last executing test programs: 2m24.484917419s ago: executing program 2 (id=191): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000180)={0x0, r3}) io_uring_enter(r3, 0x17e0, 0xe151, 0x7d, &(0x7f00000001c0)={[0x3]}, 0x8) (async) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) (async) pselect6(0x40, &(0x7f0000000240)={0x55, 0x4, 0x480, 0x2b, 0x1, 0x5, 0x3, 0x8000000000000000}, &(0x7f0000000280)={0x862f, 0xffff, 0x5, 0x3, 0xffff, 0x8, 0x3}, &(0x7f00000002c0)={0x8, 0x7, 0x80000000, 0x8, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2, 0x3}, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000380)={&(0x7f0000000340)={[0x4]}, 0x8}) read$watch_queue(r4, &(0x7f00000003c0)=""/235, 0xeb) (async) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x3) sendto$inet(r3, &(0x7f00000004c0)="99cdadb25c643e0b8d275076aa716386bd3aaeda75754c47680269bd102f1a08b8f44b48c708ab919a118fc6529b8398a19864c3563acc917342a62879", 0x3d, 0x4894, &(0x7f0000000500)={0x2, 0x4e24, @private=0xa010101}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xb}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}]}, 0x30}}, 0x40c0) (async) syz_open_dev$video(&(0x7f0000000680), 0x1, 0x200040) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f00000006c0)={0x0, @reserved}) (async) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000780)={0x1, @vbi={0x1ff, 0x8, 0x0, 0x43353039, [0x3b, 0x1], [0x4, 0x2], 0x13a}}) (async) syz_usb_connect(0x1, 0x5c4, &(0x7f0000000880)={{0x12, 0x1, 0x250, 0x74, 0x88, 0x74, 0x20, 0xc72, 0x13, 0xcc4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b2, 0x2, 0x10, 0x7, 0x80, 0x90, [{{0x9, 0x4, 0xb, 0x7, 0xc, 0x9e, 0xab, 0xb1, 0x2, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xd4, 0x3, 0x8, 0x7, "05", "d728"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x1, 0x2, 0x2, 0x1, "1aa0"}, @as_header={0x7, 0x24, 0x1, 0xff, 0xff, 0x1}, @as_header={0x7, 0x24, 0x1, 0x0, 0x4}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x1, 0x4, 0x5, "c27f"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6000, 0x2, 0x1, "2beb7c"}]}, @uac_control={{0xa, 0x24, 0x1, 0xe, 0x2}, [@mixer_unit={0x5, 0x24, 0x4, 0x1, 0x2}, @extension_unit={0xd, 0x24, 0x8, 0x3, 0x81, 0x4, "2a033488b41b"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x2, 0x4, 0x7f}]}], [{{0x9, 0x5, 0x0, 0x1, 0x20, 0xc, 0xc, 0x8, [@generic={0x7a, 0x17, "21703ce3006b60d6be653228eec0bfd7d248cc497d515487de8b6d84eb22e3f44ca616c6007c4be489572e6df01d08e1a98e5e6ad3bd0e55a7733cb0f1304b5a3c5f1e677c8d3dd2a4c8e6d6464b746260279327704ae158723d27180809ec2678bc90deb89a7f6c5609db4956c880ee1b054bfb5e83ba13"}, @generic={0xcd, 0x22, "b3242e40755a15bd574ffd23d4b487d9c97b73863051965b9be1f764e8c1665eb7e2154ff3f8996aa3d76e03328d5153ca015680fa20259446e34f65a6ad620bdd06977c5128799f8583be3218cd427f3a1e74b13fe155b3306e53b5699e83dc639533828ae6fe3a0453ae2fa483ce1b453a35e54acf504d26827201a98c60023a6732be9e7b6ed73a3fa68038bfb45ab859473ce6160b04c2e0119e2704c601ef2095b52b41f0712186193f2360ff80c46bd841378f12e5be07068fec5ba48715ccc02015f34e2b52991a"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0x1, 0x1, 0x6, [@generic={0x9a, 0xa, "e6b6a65cba8b920a0c2ec1276ee1b77563f6b92cb99403b1f5ccec775184cf474146897119bbc40fcda7632588ec1807489e1fb3692ebcc116f143833197af7d754f2087a1888369dbb578dca50157d23ad018ccf11731cdafdb77acb03724fa909229f91485e22f545adb217b4085329003f88fb8970bb8f221ce0ff804bc62c5f1c9b59cf122c5ccb3d70ec296eac93020d0eeb3682b60"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x1}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x50, 0x9, 0x5, [@generic={0x36, 0x4, "fae4fccc54fb55c31f3a1b2920b15be2538f0b0655c164cbe13c764eb2f25ca0cf41fa50097f0ca53aa0c79b38f1d02fd48e8770"}, @generic={0x7c, 0x8, "87b07c0e569d411adde68dadc9abf203d051928758124b7e9d4ea8936cd863ba17ffd76e042294ea8d34c1778da0c6d13722409c0a7a08ee6ec25e53bc0080dbfc552c0bf749b5c059b0b7866275984432663c045a22cee6804aae9bbabe33d23c138f5169ef58c5de0c772d316adc1e42c5588a6a1732717864"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x9, 0x7, 0x2}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x6, 0x12, 0xd4}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x88, 0x81, 0x7}}, {{0x9, 0x5, 0x9, 0xc, 0x20, 0x5, 0xf9, 0x7}}, {{0x9, 0x5, 0xb, 0xc, 0x3ff, 0x6, 0x0, 0x79, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7ff}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x6, 0x9, 0x60, [@generic={0x68, 0xd, "f6aea554e778c8d5ed095c3de040dc94264ebdb7a38498e2529200ed8fa01f8980acf806cb46f0c7ec342d4e0cae01a06ddff443b3f2091b1b1dcb3642c37d3d02d4ed6f4e65b220d79801f8bbc4d50db3bd362251377e20ed14c0e464e18622463bdbf11501"}]}}, {{0x9, 0x5, 0xa, 0xb5f93e78c3f9fd89, 0x200, 0x1, 0x4, 0x8, [@generic={0x29, 0x22, "7c82380a7d8cc44c810c6309b9f3623b579727fcf4f921cc817679170a23ab1537bdbaa4c1b867"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x6, 0x3, 0x7, [@generic={0x3b, 0xcb11a6260181f915, "40ae42a122d7d8e40cb67f7eac11ff0027e554d5c7712a6b86ec84759c80f302fdc75b429757c7ade1b0a096fdf09160191fc2007668c3cb7d"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0xd0, 0x8, 0x6b, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x10, 0xffa}]}}]}}, {{0x9, 0x4, 0xa, 0xd, 0x7, 0xff, 0x3, 0x13, 0x0, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x80, 0x2, 0x3, 0x7e, "9b", "e1"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0x0, 0x3, "579a3535436ff8"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x4, 0x6, 0x9, "c4"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x4a, 0x2, 0x1, 0x6, "0b8b4b0f966362"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x4, 0x1, 0x5, "e68b88"}]}], [{{0x9, 0x5, 0x80, 0x8, 0x8, 0x1, 0x5, 0x7}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0xa2, 0x1c, 0xa}}, {{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x5, 0x1, 0x3}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0xe3, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x401}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x0, 0x3, 0x2}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x5, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0xfff8}]}}, {{0x9, 0x5, 0xe, 0xc, 0x10, 0x3, 0x8, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xbb, 0x3}, @generic={0xc2, 0x4, "ff97ecbe49b8c00ab33c5d923007071e198dd505dd3b014d74787054568b6f500d0af4a0c184cfbc71abe127d703a1e8d11a88e2bea14135ced03f54e6273fadf606d8c44a181652c6181f7da8df40c19a773624af40f6fbaeb40cc3900eaa18b533a2ebdd8937acff3d6b680ca11507e25374bb73f45b8c871847af016cbbc742e9dc12fb2a0bb69696f15c95aec4c413492ae764a0d2caacfe1dc97df1aca43dbc3ff96b998a3af7d8b3565609df6656c73b2b0bf068b8f84e62843064c088"}]}}]}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x300, 0x72, 0xff, 0x4, 0x20, 0x4}, 0x36, &(0x7f0000000ec0)={0x5, 0xf, 0x36, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x44, 0x4, 0x0, 0x800, 0x6}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x7, 0xf000, 0x1, [0xff0000, 0x3f, 0xc0cf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xb, 0x9, 0xc, 0x7}]}, 0x4, [{0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x405}}, {0x6a, &(0x7f0000000f40)=@string={0x6a, 0x3, "a69010244d8f4ae7fc712853202b483e861478ac5a26e582dfb77d9549c592742eedcc5e208791e675adbcf4161799cc8c4a604dcab74fc108f6eee92f77b8229eb59019689f17d4e6d7b85063647113433c7c873a96a4b59ae5ceb808e327d661982c80f71c7557"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x809}}, {0xef, &(0x7f0000001000)=@string={0xef, 0x3, "3f6dfcb0c2f6571e648171ec8476f2e2af6788b9eef966bf8e7c868d76b85b067f73ac1aee549e95e2f2020ca104e0054d584e916c95c4caf5e542c88438211c8de587f38cb9f7330061b27d3a6fcaea95d48aa9ca4ef510531c0ed3027b91f868ec11a3a93b1c468fced0e1fe35c3a64acb6ccb840b4f05c371824b34b255fb830702d3f25e44e2f4ee889c2a1dd39ed2d6eee15e4feb4bc6896e83a67b6531515a1c5f893ce299680017312002d12d8fff203f04ff8797be56e43cc899de2dc35ace3c9ea905bb660dcb4b3cb769d497fac9f4bb29149803f112cb2dde12a9eba5f0b85f83e8447417a54e4e"}}]}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001240)={'syztnl0\x00', &(0x7f00000011c0)={'syztnl1\x00', r5, 0x2f, 0x36, 0x7, 0x6, 0x10, @dev={0xfe, 0x80, '\x00', 0xe}, @local, 0x1, 0x7800, 0x1000, 0x1}}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000001700)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000016c0)={&(0x7f0000001280)={0x43c, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8, 0x7, 0x8a}}}]}}, {{0x8, 0x1, r5}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x8c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x6, 0xc3, 0x9}, {0xe1f8, 0x0, 0xe, 0xfff}, {0xcb6, 0xf9, 0x6, 0x7}]}}}]}}, {{0x8, 0x1, r5}, {0x1f8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4085}, 0x800) (async) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000001740)=0x7) (async) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000001780)={'dvmrp1\x00'}) (async) ioctl$VHOST_VDPA_GET_VRING_GROUP(r7, 0xc008af7b, &(0x7f00000017c0)={0x0, 0x80000000}) r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000001800)={0x10003, 0x0, 0x1, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r6) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x5c, r11, 0x20, 0x70bd27, 0x4, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x7f}}}}, [@NL80211_ATTR_MAC_ADDRS={0x4}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5014}, 0x0) 2m24.482921965s ago: executing program 2 (id=192): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000004c0), &(0x7f0000000300)=r4}, 0x20) io_setup(0x8f0, &(0x7f0000002400)=0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000380)={r6, r7/1000+60000}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0x0) io_uring_setup(0x364a, &(0x7f0000000000)={0x0, 0x41ff, 0x0, 0x3, 0x142}) r8 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000140)={0xb, @pix_mp={0x8000, 0xb0, 0x3234564e, 0x1, 0xc, [{0x7}, {0x0, 0x5}, {0x37f0a349, 0x3ba}, {0x7}, {0x0, 0x80}, {0x2, 0x8}, {0x1ff, 0x7}, {0x2e0d, 0x4431}], 0xf, 0xb9, 0x0, 0x4, 0x5}}) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000386000/0x2000)=nil, &(0x7f0000682000/0x1000)=nil, 0x2000, 0x2, 0x2}) 2m23.466053978s ago: executing program 2 (id=204): r0 = socket(0x1d, 0x2, 0x10) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000001e00)=""/102400, &(0x7f0000000040)=0x19000) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)=""/85, 0x55}], 0x1, &(0x7f0000000080)=""/28, 0x1c}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000100005042cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0030000060000000240012801100010062726964805ad8466c617665000000000c0005800500090001000000b122f918152d5167021ad09a7b7571a4ecbbcf5f7d09f899c4a705f60fec5437e1b97c97bbcc6bd21a5317ccb3112527dd29e26ae1f8bd2eaf9411c83dccd7a8cbb5e7f7c1e77ee5c0fe108e22ad238d06ad9d14ef68c07accee9c96554f"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x7, 0x700, 0x8, 0x4, {{0x22, 0x4, 0x0, 0x27, 0x88, 0x67, 0x0, 0x7, 0x2f, 0x0, @private=0xa010100, @remote, {[@cipso={0x86, 0x20, 0x1, [{0x1, 0xf, "c3630d34ca37dd73c246d3f437"}, {0x5, 0xb, "123671c3a47b73f6b2"}]}, @end, @ra={0x94, 0x4}, @generic={0x82, 0x8, "d20d94911708"}, @end, @timestamp_prespec={0x44, 0x2c, 0x29, 0x3, 0x1, [{@remote, 0x8}, {@loopback, 0x2}, {@remote, 0xa804}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x2}, {@rand_addr=0x64010102, 0x5}]}, @ssrr={0x89, 0x7, 0x9f, [@broadcast]}, @ssrr={0x89, 0x13, 0xbb, [@dev={0xac, 0x14, 0x14, 0x25}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044094) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2d7, 0x7}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44054}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3, 0x60, 0x16, 0x4}]}}]}}]}, 0x44}}, 0x440c0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'geneve1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x29, 0x7f, 0xfe, 0x15e, 0x66, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x80, 0x8000, 0x0, 0x81}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000640)={'gre0\x00', 0x0, 0x80, 0x20, 0x8, 0x1, {{0xa, 0x4, 0x0, 0x4, 0x28, 0x67, 0xfffa, 0xff, 0x29, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0xa9, 0x1, 0x7, [{@local, 0x7}]}, @timestamp={0x44, 0x8, 0x79, 0x0, 0x8, [0xe2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x7, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x700, 0x8, 0x101, 0x2}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x7, 0x700, 0x81, 0x2, {{0x1c, 0x4, 0x0, 0x4, 0x70, 0x64, 0x0, 0xc, 0x29, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1e}, {[@rr={0x7, 0xf, 0xb0, [@multicast2, @broadcast, @broadcast]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @lsrr={0x83, 0x17, 0xb3, [@multicast1, @local, @multicast2, @remote, @empty]}, @timestamp_prespec={0x44, 0x2c, 0x5, 0x3, 0x5, [{@empty, 0x1000}, {@multicast2, 0x6}, {@multicast1, 0x10}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x43}, {@local, 0x20000}]}, @noop]}}}}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000900)={@remote, 0x0}, &(0x7f0000000940)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000009c0)={'ip_vti0\x00', &(0x7f0000000980)={'ip_vti0\x00', 0x0, 0x8, 0x80, 0x0, 0x6, {{0x7, 0x4, 0x2, 0x29, 0x1c, 0x68, 0x0, 0xdf, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @local, {[@noop, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000a80)={'ip6_vti0\x00', &(0x7f0000000a00)={'ip6tnl0\x00', 0x0, 0x29, 0xf, 0x9, 0x4, 0x1, @mcast1, @private0, 0x8, 0x1, 0xe, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000ac0)={'sit0\x00', 0x0, 0x7800, 0x700, 0x1f9d, 0x3, {{0x18, 0x4, 0x1, 0x1, 0x60, 0x64, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @dev={0xac, 0x14, 0x14, 0x3f}, {[@rr={0x7, 0x1f, 0x51, [@multicast1, @broadcast, @remote, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @end, @noop, @timestamp_prespec={0x44, 0x24, 0x6b, 0x3, 0x1, [{@local, 0x7}, {@broadcast, 0x100}, {@private=0xa010100, 0x8001}, {@multicast2, 0x3}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={0xffffffffffffffff, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0], 0x0, 0xad, &(0x7f0000000c40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0xf8, 0x8, 0x8, &(0x7f0000000d00)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000e80)={0x824, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x8, 0x8, 0x4, 0x800}, {0x1, 0xf8, 0x66, 0x5}, {0x4, 0xf8, 0x3, 0x2}, {0x10, 0x9, 0xfc, 0x7}, {0x411, 0x6, 0x1, 0x5}, {0x7, 0x3, 0x1, 0x5}, {0x53ae, 0x5, 0x0, 0x2}, {0x0, 0x3, 0x4}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x10, 0xff, 0xd1, 0x4}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xb, 0x9, 0x0, 0x8}, {0x0, 0x5, 0x1, 0x4}, {0x5, 0x8, 0x0, 0x8}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r20}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r21}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x824}, 0x1, 0x0, 0x0, 0x80}, 0x800) 2m23.396501161s ago: executing program 2 (id=206): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3b94, &(0x7f0000000180)={0x48}) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') r2 = fanotify_init(0x0, 0x2) signalfd(r2, &(0x7f0000000000)={[0x4]}, 0x8) fanotify_mark(r2, 0x1, 0x8000039, r1, 0x0) r3 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x9}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r4}}, 0x48) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f0000000380), r4, 0x1}}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a0000000500040000000000090002"], 0x50}}, 0x20040000) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) 2m23.325710328s ago: executing program 2 (id=208): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, 0xfffffffffffffffe, &(0x7f0000000000)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) r1 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) setpgid(r1, 0x0) (async) setpgid(0x0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000740)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1, 0x68, 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADDR_RESOLV_ENABLE={{0x1}, 0x8}}}, 0x7) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x1, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x4028}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x7ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c1}, 0x40) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) 2m23.325499675s ago: executing program 2 (id=209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r4, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021"], 0x54}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0xc, 0x7}, {0x0, 0xfff2}, {0xffff, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xc6a7}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4880) 2m7.752269203s ago: executing program 32 (id=209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r4, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021"], 0x54}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0xc, 0x7}, {0x0, 0xfff2}, {0xffff, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xc6a7}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4880) 1m0.45542679s ago: executing program 4 (id=1636): socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@deltaction={0x21c, 0x31, 0x100, 0x9, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd96}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x21c}}, 0x20048000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) write(r0, &(0x7f00000001c0)="b25e5bb5ea415f00c349df044c2a83cc2994a4205a2f4beae7fa0d9b457d341167e88c9da3610c548de7eb3317e254c9f949295c08fdb22f75a9bf6ef3708402415175ebb6a3b3e9cbb880ae8f6b034ddfeaa709fb40acc01c8e0905d9f962a91cdfb79634e872e8260df5d7f9489d3ce584cc4d4e894fc6fdb9d3b2835072256276e1af7bb3d74ce82fb9", 0x8b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000040)=0x8000) 1m0.454472084s ago: executing program 4 (id=1637): r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000140)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000180)=0x28) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e40)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00AE\xf44.\xab%j'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000200)) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000140)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000180)=0x28) (async) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e40)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00AE\xf44.\xab%j'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000200)) (async) accept4(r0, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) 1m0.395609267s ago: executing program 4 (id=1638): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x7}, 0xc) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmmsg(r1, &(0x7f0000000280), 0x1, 0x800) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10089080, 0x101, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x2, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r5, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r4, &(0x7f0000000180)='\x00', 0xfdfe}]) dup3(r0, r2, 0x6700000000000000) 59.435801132s ago: executing program 4 (id=1641): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1d, r1, 0x0, {0x2, 0xf0, 0x3}}, 0x18, &(0x7f0000000200)={&(0x7f0000000440)="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", 0x6fa}, 0x1, 0x0, 0x0, 0x18004}, 0x24000005) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000001680)={&(0x7f0000001700)={0x1d, r3, 0x0, {0x1, 0xfe, 0x3}, 0x1fe}, 0x18, &(0x7f0000000200)={&(0x7f0000000440)="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", 0x6fa}, 0x1, 0x0, 0x0, 0x40}, 0x24000005) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket(0xa, 0x801, 0x0) getsockopt(r6, 0x29, 0x4b, 0x0, &(0x7f0000001ffc)) (async) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10}, {0x4, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x2, 0x0, 0x8}}, 0xe8) (async) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r6) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r7, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 59.433359079s ago: executing program 4 (id=1643): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) 59.385765215s ago: executing program 4 (id=1645): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x3000) listen(r0, 0x0) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000100)={@local, @empty, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@ipv4={0x800, @tcp={{0x18, 0x4, 0x2, 0x23, 0x74, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x4c, 0xc1, 0x1, 0x2, [{@empty, 0x100}, {@rand_addr=0x64010100, 0x4}, {@private=0xa010102, 0x90000}, {@rand_addr=0x64010101, 0x9}, {@private=0xa010100, 0x22}, {@broadcast, 0xf}, {@broadcast, 0x5}, {@private=0xa010102, 0x81}, {@multicast1, 0x1}]}]}}, {{0x4e2a, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) msgget$private(0x0, 0x28) 55.675090276s ago: executing program 3 (id=1684): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0a85322, &(0x7f0000000100)={{0x0, 0xfa}, {}, 0x0, 0x0, 0xfa}) tkill(0x0, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf255e00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x70}, 0x1, 0xe00}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0a85322, &(0x7f0000000100)={{0x0, 0xfa}, {}, 0x0, 0x0, 0xfa}) (async) tkill(0x0, 0x7) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf255e00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x70}, 0x1, 0xe00}, 0x0) (async) 55.60437215s ago: executing program 3 (id=1685): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x6, 0x2}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000012c0), 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x58, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001200)={r2}, 0xc) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 55.604064819s ago: executing program 3 (id=1686): bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0x1}, 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x3ff) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r3, 0x1, 0x3, 0x0, &(0x7f0000000640)) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(r2) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x50) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r5, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000480)=""/264, 0x8939ada8307e517e, 0x0, 0x1, 0x2}}, 0x48) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) r6 = socket(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000002480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002440)={&(0x7f00000003c0)={0x24, r8, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe066}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf389}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048060}, 