000000040946400 RDI: 0000000000000005 [ 559.479571][T26991] RBP: 00007f2aaec11e19 R08: 0000000000000000 R09: 0000000000000000 [ 559.479578][T26991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.479584][T26991] R13: 00007f2aaedb6038 R14: 00007f2aaedb5fa0 R15: 00007ffc4c7ac928 [ 559.479595][T26991] [ 559.479599][T26991] [ 559.576616][T26991] Allocated by task 25717: [ 559.578431][T26991] kasan_save_stack+0x33/0x60 [ 559.580340][T26991] kasan_save_track+0x14/0x30 [ 559.582239][T26991] __kasan_kmalloc+0xaa/0xb0 [ 559.584119][T26991] __kmalloc_noprof+0x223/0x510 [ 559.586208][T26991] __register_sysctl_table+0xea2/0x1900 [ 559.588450][T26991] __devinet_sysctl_register+0x1b9/0x360 [ 559.590752][T26991] devinet_sysctl_register+0x17b/0x200 [ 559.592557][T26991] inetdev_init+0x2b8/0x5a0 [ 559.594029][T26991] inetdev_event+0xc5f/0x18a0 [ 559.595539][T26991] notifier_call_chain+0xb9/0x410 [ 559.597140][T26991] call_netdevice_notifiers_info+0xbe/0x140 [ 559.599023][T26991] register_netdevice+0x182e/0x2270 [ 559.600823][T26991] __tun_chr_ioctl+0x1ed9/0x48b0 [ 559.602526][T26991] __x64_sys_ioctl+0x18e/0x210 [ 559.604226][T26991] do_syscall_64+0xcd/0x4c0 [ 559.606080][T26991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.607952][T26991] [ 559.608738][T26991] Freed by task 75: [ 559.610298][T26991] kasan_save_stack+0x33/0x60 [ 559.612235][T26991] kasan_save_track+0x14/0x30 [ 559.614241][T26991] kasan_save_free_info+0x3b/0x60 [ 559.616281][T26991] __kasan_slab_free+0x60/0x70 [ 559.618285][T26991] kmem_cache_free_bulk.part.0+0x383/0x7f0 [ 559.620677][T26991] kvfree_rcu_bulk+0x1b7/0x1e0 [ 559.622688][T26991] kfree_rcu_work+0x124/0x1a0 [ 559.624678][T26991] process_one_work+0x9cc/0x1b70 [ 559.626795][T26991] worker_thread+0x6c8/0xf10 [ 559.628673][T26991] kthread+0x3c2/0x780 [ 559.630089][T26991] ret_from_fork+0x5d7/0x6f0 [ 559.631644][T26991] ret_from_fork_asm+0x1a/0x30 [ 559.633336][T26991] [ 559.634186][T26991] Last potentially related work creation: [ 559.636069][T26991] kasan_save_stack+0x33/0x60 [ 559.637738][T26991] kasan_record_aux_stack+0xa7/0xc0 [ 559.639424][T26991] kvfree_call_rcu+0x76/0x470 [ 559.640940][T26991] drop_sysctl_table+0x355/0x5f0 [ 559.642607][T26991] unregister_sysctl_table+0x41/0x60 [ 559.644576][T26991] inetdev_event+0xeac/0x18a0 [ 559.646418][T26991] notifier_call_chain+0xb9/0x410 [ 559.648254][T26991] call_netdevice_notifiers_info+0xbe/0x140 [ 559.650734][T26991] unregister_netdevice_many_notify+0xf76/0x24c0 [ 559.652729][T26991] unregister_netdevice_queue+0x305/0x3f0 [ 559.654557][T26991] __tun_detach+0x1249/0x1540 [ 559.656060][T26991] tun_chr_close+0xc2/0x230 [ 559.657504][T26991] __fput+0x3ff/0xb70 [ 559.658872][T26991] task_work_run+0x150/0x240 [ 559.660796][T26991] exit_to_user_mode_loop+0xeb/0x110 [ 559.662091][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 559.662503][T26991] do_syscall_64+0x3f6/0x4c0 [ 559.662520][T26991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.662532][T26991] [ 559.662535][T26991] The buggy address belongs to the object at ffff88803c702200 [ 559.662535][T26991] which belongs to the cache kmalloc-256 of size 256 [ 559.673401][T26991] The buggy address is located 48 bytes inside of [ 559.673401][T26991] freed 256-byte region [ffff88803c702200, ffff88803c702300) [ 559.677601][T26991] [ 559.678381][T26991] The buggy address belongs to the physical page: [ 559.680387][T26991] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803c702c00 pfn:0x3c702 [ 559.684006][T26991] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 559.686727][T26991] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 559.689224][T26991] page_type: f5(slab) [ 559.690519][T26991] raw: 00fff00000000040 ffff88801b842b40 0000000000000000 dead000000000001 [ 559.693249][T26991] raw: ffff88803c702c00 000000000010000c 00000000f5000000 0000000000000000 [ 559.695958][T26991] head: 00fff00000000040 ffff88801b842b40 0000000000000000 dead000000000001 [ 559.698647][T26991] head: ffff88803c702c00 000000000010000c 00000000f5000000 0000000000000000 [ 559.701494][T26991] head: 00fff00000000001 ffffea0000f1c081 00000000ffffffff 00000000ffffffff [ 559.704465][T26991] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 