0x40800) utime(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x8, 0x243}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x5, 0xb68, 0xfffffffffffffeb9, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xe}, 0x48) 55.475661309s ago: executing program 3 (id=1689): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x3}) (async) syz_open_dev$vim2m(0x0, 0x1fffffffc, 0x2) (async) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000080)) (async, rerun: 64) readv(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) (async, rerun: 32) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x389080, 0x0) (async, rerun: 32) r5 = syz_open_dev$usbfs(&(0x7f00000001c0), 0xad1a, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000000)={0x1, 0x1}) (async, rerun: 32) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000080)={0x40, 0x30, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xd0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) write$UHID_CREATE2(r3, &(0x7f0000000080)=ANY=[], 0x1df) (async) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000004c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "28ce30ec8d08598948224ad54af2c11d875397bdb22d0000b420a1a93c5291ecc6f19e01177d3d458dd49928610000002000", "b6000000551265406c7f3004000000ef00"}}) 55.392270378s ago: executing program 3 (id=1692): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="200001", @ANYRES32=0x0, @ANYBLOB="000000f1a0"], 0x38}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="a1ab2abd70000000000032000000080017015c00"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffffffe}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES64], 0x48) r7 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20d7d9e86f289ea380394bcc1aafb60a963c28c1", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 55.145333632s ago: executing program 3 (id=1693): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) io_uring_setup(0x72c9, &(0x7f0000000040)={0x0, 0x8400c8a0, 0x40, 0x2, 0x20002f7}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 55.145073278s ago: executing program 33 (id=1693): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) io_uring_setup(0x72c9, &(0x7f0000000040)={0x0, 0x8400c8a0, 0x40, 0x2, 0x20002f7}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 43.919588025s ago: executing program 34 (id=1645): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x3000) listen(r0, 0x0) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000100)={@local, @empty, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@ipv4={0x800, @tcp={{0x18, 0x4, 0x2, 0x23, 0x74, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x4c, 0xc1, 0x1, 0x2, [{@empty, 0x100}, {@rand_addr=0x64010100, 0x4}, {@private=0xa010102, 0x90000}, {@rand_addr=0x64010101, 0x9}, {@private=0xa010100, 0x22}, {@broadcast, 0xf}, {@broadcast, 0x5}, {@private=0xa010102, 0x81}, {@multicast1, 0x1}]}]}}, {{0x4e2a, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) msgget$private(0x0, 0x28) 21.23603193s ago: executing program 1 (id=2252): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)}, 0x40002022) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$P9_RLERRORu(r2, 0x0, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000080)=0x3, 0x4) write$selinux_user(r2, &(0x7f0000000040)={'system_u:object_r:cron_log_t:s0', 0x20, 'sysadm_u\x00'}, 0x29) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000222803001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00?'], 0xe4}}, 0x0) 21.172638094s ago: executing program 1 (id=2255): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) getdents(r0, &(0x7f0000000000)=""/26, 0x1a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000", @ANYRES8], 0x3c}}, 0x10) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2105f9fffffffddbdf256b00000008020300e1612d7c3f5d0c43657398a88939330a21cbb3c349190bee2f5e733687b6a256c8206ed883644c1ecabf8ee0518babd3616aca92724338c446d62b7c916d3198b1a63269e820c2e5af08e87b0f1f06c9b1f42a7b4064fe463dd491ea4be3d414e9f638c23d41058e55b14d37c26c7c5d28f5ac477f3e8e95904dfd93f78e6a8f998a26d70b6381fe31619f9e2176e723fa1ee0a9a1c5c089ea635d380b74851ee435b98ccfcd091baef4e03c94b27476d2e51bfed40e1c5dd3526b0c7d08b5eea1c27bd946300811f83cf817c97c9393b799cea5f22c4db39a3c211a8905e2", @ANYRES32=r4, @ANYBLOB="0a0006000802110000000000"], 0x28}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000000) 21.171327186s ago: executing program 1 (id=2259): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @u64=0xa155}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280)=0x3, 0x4) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x0, 0x0) 21.105620835s ago: executing program 1 (id=2260): syz_usb_connect$uac1(0x0, 0x9f, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3401cfd7", @ANYRES16=r3, @ANYBLOB="00022bbd7000ffdbdf25680000000c00990000000000530000002600c700040705040706050641098003000206065a01fb040005070303062cde06031e7c37d300000e00c700f404c5d4d7ba6b20bc9100003600c70000002a04d80701040601030110060403040003030e01c003010604050804830707030d032405060204027bd472375807b6b900002c00c7000000050300030006090180050f050002ed060807100240030200020108069004cd934f77615023743600c7000704050408030905880700010104f70080000203090607010401090605061006cf070b037d00fa05d806cc642b8d57b078ce00000c00c70017a6434123d8ca162200c7000900010704069b0301067f0209030100710001020605fc55ff291ef6689100000e00c70071071061a0cf5601229c0000"], 0x134}, 0x1, 0x0, 0x0, 0x4005}, 0x40001) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003300010326bd7002fcdbdf2506002542"], 0x14}, 0x1, 0x8000000000000, 0x0, 0x10008090}, 0x8004) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003300010326bd7002fcdbdf2506002542"], 0x14}, 0x1, 0x8000000000000, 0x0, 0x10008090}, 0x8004) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f00000002c0)) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) read$FUSE(r0, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r6, 0x5, &(0x7f0000000300)=0x4) (async) sched_setscheduler(r6, 0x5, &(0x7f0000000300)=0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x7c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0xfffffffb, 0x3, 0x8, 0x3, 0xfffffffd, 0x5}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xd9de, 0x5}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x4, 0x8}}, @TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0xff, 0xe}}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x7c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0xfffffffb, 0x3, 0x8, 0x3, 0xfffffffd, 0x5}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xd9de, 0x5}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x4, 0x8}}, @TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0xff, 0xe}}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r9 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, 0x0) (async) setpgid(r9, 0x0) setpgid(0x0, r9) (async) setpgid(0x0, r9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) poll(&(0x7f00000001c0)=[{r8, 0x2}], 0x1, 0x9f) setsockopt$netrom_NETROM_N2(r7, 0x103, 0x3, &(0x7f0000000040)=0x1, 0x4) syz_open_dev$sg(0x0, 0x81, 0x109400) socket$inet6(0xa, 0x3, 0x7) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 20.921153206s ago: executing program 1 (id=2266): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x2, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0xffffffffffffffff, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x9}) r0 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x100) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000600)={"b0453822", 0x400, 0x6, 0x2, 0x0, 0x8000, "c834c404f6ff00", "0200", "009000", "c77e072c", ["c3dad2b677ffffffffffec00", "51f3541a910080ffffcb3a10", "e10003000000f7ffffff00"]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/ip6_mr_vif\x00') pread64(r1, &(0x7f0000003700)=""/119, 0x77, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) (async) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x2, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0xffffffffffffffff, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x9}) (async) syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x100) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000600)={"b0453822", 0x400, 0x6, 0x2, 0x0, 0x8000, "c834c404f6ff00", "0200", "009000", "c77e072c", ["c3dad2b677ffffffffffec00", "51f3541a910080ffffcb3a10", "e10003000000f7ffffff00"]}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/ip6_mr_vif\x00') (async) pread64(r1, &(0x7f0000003700)=""/119, 0x77, 0x8) (async) 19.046007142s ago: executing program 1 (id=2289): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace$setsig(0x4203, r0, 0x9, &(0x7f00000000c0)={0x9, 0x3, 0x1000001}) (async) syz_open_procfs(r0, &(0x7f0000000000)='fdinfo\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0xff07, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 18.990982681s ago: executing program 35 (id=2289): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace$setsig(0x4203, r0, 0x9, &(0x7f00000000c0)={0x9, 0x3, 0x1000001}) (async) syz_open_procfs(r0, &(0x7f0000000000)='fdinfo\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0xff07, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 7.678441992s ago: executing program 0 (id=2490): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000040)={'full', 0x20, 0x2, 0x20, 0x7}, 0x2f) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="bbdf35bd7000fedbdf251f"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x3, 0x7, 0x0, 0x9]}}) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000040)="09000000010001", 0x7) acct(0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r7, @ANYBLOB="06006600c7880000220033000817ff00ffffffffffffffffff3d74ffffff21b5c38e44978e0008021100000000000a00ffc835c6ea5d7c966f0927a8699dec97ca14b01009485bbb63418e670c079e886d9053c0f5d09c1c5b7d8fcb5fbbec55df03ff424c8cbb04718619fdfaef48101e7fb31d97c3ae7e928e9d34d70d174a92e9ab3d4a43c24bfeeb34e2ca00000000000000"], 0x54}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r0) (async) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r2, 0x0, 0x0) (async) openat$cgroup_pressure(r3, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) (async) write$cgroup_pressure(r4, &(0x7f0000000040)={'full', 0x20, 0x2, 0x20, 0x7}, 0x2f) (async) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="bbdf35bd7000fedbdf251f"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket(0x11, 0x3, 0x0) (async) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x3, 0x7, 0x0, 0x9]}}) (async) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r8, &(0x7f0000000040)="09000000010001", 0x7) (async) acct(0x0) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r7, @ANYBLOB="06006600c7880000220033000817ff00ffffffffffffffffff3d74ffffff21b5c38e44978e0008021100000000000a00ffc835c6ea5d7c966f0927a8699dec97ca14b01009485bbb63418e670c079e886d9053c0f5d09c1c5b7d8fcb5fbbec55df03ff424c8cbb04718619fdfaef48101e7fb31d97c3ae7e928e9d34d70d174a92e9ab3d4a43c24bfeeb34e2ca00000000000000"], 0x54}}, 0x0) (async) 7.603561377s ago: executing program 0 (id=2491): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x6, 0x4, 0x8, 0xd}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.684119574s ago: executing program 0 (id=2497): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) connect$unix(r5, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000000)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) write$nci(r6, &(0x7f0000000600)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x1, 0x3, 0x3, 0x81, @f={0x7, 0x2, 0x2, 0x2, {0xa, 0x7a, "9026a0d97de9b7d84d920a2df6250c3df9e83b79419089b151e2d09df2746447aaca065bc1a86aed69133cefbbc456f69411e4dec301f92e24f25f76baacc969a4531691ddc350fb32929ec54ebaf0d7a21d8782a341659db6521a5174e30c8225d7efc051e417a0760505119a661458621f983fed82fc27678d"}, 0x2}}, 0x84) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='qnx4\x00', 0x0, 0x0) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r10, &(0x7f0000000480)={0x2020}, 0x2020) mount$binder(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xe2ca6, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0']) 5.794747981s ago: executing program 0 (id=2507): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) symlink(0x0, &(0x7f0000000000)='./file0\x00') preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000140)={0x2, 0x0, [{0x7, 0x10, 0x8, 0x0, 0x7fa}, {0x80000019, 0x3, 0x3, 0x7fffffff, 0x8af5}]}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 5.678756244s ago: executing program 0 (id=2509): mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='.\x00', &(0x7f0000000040)='configfs\x00', 0x200800, 0x0) 5.678515108s ago: executing program 0 (id=2510): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x7) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="27050200340f14000600002fb96dbcf706060000170008005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b0000000001004057000000060000400000000080", 0x48}, {&(0x7f0000002200)="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", 0xf13}, {&(0x7f00000021c0)="6ca3170197d94df61d6c7d7f1081b8cbcd0d5aa6742426553c9811f874b40b05080d00000000000000", 0x29}], 0x3}, 0x8010) 3.581783024s ago: executing program 7 (id=2534): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x3aa, 0x0, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x100, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x24008084) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x20000, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback, 0x62ea450d}, {0xa, 0x4e22, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9, 0x6]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0xfffffffd, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x0, 0xffffffff, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) 3.47687405s ago: executing program 7 (id=2535): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000600)=""/152) (async, rerun: 32) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRESHEX=r1, @ANYBLOB="0c000280060001", @ANYRES32=0x0], 0x24}}, 0x10) (rerun: 64) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f00000001c0)={0x5, 0xf253, 0x401, 0x1}, 0x10) 3.47656221s ago: executing program 7 (id=2536): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @multicast2}], 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x56, 0x20}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0010c500888e2e5c8b7f5fa7ddd0945f7b6d8c6cc504db49f11ec1933875f293ea0df2c0dd488e20938cf215d5eda4eace0f9b574948db2fd1505680fde00336aec7da1941c470a8da2e647dc993c5955d6cb29b878745c712cc525d2687362412119afae5b42e2d70a150f15abf4a3113009acd8a9e8826a5e18ba2028bc3f2ef88ecb1d681f6b1e8c623d149a8c7600e2413caf7a2d7fe4fc0fcddb14f40578a8a3d15f6c6d10b0c46cae98f0b97268d70a0be9170be1c51fbf433d554fe1b997eab902f76ff8cbb"], 0xcd) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000580)={{0x1, 0x100, 0x4, 0x1, 0x81, 0x9}, 0x97, [0x4, 0x4, 0x3, 0xe9f5, 0x7, 0xfff, 0x40, 0x3ff, 0x7, 0xfa44, 0x1, 0x6, 0x6, 0xec, 0x7fffffff, 0x168, 0x4, 0x100, 0xb, 0x0, 0x9, 0x7, 0xad2a, 0x3, 0x2, 0x2b0, 0x80, 0xfff, 0x10000, 0xf, 0x1000, 0x7, 0x46e0, 0x5, 0x8, 0x6, 0x6, 0xffffff2b, 0x4, 0x10000, 0x8, 0xb7, 0x3, 0x4, 0x1, 0x9, 0x6, 0x10000, 0x2, 0xff, 0x6, 0xc, 0x3, 0x0, 0x8, 0x6dab, 0x1, 0x6, 0x1, 0x9, 0x2, 0x4, 0x1, 0x947, 0x1, 0x1, 0x1, 0xfffffff9, 0x8, 0x9, 0x7ff, 0xf3, 0x2, 0xdd5, 0x562, 0x61, 0x74720e6a, 0x0, 0x7, 0x5, 0xfffffffe, 0x7, 0xde8, 0x2c, 0x101, 0x4, 0x9, 0x8, 0xc3bf, 0x7fffffff, 0x5, 0xd, 0x8000, 0x2f63, 0x4, 0x6, 0x1, 0x1, 0x2, 0x80000000, 0xffff4104, 0xfff, 0x5, 0xff, 0x0, 0x10000, 0x9, 0x3ff, 0x7, 0x7, 0x8, 0x8000, 0x3, 0x6, 0xf, 0x8, 0xfffffffc, 0x100, 0x8, 0x8, 0x400, 0x2, 0x6, 0x6, 0x4, 0x0, 0x4c5, 0xb794, 0x7, 0x4, 0x4f42, 0x4, 0x8c4, 0x2, 0xa, 0x710, 0x6, 0x80000001, 0x8, 0x5d13, 0x8001, 0x2, 0x7b, 0x64, 0x9, 0x6, 0xf5f0, 0x4, 0x5, 0x100, 0x1, 0x8, 0x8, 0x200, 0x5, 0x2, 0x115, 0x8000, 0x80000000, 0x8, 0x6, 0x7, 0xfffffffe, 0x4, 0x80000000, 0x36f, 0x6, 0x7, 0x6, 0x10, 0x5, 0x7, 0x401, 0x6, 0x601, 0x6, 0x5, 0x3, 0x8, 0x60, 0x8, 0x7, 0x0, 0x6, 0x8, 0x0, 0x1ff, 0x6, 0x0, 0xc70, 0x7b, 0x3, 0x7, 0x6, 0x5, 0x3, 0x4, 0x80000001, 0x7, 0xa, 0x9, 0x123a00, 0x6, 0x0, 0x200, 0x80000000, 0x1, 0x81, 0x8001, 0x61c00000, 0xb7, 0x0, 0x6, 0x7f, 0x1000, 0x3, 0x40, 0x80000001, 0x7fffffff, 0x2, 0x18, 0x8, 0x2, 0x5, 0x4, 0x3, 0x9, 0x9, 0x1, 0x5, 0x9, 0xfff, 0x6, 0x7, 0x6, 0x3, 0x8, 0x2, 0x10000, 0x3, 0x6, 0x80000001, 0xfffffc00, 0x3, 0x5, 0x401, 0x800, 0x6, 0x8, 0x400, 0x9, 0x2fa, 0x200, 0x7, 0x8, 0xa9, 0x5, 0x90e, 0xfffffffd, 0x1, 0x0, 0x5c3, 0x40a7c427, 0x8001, 0x45d1, 0x1ff, 0x6, 0x2f, 0x5, 0x56c4, 0x6, 0x7, 0xfdce, 0x9, 0x3, 0x5, 0x4, 0xffffffff, 0x1, 0x0, 0x4, 0x80, 0x8, 0x1d, 0xb, 0x40, 0x400, 0xcd93, 0xfffffffe, 0x6, 0x36, 0xe, 0x9, 0xfffffffb, 0x4, 0x7fff, 0x8, 0x9, 0xff, 0x8000, 0x36, 0x4, 0x68, 0x0, 0xfffffffe, 0x77466976, 0xe, 0x0, 0x1, 0x9, 0x7ff, 0x5, 0xec, 0x6, 0x8, 0x2, 0x8, 0x9, 0x17f5, 0x3, 0x6e, 0x5, 0x6, 0x4, 0x8001, 0x608, 0x4, 0x9e, 0x1, 0x6, 0x5, 0x8, 0x7f, 0x100, 0x81, 0x5, 0x5, 0x4, 0x9, 0x0, 0x52b, 0x1, 0x8, 0x1, 0x9, 0x4, 0x2, 0x4, 0x100, 0x5, 0x2, 0x4, 0x40, 0x40, 0x0, 0xb, 0x9, 0xb, 0x0, 0x4, 0x2, 0xec2, 0xa, 0x7ff, 0x9, 0x7fff, 0x2e32, 0x7ff, 0xb3, 0x22, 0xfeb9, 0x8, 0x3, 0x0, 0x19, 0x83, 0x0, 0xffffffff, 0x4698d2d7, 0x5, 0x0, 0x7, 0x3, 0x0, 0x0, 0x4, 0x6, 0x401, 0x1, 0x200, 0x8, 0x7ff, 0x8, 0x9, 0x8, 0x10, 0xfffffffa, 0x1, 0x8, 0x66e, 0x10001, 0x3, 0x4, 0x5, 0x8, 0x4, 0x40d7, 0x5, 0x0, 0x0, 0xfc, 0xd800, 0x1, 0x9, 0x5, 0x2, 0x9, 0x7, 0x6, 0xff, 0x7, 0x2, 0x400, 0xfffffffb, 0x0, 0x3, 0x1, 0x4, 0x0, 0x3, 0x6, 0xfff, 0x0, 0x6, 0xf, 0x1, 0x4, 0x2, 0x4, 0x8, 0x77, 0x7, 0x101, 0x4, 0xffffffff, 0x4, 0xfffffbdd, 0x0, 0x1, 0x10, 0x3ff, 0x0, 0x6, 0x3f0, 0x1000, 0x5, 0x4, 0x5, 0x4, 0x8bc, 0x1, 0xfffffffd, 0x81, 0x9, 0x0, 0xb2, 0x3, 0x31, 0xfffffff8, 0x5, 0x8000, 0x7, 0x100, 0x3, 0x3, 0x5, 0xfffff001, 0x4, 0x7f, 0x3c, 0x0, 0x3, 0x0, 0x3f6e, 0xaec, 0x0, 0x31ec, 0x7, 0xfffffab3, 0x8a7, 0x7ff, 0x7, 0x2, 0x1, 0x1, 0x7fe, 0xb, 0x6, 0xd, 0x0, 0x44, 0x9, 0x6, 0x8, 0x8001, 0x1, 0x3ff, 0x9, 0xa, 0x6, 0x2, 0x2, 0x9, 0xe, 0xd26, 0x4, 0xfffff2f8, 0x6, 0x6, 0x80, 0x4, 0x7e6bee85, 0x7ff, 0x7fff, 0x5, 0x9, 0x482, 0x7, 0x80000000, 0x1, 0x4, 0xfffffffa, 0x7, 0x8, 0x2, 0x3, 0x698d, 0x7, 0x122, 0xffff6f36, 0x3, 0xffff, 0x4, 0x6, 0x10001, 0xfffffffd, 0x6, 0x7, 0x2, 0x9, 0x0, 0xfff, 0x8, 0x9, 0x400, 0x4, 0x9, 0x3ff, 0x4, 0x0, 0x9, 0x6, 0x5, 0x8, 0x45, 0x2, 0x6, 0x7, 0x3ff, 0x8a8, 0x401, 0x4, 0x0, 0x1ff, 0x5, 0xbf, 0xfffffff8, 0x6, 0x2, 0xe32f, 0x0, 0xffffffff, 0x7, 0x0, 0x4, 0x4, 0x6, 0x8, 0x8, 0x0, 0x8000, 0x9, 0x9, 0x7, 0x7, 0x3, 0x7fffffff, 0x3, 0xfffffff5, 0x6, 0x8001, 0x81, 0x4, 0x3, 0x8000, 0x1, 0xfffffff8, 0x92, 0x7, 0xc, 0xa, 0x4, 0x0, 0x8000, 0xe5, 0x1, 0x6, 0x6, 0x3, 0x9, 0x1, 0x4, 0x5, 0x8, 0x9, 0x252, 0x5, 0x6, 0x1, 0xf204, 0x2, 0x1, 0x5, 0x8001, 0x7, 0x5, 0x5, 0x1, 0x1, 0x5, 0x9, 0xfffffff8, 0x4, 0x7fffffff, 0x6, 0x6, 0x1, 0x9, 0x9, 0x0, 0xc39f, 0x1, 0x3, 0x9, 0x3, 0x7, 0x800, 0xd, 0x5, 0xdc4b, 0x6, 0x9, 0x4fb, 0x5, 0x5, 0x0, 0x4, 0x4, 0x7f, 0x6, 0x5, 0x1000, 0xf, 0x3, 0xb8, 0xffff, 0x0, 0xffffffff, 0x86f, 0x3, 0x2, 0x7fffffff, 0x5, 0x3, 0x4, 0xff, 0x5, 0x0, 0x226c5e59, 0x4, 0x7, 0x3, 0x5, 0x3, 0x1, 0x3, 0x3, 0x50, 0x8858, 0x6, 0x8000, 0xe, 0x6, 0x9, 0x6, 0xffffb3cd, 0x4, 0x3a1a, 0xa4, 0x6, 0x9, 0x44a, 0x5, 0xb1b, 0x3, 0x92be, 0x10, 0x7fffffff, 0xd6b6, 0x7, 0xd7, 0x3, 0x90, 0x0, 0x9, 0x6, 0x2, 0xb95b, 0x5, 0x7, 0x482d, 0x1, 0x3ff, 0x8, 0x8, 0x1ff, 0x20000, 0x9, 0x280, 0x0, 0x64a5c8f, 0x0, 0x3, 0xffffffff, 0x7, 0x100, 0x9, 0x3, 0x8, 0x5, 0xfb31, 0x4, 0x7ff, 0x3, 0x1, 0x2, 0x6363fcbf, 0xbd, 0x0, 0x3ff, 0x40, 0x4, 0x0, 0x5, 0x8, 0x5, 0x5e3, 0xd82, 0x1, 0xfffff001, 0x1, 0x1000, 0x4, 0x0, 0x72, 0x7fffffff, 0x94d, 0x8, 0x4, 0xf, 0x6, 0x2, 0x3ff, 0xa, 0x80, 0xb, 0x5, 0x0, 0x9, 0x9, 0x8001, 0x284, 0x8000, 0x6, 0xffffb6ab, 0x2, 0x1, 0x7, 0x80000000, 0xffffffff, 0x2, 0x3, 0x6, 0x3fbfd950, 0xfffffff7, 0x0, 0x1, 0x4, 0x2, 0x2, 0x5, 0x2, 0x8, 0x0, 0x6, 0x3, 0x7fffffff, 0x7, 0x702, 0x99, 0x2, 0x9, 0x58d, 0x8, 0x2, 0x2, 0x5, 0x1, 0x3c21, 0xd53c, 0xf, 0x5, 0x8, 0x8, 0x3, 0x9, 0x5, 0x7fff, 0x2, 0x2, 0x1, 0x8, 0xfffffffc, 0x4, 0x10, 0x2, 0x2, 0xfff, 0x8, 0x4, 0x51c, 0x4bd50, 0x0, 0x1, 0x57b, 0xffffffaf, 0x9, 0x9, 0x1, 0x2, 0x7f, 0xfcd, 0x10000, 0x6, 0xa0, 0x1, 0x3, 0xfffffff8, 0x4, 0x9, 0x1, 0x7, 0x9, 0xfff, 0x5, 0x8, 0x8, 0xc, 0xfa, 0x1, 0xf287, 0x6d8, 0x81, 0xd, 0x5730, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x9, 0xe64, 0x8000, 0x3, 0x6, 0x1000, 0x4, 0x1, 0x10000, 0x800, 0x10, 0xf, 0x3d7, 0x0, 0x4, 0x1, 0x2a, 0x4, 0xf7cd, 0x68, 0xfffffff9, 0x1, 0x81, 0x7, 0x1000, 0x9403, 0x6, 0x7, 0x401, 0xe, 0xfffffffc, 0x7, 0x1, 0x1, 0xd, 0x3, 0x3, 0x40, 0x4, 0x1, 0xffff701c, 0x3, 0xcc, 0x3, 0x7, 0x9, 0x8, 0x1, 0x0, 0x6, 0x8, 0xc686, 0x56a3, 0x9, 0xdf, 0x1, 0x4, 0x8, 0xc, 0x5, 0x5, 0x7, 0xfff, 0xd, 0xfff, 0x3, 0x1ff, 0xc42, 0x40, 0x5, 0x1, 0x8, 0xbb, 0x2, 0x3, 0x2, 0xfffff801, 0x4c, 0x5, 0x7, 0x10, 0x2, 0x8, 0x101, 0x1, 0x2, 0xfffffff9, 0x3, 0x4, 0x80000, 0xc0000000, 0x0, 0x0, 0x1, 0x1, 0xffff, 0x1, 0x2, 0x9, 0x7fff, 0x81, 0x1, 0x0, 0x5, 0x1, 0x1a, 0x3, 0xfffff7d4, 0x4, 0x28f4, 0x9, 0xfffffe01, 0x6, 0x6, 0x0, 0x18, 0x3, 0x1ff, 0x6, 0x2, 0x9, 0x1, 0xffff2653, 0xfffffff9, 0x3f9e, 0x6, 0x3, 0x400, 0x8, 0x3, 0xe, 0x10, 0x8, 0xffffff81]}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x4002, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x40041, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}, 0xfffffffffffffe90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x3}, 0x8) 3.412635021s ago: executing program 7 (id=2537): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsync(r1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000300)="66b80c000f0069d0d06299af4100660f6f8dee35c5dd66420f3a0af2c0b8010000000f01c1c401e5efe267f448b800380000000000000f23d80f21f835800000f00f23f8450f01cfb905090000b8adfb112dba000000000f30", 0x59}], 0x1, 0x14, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001200)={0x34, r3, 0x801, 0x70bd2b, 0x3, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, '\x00\x00\x00 \x00'}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xd0}, 0x40000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x5) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x15) read(r9, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2.931416339s ago: executing program 7 (id=2538): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000002a00)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000002a00)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) (async) 2.844775358s ago: executing program 5 (id=2541): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/141, 0x8000, 0x1800, 0x7, 0x1}, 0x20) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/141, 0x8000, 0x1800, 0x7, 0x1}, 0x20) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x2a6340, 0x92) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x5, 0x8, 0x4, 0x32a5, 0x4}}) (async) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x5, 0x8, 0x4, 0x32a5, 0x4}}) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r1, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x16}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x24004010) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x0, 0x2, 0x24, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x8700, 0x40, 0x8, 0x5}}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000003c0)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, r2}, 0xc) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000400)={'\x00', 0x3, 0x7f, 0x8, 0x2, 0x1, 0xffffffffffffffff}) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000400)={'\x00', 0x3, 0x7f, 0x8, 0x2, 0x1, 0xffffffffffffffff}) fcntl$setown(r3, 0x8, r4) (async) fcntl$setown(r3, 0x8, r4) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x100c800, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x4}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'mptcp_pm\x00'}}]}}) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000600)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000680)={r5, 0x0, r3, 0x760, 0x80000}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000680)={r5, 0x0, r3, 0x760, 0x80000}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r0) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000800)=0x0) capset(&(0x7f0000000840)={0x19980330, r7}, &(0x7f0000000880)={0x4, 0x4, 0x800, 0xfffffff6, 0xfffffffb, 0x8001}) sendmsg$NFT_BATCH(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ftruncate(r8, 0xa) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000a00), r0) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x64, r10, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x800, 0xe786, 0x10, 0x7]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) bind$bt_l2cap(r0, &(0x7f0000000b40)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6}, 0xe) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000b80), 0x88000, 0x0) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r0, 0x8044610a, &(0x7f0000000bc0)={0x0, @raw}) openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000c40), 0x40, 0x0) (async) openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000c40), 0x40, 0x0) writev(r0, &(0x7f00000011c0)=[{&(0x7f0000000c80)="f1945f121af2e88ee9e8ff75132177986d9df8b54c7ca3694d89f4c50fc1ef37cb6fe9ee70308044b128e082ddfd40397f", 0x31}, {&(0x7f0000000cc0)="22f5a80a27581aa8978c7d73b521b86d484d7c14b8809241cee6fe23e6ac7174a60b257fec2d3ef0595d88996199084dfd88799c78d7481bae0600c283db4ea9d02bf57fa67e499ddb69fbae08e2e43fe428a6ae599b09190976e7ee3d3946cf750a4fa38e0ff8f3d3e573f99d81da93fa7e033c59337f6837e35e8cff8ef34cd18df9a5d45c66d22dba5c4d3e2656e134a7d9dfe35c2cb16a32da6bd5d42cd3b61a9abc9271635b57900296e7f0095e298aabfba82d6d5f16edc5f6ff4a40a286af8c3ab7b5625087a1bc62c25b155c59027a84e045525d58b7c952c399cbd4d5b8d1338f11bfe4bbf7b5ede988371a51666b0645411f", 0xf7}, {&(0x7f0000000dc0)="979cfb08be0ed9a2fefc698c2f77658992774bd98a2c1a9676b65aef4885877083c3d7e5baaad227adceb364c6b9b4b5010d6c59c893896f20e48847138fa4d0cd645bc9515d6f82a6d33ef51ca40f7de1073906f5fac21ecc7c0bda3c3cb9e51e2a170c3934f4bf4b161f1ee8d05335ccea615137c1f6610b7a6fb02d17eed19db4f5786341faaca5a2066ec20a3f6240a603441bc7142f717dc977fb55c03662ab806329c6fcec22cc40d203fc2cc6fb8f5cb8da14d115314b370ac0cfea6d22783e6131390a637d3c71755b3c56684e6c11922eb3df8bf630f35b69d0a7f4a544814ae5c9962b79fb7603e519e4e13e02a2a6959dde", 0xf7}, {&(0x7f0000000ec0)="a7bfc7ed77b9ea8507b60a44ea98304e0e6dc13b699bb0a41b80fbd0d85f4819ee7262bb4f30f1dcb68e65f9ecc2f3dba24d5991b09aa2745737f7d59dbab597b6b2dad9db2b4d6faa640f15102cd96e6e7d0d2251940898d445b7c18eefc758fc1e77faa14fb7604c5cfd17f06b28f4d42683d4c83758d44bcf79818271d30496b260b7b75159b397d2c6decc1ce0f7a8aea187", 0x94}, {&(0x7f0000000f80)="fe4efec560ca74481d7a4e8970114025c48152edecf30aae17fc1214d7bfbbe56a8e64a20deea29a7b6849eb0d7213b538c9a387501e21b8bf5b2ffd94b55e66c0fa19f42cb70e9fd670f1dd921fb5f54efa05de0040d930cb8c592e968a0441e46ad82c1a706f0b5c58", 0x6a}, {&(0x7f0000001000)="4bbe4d14d6cf794cb879e355050b1a1f7d7a50d175111434ce9694d87b7ccdd7292e91b0ef5b23827f649affcf50c2ea5c0c93b437ccebbefc6647d321f5abb1497aed650d220ccd8d6eee45a97597", 0x4f}, {&(0x7f0000001080)="1837f7e27f607b7b321eaf8d95d81ae83004a1925391648cec30e42c96dc8334c7033ad68818ae662183e31dab0a444bfa30b9067a4ca9303f86685c6c146db95fc60c60664f4eec00693fbc3d465842dbc5c89f5c34e37147871297f299eef2475eca774cb00ac086baf2384ecebcdde5fc77c79997cd3ab8ba9a511a3f433ffe168a00647eb12a9b28708846ec655213", 0x91}, {&(0x7f0000001140)="5aefd85db0a64432fc1cf4605bf99215cdf32fb256fa4288afeecdedafc247949e2806923c4b2f5c9fe115464ea9cdb1e44b61e9c41b60c6da048ca0f38f32a74b1f974cd2054dd6b92440789aa3431d0f020d76958e5b382069de0251", 0x5d}], 0x8) 2.844039274s ago: executing program 7 (id=2542): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) capset(&(0x7f0000000080)={0x19980330}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x40084146, &(0x7f0000000080)) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) (async) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async) capset(&(0x7f0000000080)={0x19980330}, 0x0) (async) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x40084146, &(0x7f0000000080)) (async) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) (async) 2.843626302s ago: executing program 5 (id=2544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0xc4, r1, 0x200, 0x70bd26, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4000}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0x8a, 0x5b, "75413e8ee7b29024ac863f7e093d245a6cc51d69ad42095e145422103f1e88d442529886876d347fe1bbe2f4b47d93b52205cb0975c0575690307d366d1942c56b28dfc5f17157121cfaa7de6074d4852fadd1e1caa3f4d3c5e7691a101d1f704521037ff1a0a9d673ae49b9c3e9a1899f0f627e972da9964c150717d7ee662548925247c1b5"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000881}, 0x4090) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0xc4, r1, 0x200, 0x70bd26, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4000}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0x8a, 0x5b, "75413e8ee7b29024ac863f7e093d245a6cc51d69ad42095e145422103f1e88d442529886876d347fe1bbe2f4b47d93b52205cb0975c0575690307d366d1942c56b28dfc5f17157121cfaa7de6074d4852fadd1e1caa3f4d3c5e7691a101d1f704521037ff1a0a9d673ae49b9c3e9a1899f0f627e972da9964c150717d7ee662548925247c1b5"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000881}, 0x4090) (async) 2.780542553s ago: executing program 5 (id=2546): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="fba70000e80000867f0004"], 0x14}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="66ba2100ec430f00994798b213b9240a00000f32b885a08d80ef66bafc0cb000ee0f30f3400f09660f38803f8f23c00f21f835020002000f23f8c40279134e9ac4c17b110d010000000f01c5", 0x4c}], 0x1, 0x15, 0x0, 0x0) r6 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100), &(0x7f00000000c0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) io_uring_enter(r6, 0x567, 0x1000a387, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x7f, 0xbf, 0xb3, 0x2, 0x29, 0x4b, 0xd, 0xe, 0xe, 0x2, 0x0, 0x6, 0x8, 0x1, 0xcc, 0x9e}}) 2.65312346s ago: executing program 5 (id=2547): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8942, &(0x7f00000014c0)={'ip6tnl0\x00', @ifru_names='vlan0\x00'}) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x30004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r3 = syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440)=r2, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 2.652338243s ago: executing program 5 (id=2548): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01000000003c00000002000000000000000300000d000000000000000003000000000000000200000000000000030000000000000000000004000000000000000000000009020000000000b61644f1e438aa1b87a8302e32550290b8db1b2665c8faad821b4a3e0509aae1e61ff2075fbdc2579606191d622103000000ce4689dc234e42618f44a45cc3bf0f6e80031adf775887a3b342919d312b19f6d4dc1918c1e75f03d1f5ffffffffffffff00"], 0x0, 0x56, 0x0, 0x1}, 0x28) setrlimit(0x4, &(0x7f0000000000)={0x2, 0x7fffffff}) ioperm(0x0, 0xfffffffffffffffa, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000bdd000/0x2000)=nil, 0x2000, 0x0, 0x100010, 0xffffffffffffffff, 0x8000000) r0 = userfaultfd(0x801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001f40), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_io_uring_setup(0xc, &(0x7f00000002c0)={0x0, 0x29, 0x8, 0x0, 0x20b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC, @ANYRESOCT=0x0]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) io_setup(0x9, &(0x7f00000001c0)) madvise(&(0x7f0000122000/0x4000)=nil, 0x4000, 0x66) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYBLOB='3']) llistxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.321749147s ago: executing program 5 (id=2549): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c00a7aa00000000000000000a0006000000074000000001"], 0x44}}, 0x4000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r0, &(0x7f0000000040)={0x10, 0x6}, 0x14) (async) bind$packet(r0, &(0x7f0000000040)={0x10, 0x6}, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000000010104000000000000000002000005240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000100000000000800074000000000100016"], 0x74}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000000010104000000000000000002000005240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000100000000000800074000000000100016"], 0x74}}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x885d0000000, 0x200) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x8080) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x1c, 0x81, 0x8, 0x2, 0x8802, 0x1}, 0x50) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x10800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') (async) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) (async) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000180)={0xc, 0x0}) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc) splice(r7, 0x0, r9, 0x0, 0x4ffe6, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, r6}) 352.991772ms ago: executing program 6 (id=2560): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40006}, 0x20000010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 313.221518ms ago: executing program 6 (id=2561): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) dup(r0) 312.961575ms ago: executing program 6 (id=2562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x34, r1, 0x1, 0xffffffff, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe0, 0x14, 0x8, 0x70bd2c, 0x25dfdbfb, {0x2a, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "cc8c2fd0fb3e1cfbcf693fcd2260d681"}, @INET_DIAG_REQ_BYTECODE={0xb7, 0x1, "07811561e81ef4e03662a4e24757914fcf0dc14e45879e325788ab08651cb935b74940cc10b48ac4aa16b55c5294367c51b46b23c19c9b55aba0214d9a5879a923c2c2c2b9ab1a2571211379a7d3e4da4c9d82e622906792113c3aa47ed2c9d1b40c5300bc1eca50f746af29f09d6f0328a6e9f13d0124fe193e7e73df71e13fe258e39991283fbc0eae9e8515cce166fca2fe0d1a6d50970bea6dea43a23bceaec326fb4ae1c7b78968903d3b32c22d45a4ae"}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20040000}, 0x8890) r3 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=r4, @ANYRES32=r4, @ANYBLOB="00000000000000001800068008000100707070001c000280080053b2", @ANYRESOCT=r4, @ANYBLOB="08000a003f72659b20cae88aa88dfe09b9bcc0197f", @ANYRES64=r2, @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) 184.037695ms ago: executing program 6 (id=2563): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = userfaultfd(0x80001) (rerun: 32) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) (async) syz_emit_ethernet(0x104, &(0x7f0000000540)={@broadcast, @random='\x00\x00B\f\x00', @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0xce, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @mcast2, [@hopopts={0x11}], "fad1dd39000043cc9857339cf3ca39effb17c16e7c90f8642e263bdf1cdcfe8ffc8adaf294a2c7540188e1f93b888b462b50e238383b44092d9b07a2e6e40554cc338814f024b7146aa329df88c5d29f5ec7497f2870da5f0ca7b56d669288928a74427a82d3600ad3353e9daa27dcd359694603d92fc265d85b46026fe8fa223616201bb20a7bb4a17a34c3d2a088f241a53b12da6a"}}}}}}}, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x18) r2 = socket$isdn_base(0x22, 0x2, 0x10) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000005f00)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.38343ms ago: executing program 6 (id=2564): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2080000000000000080221daeccfda5eb75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r1, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port0\x00', 0xbb, 0x1f8b458628a108d1, 0x9, 0x8, 0x10000000, 0x0, 0x5}) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) close$binfmt(r3) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000040)=0xffff, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r4, &(0x7f000000ae80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) pselect6(0x95, &(0x7f00000001c0)={0x3f, 0xffffffffffffff7e, 0xfffffffffffffffe, 0x6, 0xfffffffffffffffd, 0x3, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, r1) syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd0000000800040001000100"], 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x0) prlimit64(r5, 0x0, &(0x7f00000002c0)={0x9, 0x4}, &(0x7f0000000300)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000400)=0xffffffffffffffff) 0s ago: executing program 6 (id=2565): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/186, 0xba) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000003c00000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) 0s ago: executing program 6 (id=2566): mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000001c0)='bfs\x00', 0x208004, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./cgroup\x00', 0x80800, 0x80) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x5}}, './cgroup/file0\x00'}) kernel console output (not intermixed with test programs): 5089][ T40] audit: type=1400 audit(1755817251.110:54632): avc: denied { read write } for pid=12221 comm="syz.0.1772" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 152.925114][ T40] audit: type=1400 audit(1755817251.110:54633): avc: denied { open } for pid=12221 comm="syz.0.1772" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 152.925156][ T40] audit: type=1400 audit(1755817251.110:54634): avc: denied { ioctl } for pid=12221 comm="syz.0.1772" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 152.954620][ T40] audit: type=1400 audit(1755817251.156:54635): avc: denied { map } for pid=12221 comm="syz.0.1772" path="/proc/1142/net/vlan/vlan0" dev="proc" ino=4026533649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 152.965417][ T40] audit: type=1400 audit(1755817251.156:54636): avc: denied { execute } for pid=12221 comm="syz.0.1772" path="/proc/1142/net/vlan/vlan0" dev="proc" ino=4026533649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 152.991441][ T40] audit: type=1400 audit(1755817251.175:54637): avc: denied { write } for pid=12225 comm="syz.5.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 153.003814][ T40] audit: type=1400 audit(1755817251.203:54638): avc: denied { append } for pid=12225 comm="syz.5.1773" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 153.049298][T12232] input: syz0 as /devices/virtual/input/input31 [ 153.057796][T11148] udevd[11148]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 153.099217][ T5981] Bluetooth: hci1: command tx timeout [ 153.136146][ T40] audit: type=1400 audit(1755817251.315:54639): avc: denied { connect } for pid=12238 comm="syz.0.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 153.184489][ T5981] Bluetooth: hci3: command 0x1003 tx timeout [ 153.184691][ T5974] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 153.280717][ T34] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 153.355468][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 153.431930][T12259] kAFS: Can only specify source 'none' with -o dyn [ 153.463496][ T34] usb 10-1: config 0 has no interfaces? [ 153.465503][ T34] usb 10-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 153.468414][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.471631][ T34] usb 10-1: config 0 descriptor?? [ 153.569247][ T6036] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 153.612035][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 153.690649][ T3249] usb 10-1: USB disconnect, device number 2 [ 153.742148][ T6036] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.745715][ T6036] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 153.749893][ T6036] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.753791][ T6036] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 153.758279][ T6036] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 153.763964][ T6036] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.766957][ T6036] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.769473][ T6036] usb 5-1: Product: syz [ 153.770862][ T6036] usb 5-1: Manufacturer: syz [ 153.775548][ T6036] cdc_wdm 5-1:1.0: skipping garbage [ 153.777644][ T6036] cdc_wdm 5-1:1.0: skipping garbage [ 153.780243][ T6036] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 153.782237][ T6036] cdc_wdm 5-1:1.0: Unknown control protocol [ 154.377545][ T6036] usb 5-1: USB disconnect, device number 21 [ 154.477943][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 154.488510][T12285] sp0: Synchronizing with TNC [ 154.493279][T12285] random: crng reseeded on system resumption [ 154.544550][T12288] __nla_validate_parse: 65 callbacks suppressed [ 154.544563][T12288] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1792'. [ 154.686102][T12310] netlink: 75 bytes leftover after parsing attributes in process `syz.1.1800'. [ 154.763081][T12314] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 154.772195][T12314] bond1: entered allmulticast mode [ 154.773991][T12314] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.836860][T12320] infiniband syz1: set down [ 154.838536][T12320] infiniband syz1: added ipvlan0 [ 154.847277][T12320] RDS/IB: syz1: added [ 154.848659][T12320] smc: adding ib device syz1 with port count 1 [ 154.850736][T12320] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 155.069342][T12334] tmpfs: Unknown parameter 'nr_inos4' [ 155.189819][T12337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5138 sclass=netlink_route_socket pid=12337 comm=syz.1.1810 [ 155.270764][T12340] program syz.1.1811 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.276163][T12340] overlayfs: failed to resolve './file1': -2 [ 155.322565][ T5974] Bluetooth: hci1: command 0x0405 tx timeout [ 155.383141][T12348] binder: 12347:12348 ioctl c0306201 200000000440 returned -11 [ 155.583762][T12359] binder: Binderfs stats mode cannot be changed during a remount [ 155.589797][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 155.824974][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 155.835678][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 155.986406][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.990034][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 155.993102][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.996352][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.001217][T12361] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 156.007395][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 156.227805][T12361] PM: Enabling pm_trace changes system date and time during resume. [ 156.227805][T12361] PM: Correct system time has to be restored manually after resume. [ 156.371423][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032e6a400: rx timeout, send abort [ 156.375018][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888032e6a400: 0x3f002: (3) A timeout occurred and this is the connection abort to close the session. [ 156.380536][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032e69800: rx timeout, send abort [ 156.383540][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888032e69800: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 156.462912][T12383] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1826'. [ 156.530326][T12390] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 156.576136][T12390] binder: 12389:12390 ioctl c0306201 0 returned -14 [ 156.579967][T12390] binder: 12389:12390 ioctl 4018620d 0 returned -22 [ 156.701704][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 156.758470][T12398] netlink: 'syz.1.1831': attribute type 10 has an invalid length. [ 156.761686][T12398] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1831'. [ 156.765830][T12398] dummy0: entered promiscuous mode [ 156.769838][T12398] bridge0: port 1(dummy0) entered blocking state [ 156.772456][T12398] bridge0: port 1(dummy0) entered disabled state [ 156.774461][T12398] dummy0: entered allmulticast mode [ 156.777448][T12398] bridge0: port 1(dummy0) entered blocking state [ 156.779863][T12398] bridge0: port 1(dummy0) entered forwarding state [ 156.947533][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 157.456833][T12415] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1837'. [ 157.720419][ T5974] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.723604][ T5974] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.726270][ T5974] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.730054][ T5974] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.733434][ T5974] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.747328][T12422] lo speed is unknown, defaulting to 1000 [ 157.792051][ T6033] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 157.802802][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 157.851773][T12422] chnl_net:caif_netlink_parms(): no params data found [ 157.890261][T12422] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.892435][T12422] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.894740][T12422] bridge_slave_0: entered allmulticast mode [ 157.897086][T12422] bridge_slave_0: entered promiscuous mode [ 157.900094][T12422] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.902420][T12422] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.904807][T12422] bridge_slave_1: entered allmulticast mode [ 157.907176][T12422] bridge_slave_1: entered promiscuous mode [ 157.925487][T12422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.929539][T12422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.949354][T12422] team0: Port device team_slave_0 added [ 157.953481][T12422] team0: Port device team_slave_1 added [ 157.964758][ T6033] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 157.968287][ T6033] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 157.972567][ T6033] usb 10-1: config 0 interface 0 has no altsetting 0 [ 157.976581][T12422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.977362][ T6033] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 157.978795][T12422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.978812][T12422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.979330][T12422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.982678][ T6033] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 157.990777][T12422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.990797][T12422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.011507][ T6033] usb 10-1: Product: syz [ 158.013006][ T6033] usb 10-1: Manufacturer: syz [ 158.014584][ T6033] usb 10-1: SerialNumber: syz [ 158.017611][ T6033] usb 10-1: config 0 descriptor?? [ 158.024565][ T6033] hub 10-1:0.0: bad descriptor, ignoring hub [ 158.026543][ T6033] hub 10-1:0.0: probe with driver hub failed with error -5 [ 158.030423][ T6033] usb 10-1: selecting invalid altsetting 0 [ 158.035208][T12422] hsr_slave_0: entered promiscuous mode [ 158.037325][T12422] hsr_slave_1: entered promiscuous mode [ 158.039688][T12422] debugfs: 'hsr0' already exists in 'hsr' [ 158.041607][T12422] Cannot create hsr debugfs directory [ 158.059353][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 158.111637][T12422] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 158.115892][T12422] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 158.120185][T12422] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 158.125849][T12422] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 158.135047][T12436] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1842'. [ 158.138718][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 158.138731][ T40] audit: type=1400 audit(1755817256.002:54698): avc: denied { listen } for pid=12435 comm="syz.1.1842" lport=58403 faddr=::ffff:10.