559.707515][T26991] page dumped because: kasan: bad access detected [ 559.709504][T26991] page_owner tracks the page as allocated [ 559.711367][T26991] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5967, tgid 5967 (syz-executor), ts 45895629928, free_ts 45854342138 [ 559.718050][T26991] post_alloc_hook+0x1c0/0x230 [ 559.719567][T26991] get_page_from_freelist+0x132b/0x38e0 [ 559.721332][T26991] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 559.723215][T26991] alloc_pages_mpol+0x1fb/0x550 [ 559.724736][T26991] new_slab+0x247/0x330 [ 559.726459][T26991] ___slab_alloc+0xcf2/0x1740 [ 559.728102][T26991] __slab_alloc.constprop.0+0x56/0xb0 [ 559.729794][T26991] __kmalloc_noprof+0x2f2/0x510 [ 559.731375][T26991] fib_create_info+0x53f/0x46b0 [ 559.732963][T26991] fib_table_insert+0x177/0x1c40 [ 559.734544][T26991] fib_magic+0x4d4/0x5c0 [ 559.735884][T26991] fib_add_ifaddr+0x3a1/0x580 [ 559.737370][T26991] fib_netdev_event+0x38a/0x710 [ 559.738891][T26991] notifier_call_chain+0xb9/0x410 [ 559.740494][T26991] call_netdevice_notifiers_info+0xbe/0x140 [ 559.742347][T26991] __dev_notify_flags+0x12c/0x2e0 [ 559.744016][T26991] page last free pid 5969 tgid 5969 stack trace: [ 559.745983][T26991] __free_frozen_pages+0x7d5/0x10f0 [ 559.747630][T26991] qlist_free_all+0x4d/0x120 [ 559.749083][T26991] kasan_quarantine_reduce+0x195/0x1e0 [ 559.750834][T26991] __kasan_slab_alloc+0x69/0x90 [ 559.752364][T26991] __kmalloc_noprof+0x1d4/0x510 [ 559.753930][T26991] fib6_info_alloc+0x40/0x160 [ 559.755411][T26991] ip6_route_info_create+0x14c/0x870 [ 559.757058][T26991] ip6_route_add.part.0+0x22/0x1d0 [ 559.758656][T26991] ip6_route_add+0x45/0x60 [ 559.760048][T26991] addrconf_prefix_route+0x2fd/0x510 [ 559.762064][T26991] add_v4_addrs+0x672/0x980 [ 559.763986][T26991] addrconf_init_auto_addrs+0x51a/0x810 [ 559.766252][T26991] addrconf_notify+0xe93/0x19e0 [ 559.768232][T26991] notifier_call_chain+0xb9/0x410 [ 559.769876][T26991] call_netdevice_notifiers_info+0xbe/0x140 [ 559.771879][T26991] __dev_notify_flags+0x12c/0x2e0 [ 559.773425][T26991] [ 559.774182][T26991] Memory state around the buggy address: [ 559.775879][T26991] ffff88803c702100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 559.778309][T26991] ffff88803c702180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 559.780836][T26991] >ffff88803c702200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 559.783300][T26991] ^ [ 559.784985][T26991] ffff88803c702280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 559.787454][T26991] ffff88803c702300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 559.789937][T26991] ================================================================== [ 559.832306][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 559.947547][T26988] Dev loop6: unable to read RDB block 7 [ 559.951137][T26988] loop6: unable to read partition table [ 559.959450][T26988] loop6: partition table beyond EOD, truncated [ 559.971695][T26988] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 559.975037][T26991] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 559.975054][T26991] CPU: 2 UID: 0 PID: 26991 Comm: syz.3.5937 Not tainted syzkaller #0 PREEMPT(full) [ 559.975071][T26991] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 559.975079][T26991] Call Trace: [ 559.975085][T26991] [ 559.975090][T26991] dump_stack_lvl+0x3d/0x1f0 [ 559.975106][T26991] vpanic+0x6e8/0x7a0 [ 559.975124][T26991] ? __pfx_vpanic+0x10/0x10 [ 559.975142][T26991] ? __pfx_vprintk_emit+0x10/0x10 [ 559.975158][T26991] ? sysfs_remove_file_ns+0x63/0x70 [ 559.975171][T26991] panic+0xca/0xd0 [ 559.975188][T26991] ? __pfx_panic+0x10/0x10 [ 559.975205][T26991] ? sysfs_remove_file_ns+0x63/0x70 [ 559.975218][T26991] ? preempt_schedule_common+0x44/0xc0 [ 559.975230][T26991] ? preempt_schedule_thunk+0x16/0x30 [ 559.975248][T26991] check_panic_on_warn+0xab/0xb0 [ 559.975259][T26991] end_report+0x107/0x170 [ 559.975272][T26991] kasan_report+0xee/0x110 [ 559.975285][T26991] ? sysfs_remove_file_ns+0x63/0x70 [ 559.975300][T26991] sysfs_remove_file_ns+0x63/0x70 [ 559.975314][T26991] driver_remove_file+0x4a/0x60 [ 559.975330][T26991] bus_remove_driver+0x224/0x2c0 [ 559.975341][T26991] driver_unregister+0x76/0xb0 [ 559.975355][T26991] comedi_device_detach_locked+0x12f/0xa50 [ 559.975376][T26991] comedi_device_detach+0x67/0xb0 [ 559.975388][T26991] comedi_device_attach+0x43d/0x900 [ 559.975403][T26991] do_devconfig_ioctl+0x1b1/0x710 [ 559.975419][T26991] ? __mutex_lock+0x1c5/0x1060 [ 559.975432][T26991] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 559.975453][T26991] comedi_unlocked_ioctl+0x165d/0x2f00 [ 559.975472][T26991] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 559.975491][T26991] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 559.975506][T26991] ? do_vfs_ioctl+0x128/0x14f0 [ 559.975523][T26991] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 559.975541][T26991] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 559.975560][T26991] ? rcu_is_watching+0x12/0xc0 [ 559.975576][T26991] ? __fget_files+0x204/0x3c0 [ 559.975588][T26991] ? hook_file_ioctl_common+0x145/0x410 [ 559.975602][T26991] ? selinux_file_ioctl+0x180/0x270 [ 559.975618][T26991] ? selinux_file_ioctl+0xb4/0x270 [ 559.975634][T26991] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 559.975652][T26991] __x64_sys_ioctl+0x18e/0x210 [ 559.975670][T26991] do_syscall_64+0xcd/0x4c0 [ 559.975683][T26991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.975695][T26991] RIP: 0033:0x7f2aaeb8ebe9 [ 559.975704][T26991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.975716][T26991] RSP: 002b:00007f2aafa9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 559.975728][T26991] RAX: ffffffffffffffda RBX: 00007f2aaedb5fa0 RCX: 00007f2aaeb8ebe9 [ 559.975736][T26991] RDX: 0000200000000280 RSI: 0000000040946400 RDI: 0000000000000005 [ 559.975743][T26991] RBP: 00007f2aaec11e19 R08: 0000000000000000 R09: 0000000000000000 [ 559.975750][T26991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.975757][T26991] R13: 00007f2aaedb6038 R14: 00007f2aaedb5fa0 R15: 00007ffc4c7ac928 [ 559.975767][T26991] [ 559.976504][T26991] Kernel Offset: disabled VM DIAGNOSIS: 16:05:44 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88801eecc8c0 RCX=0000000000000000 RDX=ffffc9000332fbe0 RSI=ffffea00013b3180 RDI=ffffc9000332fc20 RBP=ffffc9000332fc50 RSP=ffffc9000332fba0 R8 =0000000000000001 R9 =ffffffff8221fac8 R10=0000000000000000 R11=0000000000000000 R12=ffff888056c883a0 R13=0000000000000000 R14=ffffc9000332fc98 R15=ffffea00013b3180 RIP=ffffffff821700c9 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555567f32500 ffffffff 00c00000 GS =0000 ffff8880d66bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000fe8008 CR3=000000004cc8e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdab9593f0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdab95a666 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdab95a666 00007ffdab95a66c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb33612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb33612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb33612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb33612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb33612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb33612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000003 RBX=ffff88802df58000 RCX=ffffc900006a1001 RDX=0000000000000000 RSI=ffffffff8c162800 RDI=ffff88802df58444 RBP=ffff88802df58000 RSP=ffffc9000069fd58 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc9000069fdf8 R11=000000000008fa48 R12=ffff88802df58000 R13=ffffc9000069fdf8 R14=ffffc900006a0b80 R15=ffffc9000069fe2c RIP=ffffffff81a1e839 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c36393a CR3=00000000343bd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 172e000000020000 0008000400080010 00080000000c0200 0000000000080008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0014010000000000 000800080007000c 00080000000c0000 00cc000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 172e000000200000 0002000000100008 0000000000000004 000c001a00100000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c000a00000000 0000030000000000 00160000000c0000 000a00040008000f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010000a00000000 03e6000000080004 0000000a00080000 0020000000440000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002000000000000 