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 158.146025][T12422] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.148599][ T40] audit: type=1400 audit(1755817256.002:54699): avc: denied { accept } for pid=12435 comm="syz.1.1842" lport=58403 faddr=::ffff:10.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 158.151126][T12422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.158651][ T40] audit: type=1400 audit(1755817256.002:54700): avc: denied { setopt } for pid=12435 comm="syz.1.1842" lport=58403 faddr=::ffff:10.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 158.161403][T12422] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.171874][T12422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.184969][T12445] lo speed is unknown, defaulting to 1000 [ 158.201172][T12422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.209395][T11303] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.212992][T11303] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.220154][T12422] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.225683][T11300] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.229265][T11300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.236496][T12419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1839'. [ 158.239745][T11304] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.243770][T11304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.248035][T12419] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 158.305247][ T40] audit: type=1400 audit(1755817256.152:54701): avc: denied { read } for pid=12455 comm="syz.5.1845" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 158.358775][ T1476] usb 10-1: USB disconnect, device number 3 [ 158.363150][T12422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.397914][ T40] audit: type=1400 audit(1755817256.236:54702): avc: denied { ioctl } for pid=12470 comm="syz.5.1848" path="socket:[52240]" dev="sockfs" ino=52240 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 158.406737][ T40] audit: type=1400 audit(1755817256.236:54703): avc: denied { write } for pid=12470 comm="syz.5.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 158.410875][T12472] netlink: 'syz.5.1848': attribute type 4 has an invalid length. [ 158.412995][ T40] audit: type=1400 audit(1755817256.245:54704): avc: denied { read } for pid=12470 comm="syz.5.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 158.452431][T12422] veth0_vlan: entered promiscuous mode [ 158.459241][T12422] veth1_vlan: entered promiscuous mode [ 158.470990][T12422] veth0_macvtap: entered promiscuous mode [ 158.474174][T12422] veth1_macvtap: entered promiscuous mode [ 158.481428][T12422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.486618][T12422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.491452][T11301] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.494287][T11301] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.497424][T11301] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.500256][T11301] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.503547][ T40] audit: type=1400 audit(1755817256.339:54705): avc: denied { map } for pid=12479 comm="syz.1.1850" path="socket:[53260]" dev="sockfs" ino=53260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 158.534263][T11301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.536783][T11301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.546139][T11305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.547172][ T40] audit: type=1400 audit(1755817256.376:54706): avc: denied { wake_alarm } for pid=12486 comm="syz.1.1852" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 158.548763][T11305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.595145][T12494] openvswitch: netlink: Tunnel attr 1 has unexpected len 5 expected 4 [ 158.620113][T12498] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 158.679345][T12499] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1855'. [ 158.839742][ T3249] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 158.905410][ T1476] usb 5-1: USB disconnect, device number 22 [ 158.914598][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 159.012120][ T3249] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 159.015558][ T3249] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 159.019567][ T3249] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 159.023543][ T3249] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 159.027785][ T3249] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 159.033431][ T3249] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 159.037015][ T3249] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 159.040161][ T3249] usb 6-1: Product: syz [ 159.040204][ T40] audit: type=1400 audit(1755817256.834:54707): avc: denied { write } for pid=12500 comm="syz.0.1856" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 159.041932][ T3249] usb 6-1: Manufacturer: syz [ 159.056033][ T3249] cdc_wdm 6-1:1.0: skipping garbage [ 159.058263][ T3249] cdc_wdm 6-1:1.0: skipping garbage [ 159.061107][ T3249] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 159.063540][ T3249] cdc_wdm 6-1:1.0: Unknown control protocol [ 159.171304][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 159.374240][ T1476] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 159.541842][ T1476] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 159.544537][ T1476] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 159.547686][ T1476] usb 5-1: config 0 interface 0 has no altsetting 0 [ 159.551890][ T1476] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 159.554818][ T1476] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 159.557628][ T1476] usb 5-1: Product: syz [ 159.559020][ T1476] usb 5-1: Manufacturer: syz [ 159.560501][ T1476] usb 5-1: SerialNumber: syz [ 159.562808][ T1476] usb 5-1: config 0 descriptor?? [ 159.565928][ T1476] hub 5-1:0.0: bad descriptor, ignoring hub [ 159.568847][ T1476] hub 5-1:0.0: probe with driver hub failed with error -5 [ 159.572102][ T1476] usb 5-1: selecting invalid altsetting 0 [ 159.629671][T12515] tipc: Started in network mode [ 159.632619][T12515] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 159.636441][T12515] tipc: Enabling of bearer rejected, failed to enable media [ 159.651137][T12520] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1862'. [ 159.677171][T12525] fuse: Bad value for 'group_id' [ 159.678727][T12526] fuse: Bad value for 'rootmode' [ 159.678861][T12525] fuse: Bad value for 'group_id' [ 159.747665][T12543] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1869'. [ 159.750730][T12543] connsecmark_tg_check: 55 callbacks suppressed [ 159.750738][T12543] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 159.864871][ T3249] usb 6-1: USB disconnect, device number 20 [ 159.919832][ T1476] usb 5-1: USB disconnect, device number 23 [ 159.931585][T12566] nbd: couldn't find device at index -1605786504 [ 159.951858][ T5974] Bluetooth: hci3: command tx timeout [ 160.026451][ C2] net_ratelimit: 2 callbacks suppressed [ 160.026467][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 160.139200][T12582] block device autoloading is deprecated and will be removed. [ 160.141936][T12582] syz.6.1882: attempt to access beyond end of device [ 160.141936][T12582] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 160.166992][T12587] sp0: Synchronizing with TNC [ 160.169321][T12587] sp0: Found TNC [ 160.175177][T12586] [U] ` [ 160.282980][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 160.375819][T12597] input: syz0 as /devices/virtual/input/input34 [ 160.376057][T12604] ceph: No mds server is up or the cluster is laggy [ 160.377872][T12597] input: failed to attach handler leds to device input34, error: -6 [ 160.416817][T12613] netlink: 'syz.5.1889': attribute type 8 has an invalid length. [ 160.504892][T12635] __nla_validate_parse: 2 callbacks suppressed [ 160.504903][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1895'. [ 160.527930][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1895'. [ 160.630041][T12645] overlayfs: statfs failed on './file0' [ 160.696357][T12650] usb usb8: usbfs: process 12650 (syz.6.1901) did not claim interface 0 before use [ 160.702557][T12650] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 160.705205][T12650] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 160.708440][T12650] vhci_hcd vhci_hcd.0: Device attached [ 160.711019][T12650] bond0: Error: Cannot enslave bond to itself. [ 160.713270][T12652] vhci_hcd: connection closed [ 160.713431][T11305] vhci_hcd: stop threads [ 160.716306][T11305] vhci_hcd: release socket [ 160.717776][T11305] vhci_hcd: disconnect device [ 161.138226][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 161.394794][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 161.546343][ T6051] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 161.678563][T12686] input: syz0 as /devices/virtual/input/input35 [ 161.679310][T12687] syzkaller1: entered promiscuous mode [ 161.682897][T12687] syzkaller1: entered allmulticast mode [ 161.688294][T12686] Attempt to restore checkpoint with obsolete wellknown handles [ 161.707163][ T6051] usb 11-1: config 1 has an invalid interface number: 7 but max is 0 [ 161.709827][ T6051] usb 11-1: config 1 has no interface number 0 [ 161.711284][T12690] tmpfs: Unknown parameter 'usrs' [ 161.712453][ T6051] usb 11-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 161.719494][ T6051] usb 11-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.726646][ T6051] usb 11-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 161.729511][ T6051] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.732085][ T6051] usb 11-1: Product: syz [ 161.733488][ T6051] usb 11-1: Manufacturer: syz [ 161.734980][ T6051] usb 11-1: SerialNumber: syz [ 161.737751][T12669] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 161.740844][ T6051] usb 11-1: Error in usbnet_get_endpoints (-22) [ 161.766312][T12702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1917'. [ 161.770042][T12702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1917'. [ 161.773355][T12702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1917'. [ 161.776314][T12702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1917'. [ 161.779165][T12702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1917'. [ 161.782565][T12702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1917'. [ 161.785837][T12702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1917'. [ 161.788805][T12702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1917'. [ 161.927627][T12721] Process accounting resumed [ 161.989183][T12730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12730 comm=syz.5.1925 [ 162.006573][T12730] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.010291][T12730] netlink: 'syz.5.1925': attribute type 1 has an invalid length. [ 162.018840][T12730] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.031311][T12730] veth3: entered promiscuous mode [ 162.034392][T12730] bond2: (slave veth3): Enslaving as an active interface with a down link [ 162.045039][T12730] netlink: 'syz.5.1925': attribute type 10 has an invalid length. [ 162.049887][T12730] team0: Port device dummy0 added [ 162.061540][T12730] vlan0: entered allmulticast mode [ 162.063314][T12730] bond2: entered allmulticast mode [ 162.065645][T12730] bond2: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 162.104077][T12742] netlink: 'syz.0.1929': attribute type 11 has an invalid length. [ 162.164661][ T5974] Bluetooth: hci3: command tx timeout [ 162.251056][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 162.299197][T12755] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1677391066 (6709564264 ns) > initial count (4324526900 ns). Using initial count to start timer. [ 162.506653][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 163.088537][ T6019] usb 11-1: USB disconnect, device number 2 [ 163.099854][T12771] cgroup2: Unknown parameter 'memory_hugetlbS穈]8Waccounting' [ 163.103860][ T1476] IPVS: starting estimator thread 0... [ 163.108381][T12772] random: crng reseeded on system resumption [ 163.116795][T12772] Restarting kernel threads ... [ 163.118692][T12772] Done restarting kernel threads. [ 163.224955][T12775] IPVS: using max 53 ests per chain, 127200 per kthread [ 163.361869][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 163.618491][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 163.757427][ T6019] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 163.909239][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 163.909254][ T40] audit: type=1400 audit(1755817261.399:54737): avc: denied { getopt } for pid=12812 comm="syz.0.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 163.918632][ T40] audit: type=1400 audit(1755817261.399:54738): avc: denied { getopt } for pid=12812 comm="syz.0.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 163.932945][ T6019] usb 6-1: config 0 has no interfaces? [ 163.936540][ T6019] usb 6-1: New USB device found, idVendor=7d25, idProduct=8e26, bcdDevice= 0.40 [ 163.939415][ T6019] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.941768][ T6019] usb 6-1: Product: syz [ 163.943064][ T6019] usb 6-1: Manufacturer: syz [ 163.945998][ T6019] usb 6-1: config 0 descriptor?? [ 164.106379][T12823] netlink: 'syz.0.1951': attribute type 5 has an invalid length. [ 164.132251][T12826] mkiss: ax0: crc mode is auto. [ 164.167322][ T6036] usb 6-1: USB disconnect, device number 21 [ 164.199588][T12830] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input36 [ 164.215202][T12830] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 164.308391][T12833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.311214][T12833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.388224][ T5974] Bluetooth: hci3: command tx timeout [ 164.397985][ T40] audit: type=1400 audit(1755817261.848:54739): avc: denied { create } for pid=12840 comm="syz.6.1957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 164.404547][ T40] audit: type=1400 audit(1755817261.848:54740): avc: denied { map } for pid=12840 comm="syz.6.1957" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.413328][ T40] audit: type=1400 audit(1755817261.848:54741): avc: denied { execute } for pid=12840 comm="syz.6.1957" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.428172][ T40] audit: type=1400 audit(1755817261.876:54742): avc: denied { getopt } for pid=12844 comm="syz.6.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 164.456365][ T40] audit: type=1400 audit(1755817261.904:54743): avc: denied { connect } for pid=12848 comm="syz.6.1959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 164.457686][T12849] tmpfs: Bad value for 'mpol' [ 164.466753][ T40] audit: type=1400 audit(1755817261.923:54744): avc: denied { write } for pid=12848 comm="syz.6.1959" path="socket:[55361]" dev="sockfs" ino=55361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 164.474247][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 164.477010][ T40] audit: type=1400 audit(1755817261.923:54745): avc: denied { setopt } for pid=12848 comm="syz.6.1959" laddr=172.20.20.10 lport=1 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 164.485576][ T40] audit: type=1400 audit(1755817261.942:54746): avc: denied { read } for pid=12848 comm="syz.6.1959" path="socket:[55361]" dev="sockfs" ino=55361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 164.570265][ T6297] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 164.730306][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 164.734823][ T6297] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 164.738542][ T6297] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 164.742151][ T6297] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 164.746101][ T6297] usb 5-1: config 0 interface 0 has no altsetting 0 [ 164.749657][ T6297] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 164.753399][ T6297] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 164.757440][ T6297] usb 5-1: config 0 interface 0 has no altsetting 0 [ 164.760811][ T6297] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 164.764862][ T6297] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 164.768439][ T6297] usb 5-1: config 0 interface 0 has no altsetting 0 [ 164.771933][ T6297] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 164.775544][ T6297] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 164.779552][ T6297] usb 5-1: config 0 interface 0 has no altsetting 0 [ 164.782803][ T6297] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 164.786571][ T6297] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 164.790123][ T6297] usb 5-1: config 0 interface 0 has no altsetting 0 [ 164.792968][ T6297] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 164.796211][ T6297] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 164.799654][ T6297] usb 5-1: config 0 interface 0 has no altsetting 0 [ 164.802523][ T6297] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 164.805718][ T6297] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 164.809143][ T6297] usb 5-1: config 0 interface 0 has no altsetting 0 [ 164.813067][ T6297] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 164.817256][ T6297] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 164.821437][ T6297] usb 5-1: config 0 interface 0 has no altsetting 0 [ 164.825466][ T6297] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 164.829462][ T6297] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 164.832867][ T6297] usb 5-1: Product: syz [ 164.834498][ T6297] usb 5-1: Manufacturer: syz [ 164.836312][ T6297] usb 5-1: SerialNumber: syz [ 164.847836][ T3249] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 164.850813][ T6297] usb 5-1: config 0 descriptor?? [ 164.860718][ T6297] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 164.917320][T12880] Bluetooth: (null): Invalid header checksum [ 164.969856][T12874] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 164.988982][T12885] 9pnet_virtio: no channels available for device syz [ 164.992573][T12884] overlayfs: failed to resolve './file0': -2 [ 165.009333][ T3249] usb 6-1: config 0 has no interfaces? [ 165.012337][ T3249] usb 6-1: New USB device found, idVendor=7d25, idProduct=8e26, bcdDevice= 0.40 [ 165.015377][ T3249] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 165.017916][ T3249] usb 6-1: Product: syz [ 165.019299][ T3249] usb 6-1: Manufacturer: syz [ 165.021441][ T3249] usb 6-1: config 0 descriptor?? [ 165.057514][T12891] netlink: 'syz.6.1972': attribute type 1 has an invalid length. [ 165.065724][T12891] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.076785][T12891] bond2: (slave geneve2): making interface the new active one [ 165.079773][T12891] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 165.084499][T12891] bond2: entered promiscuous mode [ 165.086269][T12891] geneve2: entered promiscuous mode [ 165.136765][ T3249] usb 5-1: USB disconnect, device number 24 [ 165.139351][ T3249] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 165.239833][ T6033] usb 6-1: USB disconnect, device number 22 [ 165.371795][ T6036] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 165.544214][ T6036] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 165.547615][ T6036] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 165.551652][ T6036] usb 11-1: config 0 interface 0 has no altsetting 0 [ 165.556230][ T6036] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 165.559863][ T6036] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 165.563158][ T6036] usb 11-1: Product: syz [ 165.565178][ T6036] usb 11-1: Manufacturer: syz [ 165.567089][ T6036] usb 11-1: SerialNumber: syz [ 165.570162][ T6036] usb 11-1: config 0 descriptor?? [ 165.573466][ T6036] hub 11-1:0.0: bad descriptor, ignoring hub [ 165.576412][ T6036] hub 11-1:0.0: probe with driver hub failed with error -5 [ 165.580851][ T6036] usb 11-1: selecting invalid altsetting 0 [ 165.585516][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 165.917442][T12482] usb 11-1: USB disconnect, device number 3 [ 166.081383][T12930] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4049079360 (8098158720 ns) > initial count (4986859780 ns). Using initial count to start timer. [ 166.155828][T12939] bond3: entered allmulticast mode [ 166.158780][T12939] __nla_validate_parse: 45 callbacks suppressed [ 166.158789][T12939] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.1984'. [ 166.396851][T12959] ipip0: entered promiscuous mode [ 166.571384][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1995'. [ 166.585720][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1995'. [ 166.601561][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1995'. [ 166.611879][ T5974] Bluetooth: hci3: command tx timeout [ 166.615984][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1995'. [ 166.631381][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1995'. [ 166.647108][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1995'. [ 166.667708][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1995'. [ 166.692097][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1995'. [ 166.697425][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 166.722358][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1995'. [ 166.859650][T13008] : renamed from bridge_slave_0 (while UP) [ 166.877618][T13014] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 166.884607][T13014] bridge3: entered promiscuous mode [ 166.953904][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 167.057102][T13038] tmpfs: Group quota block hardlimit too large. [ 167.095839][ T8121] hid (null): unknown global tag 0xd [ 167.099860][ T8121] hid-generic 0024:FFFF:00FA.000C: unknown global tag 0xd [ 167.102295][ T8121] hid-generic 0024:FFFF:00FA.000C: item 0 4 1 13 parsing failed [ 167.107249][ T8121] hid-generic 0024:FFFF:00FA.000C: probe with driver hid-generic failed with error -22 [ 167.127250][T13047] binder: 13046:13047 ioctl c018620c 200000000240 returned -22 [ 167.279067][T13058] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 167.317786][T13070] bpf: Bad value for 'uid' [ 167.359485][T13076] IPVS: length: 249 != 8 [ 167.361373][T13068] IPVS: length: 249 != 8 [ 167.465962][ T5381] udevd[5381]: worker [10270] terminated by signal 33 (Unknown signal 33) [ 167.469803][ T5381] udevd[5381]: worker [10270] failed while handling '/devices/virtual/block/loop6' [ 167.561923][T13104] bridge_slave_0: default FDB implementation only supports local addresses [ 167.565600][T13104] bridge_slave_0: default FDB implementation only supports local addresses [ 167.809172][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 167.942017][T13131] pimreg: entered allmulticast mode [ 167.999693][T13145] netlink: 'syz.0.2036': attribute type 1 has an invalid length. [ 168.002790][T13145] netlink: 'syz.0.2036': attribute type 4 has an invalid length. [ 168.005990][T13145] netlink: 'syz.0.2036': attribute type 1 has an invalid length. [ 168.008449][T13145] netlink: 'syz.0.2036': attribute type 4 has an invalid length. [ 168.076414][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 168.299988][T13181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22288 sclass=netlink_route_socket pid=13181 comm=syz.1.2048 [ 168.316714][T13186] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 168.328596][T13186] CIFS mount error: No usable UNC path provided in device string! [ 168.328596][T13186] [ 168.332631][T13186] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 168.336777][T13186] bad cache= option: none [ 168.336777][T13186] [ 168.339663][T13186] CIFS: VFS: bad cache= option: none [ 168.600244][ T3249] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 168.763499][ T3249] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 168.767177][ T3249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.770493][ T3249] usb 6-1: Product: syz [ 168.773795][ T3249] usb 6-1: Manufacturer: syz [ 168.775597][ T3249] usb 6-1: SerialNumber: syz [ 168.780116][ T3249] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 168.795334][ T3249] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 168.921052][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 169.135050][T13145] comedi comedi2: reset error (fatal) [ 169.177551][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 169.674497][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 169.674568][ T40] audit: type=1400 audit(1755817266.787:54792): avc: denied { unmount } for pid=11943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 169.689799][ T40] audit: type=1400 audit(1755817266.796:54793): avc: denied { create } for pid=13254 comm="syz.5.2064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 169.696568][ T40] audit: type=1400 audit(1755817266.806:54794): avc: denied { ioctl } for pid=13254 comm="syz.5.2064" path="socket:[55883]" dev="sockfs" ino=55883 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 169.704635][ T40] audit: type=1400 audit(1755817266.806:54795): avc: denied { bind } for pid=13254 comm="syz.5.2064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 169.721868][T13261] lo: entered promiscuous mode [ 169.741738][ T40] audit: type=1400 audit(1755817266.852:54796): avc: denied { ioctl } for pid=13262 comm="syz.5.2066" path="socket:[58431]" dev="sockfs" ino=58431 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 169.753116][ T40] audit: type=1400 audit(1755817266.862:54797): avc: denied { setattr } for pid=13262 comm="syz.5.2066" path="socket:[58436]" dev="sockfs" ino=58436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 169.802280][ T40] audit: type=1400 audit(1755817266.909:54798): avc: denied { getopt } for pid=13277 comm="syz.5.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 169.828133][ T40] audit: type=1400 audit(1755817266.927:54799): avc: denied { connect } for pid=13281 comm="syz.6.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.830476][T13283] kernel profiling enabled (shift: 5) [ 169.837948][ T40] audit: type=1400 audit(1755817266.937:54800): avc: denied { setopt } for pid=13279 comm="syz.0.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 169.838139][T13280] comedi: No check for data length of config insn id -4 is implemented [ 169.845264][ T40] audit: type=1400 audit(1755817266.937:54801): avc: denied { listen } for pid=13279 comm="syz.0.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 169.846462][T13280] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 169.846472][T13280] comedi: Assuming n=15 is correct [ 169.867492][T13283] gfs2: gfs2 mount does not exist [ 169.947919][ T3249] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 169.950238][ T3249] ath9k_htc: Failed to initialize the device [ 169.967802][ T3249] usb 6-1: ath9k_htc: USB layer deinitialized [ 170.032855][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 170.289591][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 170.823472][T13304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=13304 comm=syz.5.2080 [ 170.824000][T13303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=13303 comm=syz.5.2080 [ 170.831500][T13307] veth0_to_bond: entered allmulticast mode [ 170.868772][T13312] unsupported nla_type 4111 [ 170.896389][T13315] syz.0.2084: attempt to access beyond end of device [ 170.896389][T13315] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 170.900551][T13315] efs: cannot read volume header [ 170.926806][T13320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.144761][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 171.404998][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 171.571743][ T6036] usb 6-1: USB disconnect, device number 23 [ 171.578826][T13331] __nla_validate_parse: 38 callbacks suppressed [ 171.578837][T13331] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2089'. [ 171.660248][T13341] IPv6: Can't replace route, no match found [ 171.732613][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2094'. [ 171.978594][T12482] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 172.052849][T13365] netlink: 'syz.1.2099': attribute type 10 has an invalid length. [ 172.059232][T13365] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 172.118113][T12482] usb 10-1: device descriptor read/64, error -71 [ 172.268413][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 172.374087][T12482] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 172.513411][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 172.516003][T12482] usb 10-1: device descriptor read/64, error -71 [ 172.564936][T13322] netlink: 'syz.0.2087': attribute type 1 has an invalid length. [ 172.568066][T13322] netlink: 'syz.0.2087': attribute type 4 has an invalid length. [ 172.570584][T13322] netlink: 3630 bytes leftover after parsing attributes in process `syz.0.2087'. [ 172.573726][T13322] program syz.0.2087 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.630786][T12482] usb usb10-port1: attempt power cycle [ 172.941535][T13375] program syz.0.2101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.963502][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2102'. [ 173.004764][T12482] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 173.027298][T12482] usb 10-1: device descriptor read/8, error -71 [ 173.036916][T13383] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2104'. [ 173.257610][T13405] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2108'. [ 173.257640][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2108'. [ 173.293813][T12482] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 173.315236][T12482] usb 10-1: device descriptor read/8, error -71 [ 173.361826][T13414] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.365767][T13414] netlink: 'syz.6.2111': attribute type 2 has an invalid length. [ 173.368306][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 173.374740][T13414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.381854][T13414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.432973][T12482] usb usb10-port1: unable to enumerate USB device [ 173.635526][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 173.814089][T13423] fuse: blksize only supported for fuseblk [ 173.850955][T13425] tipc: Started in network mode [ 173.853520][T13425] tipc: Node identity d66ac1eddc24, cluster identity 4711 [ 173.856728][T13425] tipc: Enabled bearer , priority 0 [ 173.885506][T13425] syzkaller0: entered promiscuous mode [ 173.887891][T13425] syzkaller0: entered allmulticast mode [ 173.890878][T13425] tipc: Resetting bearer [ 173.898688][T13424] tipc: Resetting bearer [ 173.920204][T13420] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2113'. [ 173.944366][T13424] tipc: Disabling bearer [ 174.159809][T13432] batadv_slave_0: entered promiscuous mode [ 174.162793][T13432] batadv_slave_0: left promiscuous mode [ 174.208640][ T6297] IPVS: starting estimator thread 0... [ 174.220679][T13435] ALSA: mixer_oss: invalid OSS volume '' [ 174.298885][T13436] IPVS: using max 55 ests per chain, 132000 per kthread [ 174.480095][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 174.747356][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 174.952601][T13450] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2122'. [ 175.091368][T13454] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2123'. [ 175.123749][T13439] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 175.126343][T13439] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 175.128962][T13439] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 175.132088][T13439] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 175.135787][T13439] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 175.137710][T13439] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 175.140143][T13439] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 175.165857][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 175.165873][ T40] audit: type=1400 audit(1755817271.932:54816): avc: denied { read } for pid=13455 comm="syz.6.2124" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 175.177824][ T40] audit: type=1400 audit(1755817271.932:54817): avc: denied { open } for pid=13455 comm="syz.6.2124" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 175.261282][ T40] audit: type=1400 audit(1755817272.016:54818): avc: denied { getopt } for pid=13455 comm="syz.6.2124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 175.413473][ T40] audit: type=1400 audit(1755817272.156:54819): avc: denied { watch_sb } for pid=13493 comm="syz.5.2136" path="/129/file0" dev="tmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 175.479589][ T40] audit: type=1400 audit(1755817272.222:54820): avc: denied { map } for pid=13500 comm="syz.5.2139" path="socket:[58045]" dev="sockfs" ino=58045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 175.487893][ T40] audit: type=1400 audit(1755817272.222:54821): avc: denied { read accept } for pid=13500 comm="syz.5.2139" path="socket:[58045]" dev="sockfs" ino=58045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 175.507997][T13507] binder_alloc: 13506: binder_alloc_buf size 8 failed, no address space [ 175.510126][T13509] netlink: 'syz.5.2143': attribute type 28 has an invalid length. [ 175.510656][T13507] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 175.513068][T13509] netlink: 'syz.5.2143': attribute type 3 has an invalid length. [ 175.518676][T13509] netlink: 'syz.5.2143': attribute type 8 has an invalid length. [ 175.571345][T13524] openvswitch: netlink: Message has 24 unknown bytes. [ 175.583100][ T40] audit: type=1400 audit(1755817272.315:54822): avc: denied { setattr } for pid=13525 comm="syz.6.2148" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 175.591930][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 175.605145][T13518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13518 comm=syz.1.2146 [ 175.616165][ T40] audit: type=1400 audit(1755817272.353:54823): avc: denied { listen } for pid=13536 comm="syz.6.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 175.623587][ T40] audit: type=1400 audit(1755817272.353:54824): avc: denied { getopt } for pid=13536 comm="syz.6.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 175.631416][T13541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13541 comm=syz.1.2153 [ 175.635673][ T40] audit: type=1400 audit(1755817272.371:54825): avc: denied { block_suspend } for pid=13538 comm="syz.1.2153" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 175.826123][T13576] overlayfs: missing 'lowerdir' [ 175.946723][T13603] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 175.952566][T13608] binder: BINDER_SET_CONTEXT_MGR already set [ 175.954350][T13608] binder: 13607:13608 ioctl 4018620d 2000000000c0 returned -16 [ 175.956758][T13608] binder: 13607:13608 unknown command 0 [ 175.958347][T13608] binder: 13607:13608 ioctl c0306201 200000000080 returned -22 [ 175.961087][T13608] binder: BINDER_SET_CONTEXT_MGR already set [ 175.962831][T13608] binder: 13607:13608 ioctl 4018620d 200000000040 returned -16 [ 175.980253][T13608] SELinux: syz.0.2174 (13608) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 176.266333][T13627] block device autoloading is deprecated and will be removed. [ 176.343923][T13645] bridge0: port 3(gretap1) entered blocking state [ 176.345965][T13645] bridge0: port 3(gretap1) entered disabled state [ 176.348015][T13645] gretap1: entered allmulticast mode [ 176.350185][T13645] gretap1: entered promiscuous mode [ 176.447265][ T5974] Bluetooth: hci4: command 0x0405 tx timeout [ 176.684019][T13676] syz.5.2197: attempt to access beyond end of device [ 176.684019][T13676] sr0: rw=4096, sector=0, nr_sectors = 4 limit=0 [ 176.688005][T13676] EXT4-fs (sr0): unable to read superblock [ 176.702522][T13676] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 176.704615][T13676] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 176.708037][T13676] vhci_hcd vhci_hcd.0: Device attached [ 176.710758][T13682] usbip_core: unknown command [ 176.712644][T13682] vhci_hcd: unknown pdu 1937341035 [ 176.714421][ C2] net_ratelimit: 1 callbacks suppressed [ 176.714433][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 176.715235][T13682] usbip_core: unknown command [ 176.721300][ T87] vhci_hcd: stop threads [ 176.722702][ T87] vhci_hcd: release socket [ 176.724126][ T87] vhci_hcd: disconnect device [ 176.960490][ T6033] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 177.123477][ T6033] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 177.126687][ T6033] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.129129][ T6033] usb 11-1: Product: syz [ 177.130471][ T6033] usb 11-1: Manufacturer: syz [ 177.132078][ T6033] usb 11-1: SerialNumber: syz [ 177.137341][ T6033] usb 11-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 177.148250][ T6033] usb 11-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 177.283403][T13689] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 177.302551][ T5974] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.303417][ T5976] Bluetooth: hci1: command 0x0405 tx timeout [ 177.317576][T13691] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 177.320171][T13691] __nla_validate_parse: 8 callbacks suppressed [ 177.320179][T13691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2202'. [ 177.368159][T13694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.370343][T13694] IPv6: NLM_F_CREATE should be set when creating new route [ 177.396974][T13697] bond0: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 177.602745][T13716] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2210'. [ 177.669946][ T5974] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.672381][ T5974] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.674854][ T5974] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.677645][ T5974] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.680715][ T5974] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.693436][T13717] lo speed is unknown, defaulting to 1000 [ 177.740761][T13728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.743844][T13728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.748433][T13728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.751966][T13728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.755000][T13728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.758052][T13728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.762815][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2214'. [ 177.815590][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 177.816562][T13717] chnl_net:caif_netlink_parms(): no params data found [ 177.855674][T13717] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.858587][T13717] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.861253][T13717] bridge_slave_0: entered allmulticast mode [ 177.863466][T13717] bridge_slave_0: entered promiscuous mode [ 177.866139][T13717] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.868351][T13717] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.871679][T13717] bridge_slave_1: entered allmulticast mode [ 177.874053][T13717] bridge_slave_1: entered promiscuous mode [ 177.893435][T13717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.898280][T13717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.906464][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2217'. [ 177.925456][T13717] team0: Port device team_slave_0 added [ 177.928182][T13717] team0: Port device team_slave_1 added [ 177.936421][T13748] overlay: Unknown parameter 'obj_user' [ 177.942594][T13748] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 177.945697][T13748] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 177.948472][T13748] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 177.952943][T13717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.955335][T13717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.963464][T13717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.968212][T13717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.970459][T13717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.978097][T13717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.991440][T13728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.994384][T13728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.003557][T13717] hsr_slave_0: entered promiscuous mode [ 178.005710][T13717] hsr_slave_1: entered promiscuous mode [ 178.007800][T13717] debugfs: 'hsr0' already exists in 'hsr' [ 178.010035][T13717] Cannot create hsr debugfs directory [ 178.056157][T13717] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.059517][T13717] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.072175][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 178.117879][T13717] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.121096][T13717] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.224644][T13717] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.227927][T13717] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.243347][ T6033] ath9k_htc 11-1:1.0: ath9k_htc: Target is unresponsive [ 178.245730][ T6033] ath9k_htc: Failed to initialize the device [ 178.262271][ T6033] usb 11-1: ath9k_htc: USB layer deinitialized [ 178.319803][T13717] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.322915][T13717] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.420272][T13717] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 178.425065][T13717] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 178.430211][T13717] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 178.435426][T13717] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 178.452648][T13717] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.455064][T13717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.457442][T13717] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.459678][T13717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.479256][T13717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.482223][ T34] usb 11-1: USB disconnect, device number 4 [ 178.485390][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.487857][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.494376][T13717] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.502164][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.504485][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.510011][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.512236][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.591974][T13717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.608057][T13717] veth0_vlan: entered promiscuous mode [ 178.612338][T13717] veth1_vlan: entered promiscuous mode [ 178.626381][T13717] veth0_macvtap: entered promiscuous mode [ 178.630470][T13717] veth1_macvtap: entered promiscuous mode [ 178.636780][T13717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.645144][T13717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.652105][ T1145] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.654964][ T1145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.658441][ T1145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.661771][ T1145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.685724][T13782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.688331][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.691657][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.703618][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.706869][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.788104][T13789] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2225'. [ 178.825617][T13792] /dev/nullb0: Can't open blockdev [ 178.927746][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 178.958351][T13798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2228'. [ 178.968860][T13798] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 179.123570][T13809] netlink: 'syz.1.2233': attribute type 7 has an invalid length. [ 179.194675][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 179.536985][ T5974] Bluetooth: hci1: command 0x0405 tx timeout [ 179.536993][ T5976] Bluetooth: hci3: command 0x0c1a tx timeout [ 179.868414][ T5974] Bluetooth: hci5: command tx timeout [ 179.965928][T13828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=13828 comm=syz.6.2240 [ 180.009318][T13838] netlink: 'syz.5.2243': attribute type 2 has an invalid length. [ 180.019352][T13838] pim6reg: entered allmulticast mode [ 180.022056][T13838] pim6reg: left allmulticast mode [ 180.039497][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 180.262758][T13864] netlink: 'syz.6.2250': attribute type 5 has an invalid length. [ 180.269263][T13870] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2251'. [ 180.296438][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 180.322720][T13885] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 180.331919][T13885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2255'. [ 180.337638][T13892] netlink: 'syz.5.2257': attribute type 1 has an invalid length. [ 180.356849][T13892] 8021q: adding VLAN 0 to HW filter on device bond4 [ 180.371232][T13892] bond4: (slave gretap1): making interface the new active one [ 180.375105][T13892] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 180.378838][T13895] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2258'. [ 180.434308][T13907] syz_tun: entered promiscuous mode [ 180.438148][T13907] batadv_slave_0: entered promiscuous mode [ 180.441184][T13907] debugfs: 'hsr1' already exists in 'hsr' [ 180.443668][T13907] Cannot create hsr debugfs directory [ 180.447376][T13907] hsr1: entered allmulticast mode [ 180.449589][T13907] syz_tun: entered allmulticast mode [ 180.451727][T13907] batadv_slave_0: entered allmulticast mode [ 180.508747][T13913] netlink: 'syz.6.2263': attribute type 11 has an invalid length. [ 180.539016][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 180.539033][ T40] audit: type=1400 audit(1755817276.945:54850): avc: denied { accept } for pid=13916 comm="syz.6.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 180.547821][ T40] audit: type=1400 audit(1755817276.945:54851): avc: denied { read } for pid=13916 comm="syz.6.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 181.342241][ T40] audit: type=1400 audit(1755817277.703:54852): avc: denied { remove_name } for pid=13923 comm="syz.5.2267" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.350403][ T40] audit: type=1400 audit(1755817277.703:54853): avc: denied { unlink } for pid=13923 comm="syz.5.2267" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 181.483435][T13934] program syz.0.2271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.749775][ T5974] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.760460][ T5974] Bluetooth: hci1: command 0x0405 tx timeout [ 181.815721][T13942] bpf: Bad value for 'uid' [ 181.969748][T13958] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 181.969895][T13957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2277'. [ 181.990482][T13960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8464 sclass=netlink_route_socket pid=13960 comm=syz.0.2280 [ 182.062735][T13978] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 182.064893][T13978] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.067634][T13978] vhci_hcd vhci_hcd.0: Device attached [ 182.084830][T13979] vhci_hcd: connection closed [ 182.084980][ T1039] vhci_hcd: stop threads [ 182.087905][ T1039] vhci_hcd: release socket [ 182.089337][ T1039] vhci_hcd: disconnect device [ 182.262885][ C2] net_ratelimit: 2 callbacks suppressed [ 182.262904][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 182.333420][ T40] audit: type=1400 audit(1755817278.629:54854): avc: denied { create } for pid=13987 comm="syz.5.2286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 182.334303][T13988] tmpfs: Bad value for 'uid' [ 182.334828][ T5974] Bluetooth: hci1: unexpected event for opcode 0x2035 [ 182.344468][ T40] audit: type=1400 audit(1755817278.629:54855): avc: denied { getopt } for pid=13987 comm="syz.5.2286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 182.346315][T13988] tmpfs: Bad value for 'uid' [ 182.519423][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 182.529870][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.599497][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.609135][ T5976] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 182.611732][ T5976] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 182.614257][ T5976] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 182.616892][ T5976] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 182.619479][ T5976] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 182.635509][T14005] lo speed is unknown, defaulting to 1000 [ 182.636101][T14008] mac80211_hwsim hwsim6 a: renamed from wlan1 [ 182.662336][T14011] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 182.686203][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.772686][T14005] chnl_net:caif_netlink_parms(): no params data found [ 182.804799][ T40] audit: type=1400 audit(1755817279.069:54856): avc: denied { ioctl } for pid=14019 comm="syz.6.2297" path="socket:[62983]" dev="sockfs" ino=62983 ioctlcmd=0x943b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 182.825571][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.830435][T14005] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.832721][T14005] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.835071][T14005] bridge_slave_0: entered allmulticast mode [ 182.837518][T14005] bridge_slave_0: entered promiscuous mode [ 182.840560][T14005] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.842946][T14005] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.845284][T14005] bridge_slave_1: entered allmulticast mode [ 182.847822][T14005] bridge_slave_1: entered promiscuous mode [ 182.867324][T14005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.871502][T14005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.893119][T14005] team0: Port device team_slave_0 added [ 182.897818][T14005] team0: Port device team_slave_1 added [ 182.923054][T14005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.926095][T14005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.935797][T14005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.940936][T14005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.943165][T14005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.951917][T14005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.999380][ T12] bridge_slave_1: left allmulticast mode [ 183.001981][ T12] bridge_slave_1: left promiscuous mode [ 183.004388][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.008456][ T12] bridge_slave_0: left allmulticast mode [ 183.010803][ T12] bridge_slave_0: left promiscuous mode [ 183.013507][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.053943][ T8121] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 183.094197][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.098886][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.103812][ T12] bond0 (unregistering): Released all slaves [ 183.111404][T14005] hsr_slave_0: entered promiscuous mode [ 183.114033][T14005] hsr_slave_1: entered promiscuous mode [ 183.116490][T14005] debugfs: 'hsr0' already exists in 'hsr' [ 183.119214][T14005] Cannot create hsr debugfs directory [ 183.158964][ T6033] hid-generic 000C:0007:000C.000D: unknown main item tag 0x3 [ 183.163233][ T6033] hid-generic 000C:0007:000C.000D: unknown main item tag 0x0 [ 183.165796][ T6033] hid-generic 000C:0007:000C.000D: unknown main item tag 0x0 [ 183.168526][ T6033] hid-generic 000C:0007:000C.000D: unknown main item tag 0x0 [ 183.171207][ T6033] hid-generic 000C:0007:000C.000D: unknown main item tag 0x0 [ 183.174846][ T6033] hid-generic 000C:0007:000C.000D: unknown main item tag 0x0 [ 183.177194][ T6033] hid-generic 000C:0007:000C.000D: unknown main item tag 0x0 [ 183.179646][ T6033] hid-generic 000C:0007:000C.000D: unknown main item tag 0x0 [ 183.182089][ T6033] hid-generic 000C:0007:000C.000D: unknown main item tag 0x0 [ 183.184938][ T6033] hid-generic 000C:0007:000C.000D: unknown main item tag 0x0 [ 183.187507][ T6033] hid-generic 000C:0007:000C.000D: collection stack underflow [ 183.189920][ T6033] hid-generic 000C:0007:000C.000D: item 0 0 0 12 parsing failed [ 183.192540][ T6033] hid-generic 000C:0007:000C.000D: probe with driver hid-generic failed with error -22 [ 183.196421][ T40] audit: type=1400 audit(1755817279.434:54857): avc: denied { read open } for pid=14028 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.204707][ T40] audit: type=1400 audit(1755817279.434:54858): avc: denied { getattr } for pid=14028 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.210482][T14005] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 183.212814][ T40] audit: type=1400 audit(1755817279.443:54859): avc: denied { add_name } for pid=14027 comm="dhcpcd-run-hook" name="resolv.conf.eth6.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.223937][ T8121] usb 5-1: Using ep0 maxpacket: 16 [ 183.227883][ T8121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.231230][ T8121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.234198][ T8121] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 183.239585][ T8121] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 183.243905][ T8121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.251797][ T8121] usb 5-1: config 0 descriptor?? [ 183.259381][T14005] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 183.266430][T14005] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 183.271279][T14005] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 183.275721][T14038] FAULT_INJECTION: forcing a failure. [ 183.275721][T14038] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 183.280816][T14038] CPU: 1 UID: 0 PID: 14038 Comm: syz.6.2301 Not tainted syzkaller #0 PREEMPT(full) [ 183.280832][T14038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 183.280839][T14038] Call Trace: [ 183.280843][T14038] [ 183.280847][T14038] dump_stack_lvl+0x16c/0x1f0 [ 183.280913][T14038] should_fail_ex+0x512/0x640 [ 183.280934][T14038] _copy_from_user+0x2e/0xd0 [ 183.280948][T14038] copy_mount_options+0x76/0x190 [ 183.280965][T14038] __x64_sys_mount+0x1ac/0x310 [ 183.280979][T14038] ? __pfx___x64_sys_mount+0x10/0x10 [ 183.280996][T14038] do_syscall_64+0xcd/0x4c0 [ 183.281008][T14038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.281020][T14038] RIP: 0033:0x7f8b0b98ebe9 [ 183.281029][T14038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.281040][T14038] RSP: 002b:00007f8b0c89c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 183.281058][T14038] RAX: ffffffffffffffda RBX: 00007f8b0bbb5fa0 RCX: 00007f8b0b98ebe9 [ 183.281065][T14038] RDX: 0000200000000140 RSI: 0000200000000340 RDI: 0000000000000000 [ 183.281072][T14038] RBP: 00007f8b0c89c090 R08: 0000200000000080 R09: 0000000000000000 [ 183.281082][T14038] R10: 0000000000200800 R11: 0000000000000246 R12: 0000000000000001 [ 183.281089][T14038] R13: 00007f8b0bbb6038 R14: 00007f8b0bbb5fa0 R15: 00007ffe4e1bd578 [ 183.281099][T14038] [ 183.302489][T14005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.344283][T14048] erspan0: entered promiscuous mode [ 183.361734][T14005] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.367701][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.369979][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.374664][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 183.378980][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.381334][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.403162][T14005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.470585][ T12] hsr_slave_0: left promiscuous mode [ 183.473111][ T12] hsr_slave_1: left promiscuous mode [ 183.475152][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.477613][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.480944][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.483592][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.489007][ T12] veth1_macvtap: left promiscuous mode [ 183.490721][ T12] veth0_macvtap: left promiscuous mode [ 183.500465][ T12] veth1_vlan: left promiscuous mode [ 183.502268][ T12] veth0_vlan: left promiscuous mode [ 183.521459][T14066] can: request_module (can-proto-0) failed. [ 183.602156][ T12] team0 (unregistering): Port device team_slave_1 removed [ 183.608923][ T12] team0 (unregistering): Port device team_slave_0 removed [ 183.631347][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 183.691643][T14016] veth1_to_bond: entered allmulticast mode [ 183.696416][T14015] veth1_to_bond: left allmulticast mode [ 183.700972][ T8121] usbhid 5-1:0.0: can't add hid device: -71 [ 183.702475][T14005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.705667][ T8121] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 183.712752][ T8121] usb 5-1: USB disconnect, device number 25 [ 183.825664][T14005] veth0_vlan: entered promiscuous mode [ 183.830623][T14005] veth1_vlan: entered promiscuous mode [ 183.842737][T14005] veth0_macvtap: entered promiscuous mode [ 183.846184][T14005] veth1_macvtap: entered promiscuous mode [ 183.853153][T14005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.859455][T14005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.865130][ T1180] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.871594][ T1180] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.874358][ T1180] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.879472][ T1180] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.904553][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.907230][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.917308][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.920567][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.964539][T14110] FAULT_INJECTION: forcing a failure. [ 183.964539][T14110] name failslab, interval 1, probability 0, space 0, times 1 [ 183.969781][T14110] CPU: 1 UID: 0 PID: 14110 Comm: syz.7.2310 Not tainted syzkaller #0 PREEMPT(full) [ 183.969798][T14110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 183.969805][T14110] Call Trace: [ 183.969808][T14110] [ 183.969813][T14110] dump_stack_lvl+0x16c/0x1f0 [ 183.969842][T14110] should_fail_ex+0x512/0x640 [ 183.969858][T14110] should_failslab+0xc2/0x120 [ 183.969872][T14110] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 183.969884][T14110] ? getname_flags.part.0+0x4c/0x550 [ 183.969902][T14110] getname_flags.part.0+0x4c/0x550 [ 183.969920][T14110] getname_flags+0x93/0xf0 [ 183.969931][T14110] user_path_at+0x24/0x60 [ 183.969943][T14110] __x64_sys_mount+0x1fc/0x310 [ 183.969958][T14110] ? __pfx___x64_sys_mount+0x10/0x10 [ 183.969975][T14110] do_syscall_64+0xcd/0x4c0 [ 183.969987][T14110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.969999][T14110] RIP: 0033:0x7f13c858ebe9 [ 183.970009][T14110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.970021][T14110] RSP: 002b:00007f13c94bc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 183.970032][T14110] RAX: ffffffffffffffda RBX: 00007f13c87b5fa0 RCX: 00007f13c858ebe9 [ 183.970039][T14110] RDX: 0000200000000140 RSI: 0000200000000340 RDI: 0000000000000000 [ 183.970046][T14110] RBP: 00007f13c94bc090 R08: 0000200000000080 R09: 0000000000000000 [ 183.970054][T14110] R10: 0000000000200800 R11: 0000000000000246 R12: 0000000000000001 [ 183.970060][T14110] R13: 00007f13c87b6038 R14: 00007f13c87b5fa0 R15: 00007fff69e14538 [ 183.970071][T14110] [ 184.024604][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.046250][T14112] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14112 comm=syz.7.2311 [ 184.181934][T14117] veth1_to_bond: entered allmulticast mode [ 184.185135][T14116] veth1_to_bond: left allmulticast mode [ 184.282261][T14131] fuse: Bad value for 'user_id' [ 184.284956][T14131] fuse: Bad value for 'user_id' [ 184.320846][T14134] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2317'. [ 184.455866][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2324'. [ 184.459289][T14159] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2324'. [ 184.486598][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 184.561474][T14170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2327'. [ 184.606066][T14175] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2329'. [ 184.668785][T12482] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 184.743210][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 184.748222][T14184] FAULT_INJECTION: forcing a failure. [ 184.748222][T14184] name failslab, interval 1, probability 0, space 0, times 0 [ 184.752197][T14184] CPU: 0 UID: 0 PID: 14184 Comm: syz.6.2332 Not tainted syzkaller #0 PREEMPT(full) [ 184.752213][T14184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 184.752219][T14184] Call Trace: [ 184.752223][T14184] [ 184.752228][T14184] dump_stack_lvl+0x16c/0x1f0 [ 184.752242][T14184] should_fail_ex+0x512/0x640 [ 184.752256][T14184] should_failslab+0xc2/0x120 [ 184.752269][T14184] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 184.752281][T14184] ? __d_alloc+0x32/0xae0 [ 184.752296][T14184] __d_alloc+0x32/0xae0 [ 184.752308][T14184] ? path_lookupat+0x142/0x6d0 [ 184.752318][T14184] ? filename_lookup+0x224/0x5f0 [ 184.752330][T14184] d_alloc_parallel+0x111/0x1480 [ 184.752349][T14184] ? __pfx_d_alloc_parallel+0x10/0x10 [ 184.752367][T14184] ? lockdep_init_map_type+0x5c/0x280 [ 184.752378][T14184] ? lockdep_init_map_type+0x5c/0x280 [ 184.752389][T14184] __lookup_slow+0x193/0x460 [ 184.752408][T14184] ? __pfx___lookup_slow+0x10/0x10 [ 184.752428][T14184] ? dput+0x1f/0x30 [ 184.752442][T14184] ? lookup_fast+0x156/0x610 [ 184.752452][T14184] walk_component+0x353/0x5b0 [ 184.752463][T14184] path_lookupat+0x142/0x6d0 [ 184.752474][T14184] filename_lookup+0x224/0x5f0 [ 184.752486][T14184] ? __pfx_filename_lookup+0x10/0x10 [ 184.752502][T14184] ? getname_flags.part.0+0x1c5/0x550 [ 184.752520][T14184] user_path_at+0x3a/0x60 [ 184.752531][T14184] __x64_sys_mount+0x1fc/0x310 [ 184.752545][T14184] ? __pfx___x64_sys_mount+0x10/0x10 [ 184.752559][T14184] ? fput+0x9b/0xd0 [ 184.752574][T14184] do_syscall_64+0xcd/0x4c0 [ 184.752586][T14184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.752597][T14184] RIP: 0033:0x7f8b0b98ebe9 [ 184.752607][T14184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.752617][T14184] RSP: 002b:00007f8b0c89c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 184.752628][T14184] RAX: ffffffffffffffda RBX: 00007f8b0bbb5fa0 RCX: 00007f8b0b98ebe9 [ 184.752635][T14184] RDX: 0000200000000140 RSI: 0000200000000340 RDI: 0000000000000000 [ 184.752642][T14184] RBP: 00007f8b0c89c090 R08: 0000200000000080 R09: 0000000000000000 [ 184.752648][T14184] R10: 0000000000200800 R11: 0000000000000246 R12: 0000000000000001 [ 184.752655][T14184] R13: 00007f8b0bbb6038 R14: 00007f8b0bbb5fa0 R15: 00007ffe4e1bd578 [ 184.752665][T14184] [ 184.828782][ T5974] Bluetooth: hci2: command tx timeout [ 184.862135][T12482] usb 12-1: config index 0 descriptor too short (expected 39, got 27) [ 184.864751][T12482] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 184.867913][T12482] usb 12-1: config 0 interface 0 has no altsetting 0 [ 184.872065][T12482] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 184.874829][T12482] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 184.877474][T12482] usb 12-1: Product: syz [ 184.878829][T12482] usb 12-1: Manufacturer: syz [ 184.880338][T12482] usb 12-1: SerialNumber: syz [ 184.882650][T12482] usb 12-1: config 0 descriptor?? [ 184.885014][T12482] hub 12-1:0.0: bad descriptor, ignoring hub [ 184.886960][T12482] hub 12-1:0.0: probe with driver hub failed with error -5 [ 184.890276][T12482] usb 12-1: selecting invalid altsetting 0 [ 184.918465][T14197] lo speed is unknown, defaulting to 1000 [ 184.945823][T14198] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2337'. [ 184.951342][T14198] vxlan1: entered promiscuous mode [ 185.598423][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 185.796482][T14217] FAULT_INJECTION: forcing a failure. [ 185.796482][T14217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.800553][T14217] CPU: 0 UID: 0 PID: 14217 Comm: syz.5.2341 Not tainted syzkaller #0 PREEMPT(full) [ 185.800569][T14217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.800576][T14217] Call Trace: [ 185.800580][T14217] [ 185.800585][T14217] dump_stack_lvl+0x16c/0x1f0 [ 185.800601][T14217] should_fail_ex+0x512/0x640 [ 185.800616][T14217] _copy_to_user+0x32/0xd0 [ 185.800631][T14217] simple_read_from_buffer+0xcb/0x170 [ 185.800642][T14217] proc_fail_nth_read+0x197/0x240 [ 185.800655][T14217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.800667][T14217] ? security_file_permission+0x71/0x210 [ 185.800697][T14217] ? rw_verify_area+0xcf/0x6c0 [ 185.800714][T14217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.800726][T14217] vfs_read+0x1e1/0xcf0 [ 185.800737][T14217] ? __pfx___mutex_lock+0x10/0x10 [ 185.800758][T14217] ? __pfx_vfs_read+0x10/0x10 [ 185.800768][T14217] ? __fget_files+0x204/0x3c0 [ 185.800780][T14217] ? rcu_is_watching+0x12/0xc0 [ 185.800795][T14217] ? __fget_files+0x20e/0x3c0 [ 185.800808][T14217] ksys_read+0x12a/0x250 [ 185.800819][T14217] ? __pfx_ksys_read+0x10/0x10 [ 185.800829][T14217] ? fput+0x9b/0xd0 [ 185.800860][T14217] do_syscall_64+0xcd/0x4c0 [ 185.800873][T14217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.800885][T14217] RIP: 0033:0x7fbeb438d5fc [ 185.800893][T14217] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 185.800904][T14217] RSP: 002b:00007fbeb51b6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.800915][T14217] RAX: ffffffffffffffda RBX: 00007fbeb45b5fa0 RCX: 00007fbeb438d5fc [ 185.800922][T14217] RDX: 000000000000000f RSI: 00007fbeb51b60a0 RDI: 0000000000000005 [ 185.800929][T14217] RBP: 00007fbeb51b6090 R08: 0000000000000000 R09: 0000000000000000 [ 185.800935][T14217] R10: 0000000000200800 R11: 0000000000000246 R12: 0000000000000001 [ 185.800941][T14217] R13: 00007fbeb45b6038 R14: 00007fbeb45b5fa0 R15: 00007ffee07a1d78 [ 185.800951][T14217] [ 185.855577][ T6036] usb 12-1: USB disconnect, device number 2 [ 185.858134][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 186.026494][ T6036] usb 12-1: new full-speed USB device number 3 using dummy_hcd [ 186.140809][T14260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=14260 comm=syz.6.2354 [ 186.160154][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 186.160165][ T40] audit: type=1400 audit(1755817282.212:54874): avc: denied { getopt } for pid=14261 comm="syz.0.