0000000000000000 006d0000000001ab 3f00000000180000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00200000000e0014 000c000000080004 0020000e00000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000c0000000a 00040008000f0010 000a0000000003e6 0000000800040000 ZMM25=40b9ab4540b9ab45 40b9ab4540b9ab45 40b9ab4540b9ab45 40b9ab4540b9ab45 40b9ab4540b9ab45 40b9ab4540b9ab45 40b9ab4540b9ab45 40b9ab4540b9ab45 ZMM26=0e326be80e326be8 0e326be80e326be8 0e326be80e326be8 0e326be80e326be8 0e326be80e326be8 0e326be80e326be8 0e326be80e326be8 0e326be80e326be8 ZMM27=3119b3e53119b3e5 3119b3e53119b3e5 3119b3e53119b3e5 3119b3e53119b3e5 3119b3e53119b3e5 3119b3e53119b3e5 3119b3e53119b3e5 3119b3e53119b3e5 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=e01b0000e01b0000 e01b0000e01b0000 e01b0000e01b0000 e01b0000e01b0000 e01b0000e01b0000 e01b0000e01b0000 e01b0000e01b0000 e01b0000e01b0000 info registers vcpu 2 CPU#2 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643805 RDI=ffffffff9b10e020 RBP=ffffffff9b10dfe0 RSP=ffffc900060573b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3330383838666666 R12=0000000000000000 R13=000000000000002e R14=ffffffff9b10dfe0 R15=ffffffff856437a0 RIP=ffffffff8564382f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2aafa9c6c0 ffffffff 00c00000 GS =0000 ffff8880d68bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2aafa9bf98 CR3=0000000047c4f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe37686cf6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe37686cf6 00007ffe37686cfc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4a1a412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4a1a412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4a1a412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4a1a412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4a1a412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4a1a412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4a1a5874a8 00007f4a1a5874a0 00007f4a1a587498 00007f4a1a587470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4a1b0ed100 00007f4a1a587460 00007f4a1a587478 0000000500060006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4a1a5874b8 00007f4a1a5874b0 00007f4a1a5874a8 00007f4a1a5874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c507b42b05e6253 e9123e4dda839927 85e5ee626725284e 928c4442d17670b8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ee5d2f9d8e004000 0c93b951e79e0d92 2442084f07565806 fb3cbc06ad0f497a ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 18bf424afbaa96ff 20eaba0770379410 bd285d03e6540580 e72e01cca5668f95 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7e520f0d22022a33 9ae1260527d11daa 35c51ac9e67ca36e e471b753d1a9d136 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=1ffff1100ae15d63 RBX=1ffff920000d9e88 RCX=0000000000000000 RDX=dffffc0000000000 RSI=ffffffff89d1fde4 RDI=ffff8880570aeb18 RBP=ffffc900006cf5f0 RSP=ffffc900006cf410 R8 =0000000000000003 R9 =000000000000dd86 R10=0000000000000008 R11=0000000000002c10 R12=ffffc900006cf7b8 R13=ffff88805dab6ed4 R14=0000000000000008 R15=ffffc900006cf480 RIP=ffffffff89d1fdfe RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000002000 CR3=0000000047c4f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000006f696769 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4c7ace36 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4c7ace36 00007ffc4c7ace3c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2aaec12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2aaec12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2aaec12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2aaec12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2aaec12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2aaec12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6541a81eb887a84c d05cef7c53c170da cdeae883de42baf3 56865563ef2bf48c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9500000006000000 850000000a000003 b700000008000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 07000000000000a1 bf00000000fff81a 7b20202000000000 0021702020000001 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000