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 186.161120][T14262] netlink: 'syz.0.2355': attribute type 1 has an invalid length. [ 186.170970][T14262] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2355'. [ 186.199414][ T6036] usb 12-1: config index 0 descriptor too short (expected 39, got 27) [ 186.202021][ T6036] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 186.205202][ T6036] usb 12-1: config 0 interface 0 has no altsetting 0 [ 186.211234][ T6036] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 186.214166][ T6036] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 186.216908][ T6036] usb 12-1: Product: syz [ 186.218787][ T6036] usb 12-1: Manufacturer: syz [ 186.220270][ T6036] usb 12-1: SerialNumber: syz [ 186.226260][ T6036] usb 12-1: config 0 descriptor?? [ 186.226462][T14264] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2356'. [ 186.228669][ T6036] hub 12-1:0.0: bad descriptor, ignoring hub [ 186.233076][ T6036] hub 12-1:0.0: probe with driver hub failed with error -5 [ 186.236209][ T6036] usb 12-1: selecting invalid altsetting 0 [ 186.280187][T14267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2357'. [ 186.289680][ T40] audit: type=1400 audit(1755817282.333:54875): avc: denied { add_name } for pid=14266 comm="syz.0.2357" name="pids.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.297249][ T40] audit: type=1400 audit(1755817282.333:54876): avc: denied { create } for pid=14266 comm="syz.0.2357" name="pids.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 186.303895][ T40] audit: type=1400 audit(1755817282.333:54877): avc: denied { associate } for pid=14266 comm="syz.0.2357" name="pids.events" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 186.312390][ T40] audit: type=1400 audit(1755817282.352:54878): avc: denied { read append open } for pid=14266 comm="syz.0.2357" path="/478/file0/pids.events" dev="9p" ino=35913949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 186.321745][T14267] netfs: Couldn't get user pages (rc=-14) [ 186.403383][T14273] input: syz0 as /devices/virtual/input/input40 [ 186.446169][ T40] audit: type=1400 audit(1755817282.483:54879): avc: denied { unmount } for pid=5967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 186.496387][T12482] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 186.571387][ T1476] usb 12-1: USB disconnect, device number 3 [ 186.625027][ T5974] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 186.627751][ T5974] Bluetooth: hci1: Injecting HCI hardware error event [ 186.629954][ T5974] Bluetooth: hci1: hardware error 0x00 [ 186.679662][T12482] usb 11-1: unable to get BOS descriptor or descriptor too short [ 186.682685][T12482] usb 11-1: not running at top speed; connect to a high speed hub [ 186.685930][T12482] usb 11-1: config 1 interface 0 altsetting 3 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 186.689881][T12482] usb 11-1: config 1 interface 0 has no altsetting 0 [ 186.692725][T12482] usb 11-1: language id specifier not provided by device, defaulting to English [ 186.701093][T12482] usb 11-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.40 [ 186.703979][T12482] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.706537][T12482] usb 11-1: Manufacturer: 㐍 [ 186.709447][T14264] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 186.720870][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 186.930369][T12482] usbhid 11-1:1.0: can't add hid device: -71 [ 186.932382][T12482] usbhid 11-1:1.0: probe with driver usbhid failed with error -71 [ 186.936269][T12482] usb 11-1: USB disconnect, device number 5 [ 186.966722][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 187.017522][ T40] audit: type=1400 audit(1755817283.007:54880): avc: denied { load_policy } for pid=14309 comm="syz.7.2370" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 187.017633][T14310] SELinux: failed to load policy [ 187.062951][ T5976] Bluetooth: hci2: command tx timeout [ 187.081411][ T40] audit: type=1400 audit(1755817283.072:54881): avc: denied { read } for pid=14317 comm="syz.7.2373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.126088][T14324] kvm: Disabled LAPIC found during irq injection [ 187.223470][T14329] netlink: 'syz.0.2377': attribute type 5 has an invalid length. [ 187.225942][T14329] netlink: 'syz.0.2377': attribute type 7 has an invalid length. [ 187.230003][T14329] : entered promiscuous mode [ 187.331875][ T6241] udevd[6241]: setting mode of /dev/comedi3_subd1 to 020600 failed: No such file or directory [ 187.335395][ T6241] udevd[6241]: setting owner of /dev/comedi3_subd1 to uid=0, gid=0 failed: No such file or directory [ 187.442824][T14344] tc_dump_action: action bad kind [ 187.524939][T14348] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 187.547220][ T40] audit: type=1400 audit(1755817283.512:54882): avc: denied { setopt } for pid=14350 comm="syz.6.2385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 187.606655][ T40] audit: type=1400 audit(1755817283.559:54883): avc: denied { read } for pid=14350 comm="syz.6.2385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 187.702836][T14355] ip6gre1: entered promiscuous mode [ 187.744434][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2388'. [ 187.751394][T14360] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14360 comm=syz.6.2388 [ 187.822027][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 188.163291][T14388] binder_alloc: 14386: binder_alloc_buf size 8 failed, no address space [ 188.166602][T14388] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 188.183279][T14388] lo speed is unknown, defaulting to 1000 [ 188.281695][ T8121] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 188.332527][T14394] syz.7.2398: attempt to access beyond end of device [ 188.332527][T14394] nbd7: rw=0, sector=64, nr_sectors = 1 limit=0 [ 188.336919][T14394] syz.7.2398: attempt to access beyond end of device [ 188.336919][T14394] nbd7: rw=0, sector=256, nr_sectors = 1 limit=0 [ 188.341248][T14394] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 188.344471][T14394] syz.7.2398: attempt to access beyond end of device [ 188.344471][T14394] nbd7: rw=0, sector=512, nr_sectors = 1 limit=0 [ 188.349095][T14394] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 188.352303][T14394] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 188.355109][T14394] UDF-fs: Scanning with blocksize 512 failed [ 188.358912][T14394] syz.7.2398: attempt to access beyond end of device [ 188.358912][T14394] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 188.363411][T14394] syz.7.2398: attempt to access beyond end of device [ 188.363411][T14394] nbd7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 188.368471][T14394] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 188.372532][T14394] syz.7.2398: attempt to access beyond end of device [ 188.372532][T14394] nbd7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 188.377876][T14394] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 188.381120][T14394] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 188.383988][T14394] UDF-fs: Scanning with blocksize 1024 failed [ 188.386985][T14394] syz.7.2398: attempt to access beyond end of device [ 188.386985][T14394] nbd7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 188.391396][T14394] syz.7.2398: attempt to access beyond end of device [ 188.391396][T14394] nbd7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 188.395474][T14394] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 188.398555][T14394] syz.7.2398: attempt to access beyond end of device [ 188.398555][T14394] nbd7: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 188.402993][T14394] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 188.404786][T14399] netlink: 'syz.7.2398': attribute type 8 has an invalid length. [ 188.405993][T14394] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 188.411219][T14394] UDF-fs: Scanning with blocksize 2048 failed [ 188.413328][T14394] syz.7.2398: attempt to access beyond end of device [ 188.413328][T14394] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 188.417375][T14394] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 188.420412][T14394] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 188.423780][T14394] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found [ 188.426159][T14394] UDF-fs: Scanning with blocksize 4096 failed [ 188.428051][T14394] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 188.442233][ T8121] usb 11-1: device descriptor read/64, error -71 [ 188.470448][T14404] QAT: Invalid ioctl -2144835806 [ 188.491795][T14408] random: crng reseeded on system resumption [ 188.710163][ T8121] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 188.848446][ T5974] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 188.859398][ T8121] usb 11-1: device descriptor read/64, error -71 [ 188.933901][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 188.976702][ T8121] usb usb11-port1: attempt power cycle [ 189.150899][T14423] kvm_intel: kvm [14422]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x65b7 [ 189.165499][T14423] kvm: kvm [14422]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x3b7 [ 189.168477][T14423] kvm: kvm [14422]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x14a2 [ 189.186990][T14423] kvm: kvm [14422]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xac3c [ 189.190384][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 189.203835][T14423] kvm: kvm [14422]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7b28 [ 189.206758][T14423] kvm: kvm [14422]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xfe14 [ 189.276085][ T5974] Bluetooth: hci2: command tx timeout [ 189.340095][ T8121] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 189.372828][ T8121] usb 11-1: device descriptor read/8, error -71 [ 189.427139][T14449] netlink: 'syz.7.2413': attribute type 1 has an invalid length. [ 189.437000][T14449] bond1 (unregistering): Released all slaves [ 189.597866][T14462] netlink: 'syz.7.2418': attribute type 3 has an invalid length. [ 189.600480][T14462] netlink: 'syz.7.2418': attribute type 1 has an invalid length. [ 189.622096][T14464] sp0: Synchronizing with TNC [ 189.640493][ T8121] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 189.672196][ T8121] usb 11-1: device descriptor read/8, error -71 [ 189.704967][T14474] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 189.760461][T14477] __nla_validate_parse: 6 callbacks suppressed [ 189.760472][T14477] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2423'. [ 189.800195][ T8121] usb usb11-port1: unable to enumerate USB device [ 189.823578][T14479] netlink: 'syz.5.2424': attribute type 1 has an invalid length. [ 189.826028][T14479] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.2424'. [ 189.836452][T14481] can: request_module (can-proto-0) failed. [ 190.056373][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 190.257859][T14518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2435'. [ 190.302423][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 190.325127][T14525] netlink: 'syz.0.2437': attribute type 10 has an invalid length. [ 190.327790][T14525] dummy0: left promiscuous mode [ 190.331767][T14525] team0: Port device dummy0 added [ 190.351209][T14529] netlink: 'syz.0.2438': attribute type 30 has an invalid length. [ 190.474857][ T6036] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 190.644340][ T6036] usb 10-1: Using ep0 maxpacket: 8 [ 190.647212][ T6036] usb 10-1: config 128 has an invalid interface number: 174 but max is 0 [ 190.650310][ T6036] usb 10-1: config 128 has no interface number 0 [ 190.652341][ T6036] usb 10-1: config 128 interface 174 altsetting 174 has an invalid descriptor for endpoint zero, skipping [ 190.655979][ T6036] usb 10-1: config 128 interface 174 altsetting 174 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 190.660058][ T6036] usb 10-1: config 128 interface 174 altsetting 174 has an invalid descriptor for endpoint zero, skipping [ 190.663744][ T6036] usb 10-1: config 128 interface 174 has no altsetting 0 [ 190.675005][ T6036] usb 10-1: New USB device found, idVendor=083a, idProduct=7511, bcdDevice=9c.e7 [ 190.678705][ T6036] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.682078][ T6036] usb 10-1: Product: syz [ 190.683879][ T6036] usb 10-1: Manufacturer: syz [ 190.686115][ T6036] usb 10-1: SerialNumber: syz [ 190.927251][T14514] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2433'. [ 190.935299][ T6036] usb 10-1: USB disconnect, device number 8 [ 191.069467][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2446'. [ 191.157609][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 191.253900][T14580] overlay: Unknown parameter 'fowner<00000000000000000000' [ 191.334241][T14586] pimreg: entered allmulticast mode [ 191.414070][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 191.499597][ T5974] Bluetooth: hci2: command tx timeout [ 191.533762][T14593] batadv_slave_0: entered promiscuous mode [ 191.537080][T14593] batadv_slave_0: left promiscuous mode [ 191.687377][T14600] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2454'. [ 191.691009][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 191.691020][ T40] audit: type=1400 audit(1755817287.375:54901): avc: denied { append } for pid=14598 comm="syz.6.2454" name="video9" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 191.738920][T14604] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2456'. [ 191.793382][ T40] audit: type=1326 audit(1755817287.478:54902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14607 comm="syz.5.2457" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb438ebe9 code=0x50000 [ 191.800344][ T40] audit: type=1326 audit(1755817287.478:54903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14607 comm="syz.5.2457" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb438ebe9 code=0x50000 [ 191.807476][ T40] audit: type=1326 audit(1755817287.478:54904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14607 comm="syz.5.2457" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb438ebe9 code=0x50000 [ 191.815795][ T40] audit: type=1326 audit(1755817287.478:54905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14607 comm="syz.5.2457" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb438ebe9 code=0x50000 [ 191.823314][ T40] audit: type=1326 audit(1755817287.478:54906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14607 comm="syz.5.2457" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb438ebe9 code=0x50000 [ 191.830397][ T40] audit: type=1326 audit(1755817287.478:54907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14607 comm="syz.5.2457" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb438ebe9 code=0x50000 [ 191.837466][ T40] audit: type=1326 audit(1755817287.478:54908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14607 comm="syz.5.2457" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb438ebe9 code=0x50000 [ 191.844687][ T40] audit: type=1326 audit(1755817287.478:54909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14607 comm="syz.5.2457" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb438ebe9 code=0x50000 [ 191.851946][ T40] audit: type=1326 audit(1755817287.478:54910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14607 comm="syz.5.2457" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb438ebe9 code=0x50000 [ 192.279967][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 192.480889][T14619] binder: BINDER_SET_CONTEXT_MGR already set [ 192.482847][T14619] binder: 14618:14619 ioctl 4018620d 200000000100 returned -16 [ 192.505578][T14624] binder: BINDER_SET_CONTEXT_MGR already set [ 192.508646][T14624] binder: 14623:14624 ioctl 4018620d 200000000100 returned -16 [ 192.513965][T14624] binder: 14623:14624 ioctl 540d 0 returned -22 [ 192.525833][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 192.548501][T14626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.591156][T14635] No source specified [ 192.595005][T14635] efs: device does not support 512 byte blocks [ 192.596885][T14635] device does not support 512 byte blocks [ 192.596885][T14635] [ 192.666018][T14641] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.670198][T14641] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.681955][T14651] dlm: non-version read from control device 0 [ 192.683883][T14651] dlm: non-version read from control device 0 [ 192.685750][T14651] dlm: non-version read from control device 0 [ 192.688278][T14651] dlm: non-version read from control device 0 [ 192.690308][T14651] dlm: non-version read from control device 0 [ 192.692168][T14651] dlm: non-version read from control device 0 [ 192.694081][T14651] dlm: non-version read from control device 0 [ 192.696074][T14651] dlm: non-version read from control device 0 [ 192.699360][T14651] dlm: non-version read from control device 0 [ 192.701318][T14651] dlm: non-version read from control device 0 [ 192.703185][T14651] dlm: non-version read from control device 0 [ 192.705059][T14651] dlm: non-version read from control device 0 [ 192.706936][T14651] dlm: non-version read from control device 0 [ 192.709974][T14651] dlm: non-version read from control device 0 [ 192.711862][T14651] dlm: non-version read from control device 0 [ 192.713673][T14651] dlm: non-version read from control device 0 [ 192.715459][T14651] dlm: non-version read from control device 0 [ 192.717366][T14651] dlm: non-version read from control device 0 [ 192.719335][T14651] dlm: non-version read from control device 0 [ 192.721243][T14651] dlm: non-version read from control device 0 [ 192.723173][T14651] dlm: non-version read from control device 0 [ 192.725065][T14651] dlm: non-version read from control device 0 [ 192.726927][T14651] dlm: non-version read from control device 0 [ 192.728842][T14651] dlm: non-version read from control device 0 [ 192.731306][T14651] dlm: non-version read from control device 0 [ 192.733538][T14651] dlm: non-version read from control device 0 [ 192.735396][T14651] dlm: non-version read from control device 0 [ 192.737221][T14651] dlm: non-version read from control device 0 [ 192.739110][T14651] dlm: non-version read from control device 0 [ 192.741159][T14651] dlm: non-version read from control device 0 [ 192.743171][T14651] dlm: non-version read from control device 0 [ 192.745079][T14651] dlm: non-version read from control device 0 [ 192.747327][T14651] dlm: non-version read from control device 0 [ 192.749913][T14641] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.753262][T14641] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.811928][T14641] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.821171][T14641] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.860465][T14666] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2476'. [ 192.947095][T14641] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.950338][T14641] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.039204][T11311] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.041981][T11311] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.055531][ T1180] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.061334][ T1180] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.065645][ T1180] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.069010][ T1180] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.081980][ T1145] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.084568][ T1145] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.115970][T14686] tipc: Enabled bearer , priority 0 [ 193.134574][T14686] syzkaller0: entered promiscuous mode [ 193.137565][T14686] syzkaller0: entered allmulticast mode [ 193.139654][T14686] tipc: Resetting bearer [ 193.144063][T14685] tipc: Resetting bearer [ 193.190573][T14685] tipc: Disabling bearer [ 193.212577][T14681] usb usb9: usbfs: process 14681 (syz.7.2482) did not claim interface 1 before use [ 193.249174][ T9] libceph: connect (1)[c::]:6789 error -101 [ 193.251146][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 193.281380][T14693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2486'. [ 193.287912][T14693] vlan0: entered allmulticast mode [ 193.289549][T14693] veth1: entered allmulticast mode [ 193.391793][ C2] net_ratelimit: 1 callbacks suppressed [ 193.391805][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 193.442232][T14698] vivid-001: disconnect [ 193.446725][T14698] vivid-001: reconnect [ 193.458820][T14700] lo speed is unknown, defaulting to 1000 [ 193.491636][T14699] lo speed is unknown, defaulting to 1000 [ 193.531360][ T9] libceph: connect (1)[c::]:6789 error -101 [ 193.533482][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 193.547379][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2488'. [ 193.637666][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 193.819623][ T6033] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 193.982432][ T6033] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 193.985281][ T6033] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.987847][ T6033] usb 11-1: Product: syz [ 193.989205][ T6033] usb 11-1: Manufacturer: syz [ 193.991118][ T6033] usb 11-1: SerialNumber: syz [ 194.001425][ T6033] usb 11-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 194.010603][ T3249] usb 11-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 194.076190][ T9] libceph: connect (1)[c::]:6789 error -101 [ 194.078136][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 194.126730][T14689] ceph: No mds server is up or the cluster is laggy [ 194.231890][ T9] usb 11-1: USB disconnect, device number 10 [ 194.492948][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 194.760227][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 194.923293][ T1145] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 194.952603][ T8121] usb 12-1: new full-speed USB device number 4 using dummy_hcd [ 194.998942][T14757] sp0: Synchronizing with TNC [ 195.102732][ T3249] ath9k_htc 11-1:1.0: ath9k_htc: Target is unresponsive [ 195.105761][ T3249] ath9k_htc: Failed to initialize the device [ 195.108600][ T9] usb 11-1: ath9k_htc: USB layer deinitialized [ 195.127878][ T8121] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 195.130698][ T8121] usb 12-1: can't read configurations, error -71 [ 195.139330][T14771] tipc: Trying to set illegal importance in message [ 195.604728][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 195.832204][T14782] fuse: Bad value for 'group_id' [ 195.833817][T14782] fuse: Bad value for 'group_id' [ 195.861314][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 196.043135][ T8121] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 196.128941][T12482] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 196.225005][ T8121] usb 12-1: Using ep0 maxpacket: 32 [ 196.229976][T14775] __nla_validate_parse: 6 callbacks suppressed [ 196.229986][T14775] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.2506'. [ 196.300523][T12482] usb 11-1: Using ep0 maxpacket: 8 [ 196.303359][T12482] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 196.305961][T12482] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.309023][T12482] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 196.312948][T12482] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 196.316066][T12482] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.320155][T12482] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 196.323662][T12482] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.326784][ T8121] usb 12-1: unable to get BOS descriptor or descriptor too short [ 196.331207][ T8121] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 196.333735][ T8121] usb 12-1: can't read configurations, error -71 [ 196.335852][ T8121] usb usb12-port1: attempt power cycle [ 196.477170][T14818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2513'. [ 196.480006][T14818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2513'. [ 196.541739][T12482] usb 11-1: usb_control_msg returned -32 [ 196.543605][T12482] usbtmc 11-1:16.0: can't read capabilities [ 196.716602][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 196.881038][T14832] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2516'. [ 196.885405][T14834] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 196.885433][T14832] IPVS: stopping backup sync thread 14834 ... [ 196.908648][T14838] bridge0: port 3(syz_tun) entered blocking state [ 196.910948][T14838] bridge0: port 3(syz_tun) entered disabled state [ 196.916233][T14840] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=14840 comm=syz.7.2518 [ 196.926839][T14838] lo speed is unknown, defaulting to 1000 [ 196.973440][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 196.994386][ T1476] usb 11-1: USB disconnect, device number 11 [ 197.027214][T14849] validate_nla: 1 callbacks suppressed [ 197.027225][T14849] netlink: 'syz.6.2521': attribute type 1 has an invalid length. [ 197.062533][ T40] kauditd_printk_skb: 50973 callbacks suppressed [ 197.062546][ T40] audit: type=1400 audit(1755817292.408:105884): avc: denied { ioctl } for pid=14852 comm="syz.5.2522" path="socket:[67757]" dev="sockfs" ino=67757 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 197.077339][T14853] IPVS: length: 8 != 446676597336 [ 197.115754][T14849] bond3: (slave geneve3): making interface the new active one [ 197.118458][T14849] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 197.121340][ T1180] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 197.124584][ T1180] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 197.124770][T14849] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2521'. [ 197.127340][ T1180] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 197.135410][T14849] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.139612][ T1180] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 197.145664][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.222692][ T40] audit: type=1400 audit(1755817292.548:105885): avc: denied { write } for pid=14863 comm="syz.6.2526" name="usbmon2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 197.230919][ T40] audit: type=1400 audit(1755817292.548:105886): avc: denied { ioctl } for pid=14863 comm="syz.6.2526" path="/dev/usbmon2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 197.238624][ T40] audit: type=1400 audit(1755817292.548:105887): avc: denied { getopt } for pid=14861 comm="syz.7.2525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 197.407535][T14876] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.521344][T14876] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.584163][T14888] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2532'. [ 197.588671][T14888] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2532'. [ 197.631185][T14876] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.692890][T14876] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.828654][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 197.838867][T11288] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.846063][T11288] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.851935][T11288] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.857090][T11288] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.884950][ T40] audit: type=1326 audit(1755817293.175:105888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14894 comm="syz.7.2534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c858ebe9 code=0x7ffc0000 [ 197.895199][ T40] audit: type=1326 audit(1755817293.175:105889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14894 comm="syz.7.2534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c858ebe9 code=0x7ffc0000 [ 197.902357][ T40] audit: type=1326 audit(1755817293.175:105890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14894 comm="syz.7.2534" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f13c858ebe9 code=0x7ffc0000 [ 197.910119][ T40] audit: type=1326 audit(1755817293.193:105891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14894 comm="syz.7.2534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c858ebe9 code=0x7ffc0000 [ 197.918185][ T40] audit: type=1326 audit(1755817293.193:105892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14894 comm="syz.7.2534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c858ebe9 code=0x7ffc0000 [ 197.928344][ T40] audit: type=1326 audit(1755817293.193:105893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14894 comm="syz.7.2534" exe="/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f13c858ebe9 code=0x7ffc0000 [ 198.011429][T14899] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2535'. [ 198.014632][T14899] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2535'. [ 198.017839][T14899] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2535'. [ 198.027399][T14898] erspan0: entered promiscuous mode [ 198.028538][T14857] nbd: illegal input index 1879048192 [ 198.052357][T14902] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 198.095660][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 198.676337][T14926] pim6reg9: entered allmulticast mode [ 198.878732][T14939] 9pnet_fd: Insufficient options for proto=fd [ 198.940210][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 198.942936][ T6020] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 199.102479][ T6020] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 199.106076][ T6020] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 199.109523][ T6020] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 199.112904][ T6020] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.116884][ T6020] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.119677][ T6020] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.123159][ T6020] usb 11-1: config 0 descriptor?? [ 199.475103][ T6297] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 199.556858][ T6020] hid_parser_main: 62 callbacks suppressed [ 199.556872][ T6020] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 199.563621][ T6020] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 199.647552][ T6297] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 199.652593][ T6297] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 199.655582][ T6297] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 199.658597][ T6297] usb 10-1: SerialNumber: syz [ 199.828876][ T29] usb 11-1: USB disconnect, device number 12 [ 199.878373][T14943] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 199.942033][T14944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14944 comm=syz.5.2549 [ 200.052107][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 200.308632][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 200.485480][T14953] tipc: Enabled bearer , priority 0 [ 200.487972][T14953] syzkaller0: entered promiscuous mode [ 200.489982][T14953] syzkaller0: entered allmulticast mode [ 200.495661][T14953] tipc: Resetting bearer [ 200.498811][T14952] tipc: Resetting bearer [ 200.503407][T14952] tipc: Disabling bearer [ 200.605923][T12482] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 200.673996][T12482] hid-generic 0000:0000:0000.000F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 200.692525][T14957] fido_id[14957]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 200.893648][T14962] netlink: 'syz.6.2555': attribute type 39 has an invalid length. [ 201.017337][T14965] option changes via remount are deprecated (pid=14964 comm=syz.6.2556) [ 201.152023][T14974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14974 comm=syz.6.2560 [ 201.163882][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 201.420438][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 201.484439][T14985] IPv6: sit1: Disabled Multicast RS [ 201.486876][T14985] sit1: entered allmulticast mode [ 201.653952][T14989] ------------[ cut here ]------------ [ 201.656108][T14989] kernel BUG at fs/buffer.c:1582! [ 201.657847][T14989] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 201.660035][T14989] CPU: 0 UID: 0 PID: 14989 Comm: syz.6.2566 Not tainted syzkaller #0 PREEMPT(full) [ 201.664254][T14989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 201.667570][T14989] RIP: 0010:folio_set_bh+0x18a/0x1e0 [ 201.669260][T14989] Code: df 48 89 fa 4c 01 e3 48 c1 ea 03 80 3c 02 00 75 43 48 89 5d 28 5b 5d 41 5c 41 5d 41 5e 41 5f e9 fc a2 4e 09 e8 57 a3 73 ff 90 <0f> 0b e8 0f fb d9 ff e9 a5 fe ff ff 4c 89 ef e8 12 fa d9 ff e9 cf [ 201.675339][T14989] RSP: 0018:ffffc90003de7a10 EFLAGS: 00010287 [ 201.677265][T14989] RAX: 0000000000001912 RBX: ffffea00018abb00 RCX: ffffc9002bafc000 [ 201.679732][T14989] RDX: 0000000000080000 RSI: ffffffff8247ede9 RDI: 0000000000000006 [ 201.682237][T14989] RBP: ffff888105e49740 R08: 0000000000000006 R09: 0000000000004000 [ 201.684717][T14989] R10: 0000000000004000 R11: 0000000000000001 R12: 0000000000004000 [ 201.687174][T14989] R13: 0000000000000002 R14: 0000000000004000 R15: 0000000000000000 [ 201.689632][T14989] FS: 00007f8b0c89c6c0(0000) GS:ffff8880d66bc000(0000) knlGS:0000000000000000 [ 201.692426][T14989] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.694491][T14989] CR2: 00007f8b0c89bf98 CR3: 000000004d377000 CR4: 0000000000352ef0 [ 201.696970][T14989] Call Trace: [ 201.698049][T14989] [ 201.698991][T14989] folio_alloc_buffers+0x295/0x6c0 [ 201.700636][T14989] __getblk_slow+0x1f4/0x560 [ 201.702137][T14989] ? lock_release+0x201/0x2f0 [ 201.703632][T14989] bdev_getblk+0xd4/0xe0 [ 201.704980][T14989] __bread_gfp+0x86/0x3c0 [ 201.706368][T14989] bfs_fill_super+0x1b1/0x1070 [ 201.707868][T14989] ? do_raw_spin_lock+0x12c/0x2b0 [ 201.709488][T14989] ? setup_bdev_super+0x337/0x730 [ 201.711110][T14989] ? lock_release+0x201/0x2f0 [ 201.712599][T14989] ? sb_set_blocksize+0x188/0x1d0 [ 201.714194][T14989] ? setup_bdev_super+0x369/0x730 [ 201.715726][T14989] get_tree_bdev_flags+0x38c/0x620 [ 201.717266][T14989] ? __pfx_bfs_fill_super+0x10/0x10 [ 201.718883][T14989] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 201.720681][T14989] ? bpf_lsm_capable+0x9/0x10 [ 201.722214][T14989] ? security_capable+0x7e/0x260 [ 201.723773][T14989] vfs_get_tree+0x8b/0x340 [ 201.725188][T14989] path_mount+0x1513/0x2000 [ 201.726591][T14989] ? __pfx_path_mount+0x10/0x10 [ 201.728096][T14989] ? kmem_cache_free+0x2d1/0x4d0 [ 201.729658][T14989] ? putname+0x154/0x1a0 [ 201.731026][T14989] ? putname+0x154/0x1a0 [ 201.732377][T14989] ? __x64_sys_mount+0x28d/0x310 [ 201.733875][T14989] __x64_sys_mount+0x28d/0x310 [ 201.735376][T14989] ? __pfx___x64_sys_mount+0x10/0x10 [ 201.737040][T14989] do_syscall_64+0xcd/0x4c0 [ 201.738495][T14989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.740366][T14989] RIP: 0033:0x7f8b0b98ebe9 [ 201.741798][T14989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.747682][T14989] RSP: 002b:00007f8b0c89c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 201.750308][T14989] RAX: ffffffffffffffda RBX: 00007f8b0bbb5fa0 RCX: 00007f8b0b98ebe9 [ 201.752773][T14989] RDX: 00002000000001c0 RSI: 0000200000000000 RDI: 0000200000000040 [ 201.755221][T14989] RBP: 00007f8b0ba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 201.757698][T14989] R10: 0000000000208004 R11: 0000000000000246 R12: 0000000000000000 [ 201.760309][T14989] R13: 00007f8b0bbb6038 R14: 00007f8b0bbb5fa0 R15: 00007ffe4e1bd578 [ 201.762896][T14989] [ 201.763924][T14989] Modules linked in: [ 201.766122][T14989] ---[ end trace 0000000000000000 ]--- [ 201.768015][T14989] RIP: 0010:folio_set_bh+0x18a/0x1e0 [ 201.770399][T14989] Code: df 48 89 fa 4c 01 e3 48 c1 ea 03 80 3c 02 00 75 43 48 89 5d 28 5b 5d 41 5c 41 5d 41 5e 41 5f e9 fc a2 4e 09 e8 57 a3 73 ff 90 <0f> 0b e8 0f fb d9 ff e9 a5 fe ff ff 4c 89 ef e8 12 fa d9 ff e9 cf [ 201.776749][T14989] RSP: 0018:ffffc90003de7a10 EFLAGS: 00010287 [ 201.778744][T14989] RAX: 0000000000001912 RBX: ffffea00018abb00 RCX: ffffc9002bafc000 [ 201.781796][T14989] RDX: 0000000000080000 RSI: ffffffff8247ede9 RDI: 0000000000000006 [ 201.784485][T14989] RBP: ffff888105e49740 R08: 0000000000000006 R09: 0000000000004000 [ 201.787054][T14989] R10: 0000000000004000 R11: 0000000000000001 R12: 0000000000004000 [ 201.789562][T14989] R13: 0000000000000002 R14: 0000000000004000 R15: 0000000000000000 [ 201.792411][T14989] FS: 00007f8b0c89c6c0(0000) GS:ffff8880d67bc000(0000) knlGS:0000000000000000 [ 201.795358][T14989] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.797458][T14989] CR2: 000055f40dd73000 CR3: 000000004d377000 CR4: 0000000000352ef0 [ 201.800063][T14989] DR0: 0000000000000006 DR1: 0000000000000000 DR2: 0000000000000000 [ 201.802755][T14989] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 201.805378][T14989] Kernel panic - not syncing: Fatal exception [ 201.808810][T14989] Kernel Offset: disabled [ 201.810437][T14989] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:57:24 Registers: info registers vcpu 0 CPU#0 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856438c5 RDI=ffffffff9b10e020 RBP=ffffffff9b10dfe0 RSP=ffffc90003de7338 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552030203a555043 R12=0000000000000000 R13=000000000000005d R14=ffffffff9b10dfe0 R15=ffffffff85643860 RIP=ffffffff856438ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f8b0c89c6c0 ffffffff 00c00000 GS =0000 ffff8880d66bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8b0c89bf98 CR3=000000004d377000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff69e148c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff69e14a46 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff69e14a46 00007fff69e14a4c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13c8612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13c8612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13c8612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13c8612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13c8612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13c8612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000001d315c RBX=0000000000000001 RCX=ffffffff8b939c29 RDX=ffffed100d4a6656 RSI=ffffffff8c162800 RDI=ffffffff81913321 RBP=ffffed1003bd7488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801deba440 R14=ffffffff90ab4090 R15=0000000000000000 RIP=ffffffff8b93878f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055f40dd73000 CR3=0000000024afa000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555577856ef0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557783b1c0 000055557783a880 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555577831fde 0000555577831eb0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8080808200019203 706f6f6c2f766564 2f01ffffffffffff ffffed080180030a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bff80304ddfeeff8 0800058abff00300 0400058abfec0320 0400058abfe80300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800038003181000 058abfe804010000 020806060101da5f fffffffe0800058a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0803b0030a080003 a003010000020806 0398033008000390 0302080003880302 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080606010f9c00 30656c69662f7075 6f7267632f2e01ff ffffffffffffffe1 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010380041881c4cd e608000100000008 0606010f9c003065 6c69662f70756f72 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 67632f2e01ffffff ffffffffffe10803 b0030a080003a003 0100000208060398 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0330080003900302 0800038803020800 038003181000058a bfe8040100000208 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 06060101da5fffff fffe0800058abff8 0304ddfeeff80800 058abff003000400 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6239666666666666 66660a35322e7965 6b5f5f2062203036 3739303362396666 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3739303362396666 6666666666660a36 322e79656b5f5f20 6220306137393033 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6220303238393033 6239666666666666 66660a37322e7965 6b5f5f2062203065 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6220306365643033 6239666666666666 66660a302e79656b 5f5f206220303865 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 646e616820622030 3066643033623966 666666666666660a 302e79656b5f5f20 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2062203034666430 3362396666666666 6666660a64695f74 656e5f656b616873 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6530336239666666 66666666660a6c62 7468736168725f65 6b616873646e6168 info registers vcpu 2 CPU#2 RAX=000000000023e71c RBX=0000000000000002 RCX=ffffffff8b939c29 RDX=ffffed100d4c6656 RSI=ffffffff8c162800 RDI=ffffffff81913321 RBP=ffffed1003bd7910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801debc880 R14=ffffffff90ab4090 R15=0000000000000000 RIP=ffffffff8b93878f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8b0c89bf98 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000007 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003172 656c6c616b7a7973 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4e1bda86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4e1bda86 00007ffe4e1bda8c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b0ba12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b0ba12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b0ba12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b0ba12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b0ba12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b0ba12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000000000000 00000000000002ff aa00000000000000 00000000000080fe ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b0c6ed100 00007f8b0bb87460 00007f8b0bb80004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b0bb874b8 00007f8b0bb874b0 00007f8b0bb874a8 00007f8b0bb874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000227ed4 RBX=0000000000000003 RCX=ffffffff8b939c29 RDX=ffffed100d4e6656 RSI=ffffffff8c162800 RDI=ffffffff81913321 RBP=ffffed1003bda000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801ded0000 R14=ffffffff90ab4090 R15=0000000000000000 RIP=ffffffff8b93878f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8b0bbb7dac CR3=000000004d377000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4e1bda86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4e1bda86 00007ffe4e1bda8c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b0ba12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b0ba12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b0ba12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b0ba12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b0ba12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b0ba12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b0bb874a8 00007f8b0bb874a0 00007f8b0bb87498 00007f8b0bb87470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b0c6ed100 00007f8b0bb87460 00007f8b0bb87478 00007f8b0bb874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b0bb874b8 00007f8b0bb874b0 00007f8b0bb874a8 00007f8b0bb874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000