last executing test programs: 3m5.848690455s ago: executing program 0 (id=60): prctl$PR_SET_TIMERSLACK(0x1d, 0x3ff) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x10, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x20000000, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xda, 0xc}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x20}}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}}, 0x44) 3m5.728058584s ago: executing program 0 (id=63): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x4e8, 0x3e4, 0x524, 0x114, 0x114, 0x3e4, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @empty, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty, 0x4e22}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x544) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800"/14], 0x0}, 0x94) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x1, 0x0, 0x8, 0x6, 0x1000, 0x100}) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b000000190001001a848efa961fb2d82d"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40051) r2 = fsopen(&(0x7f0000000180)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 3m5.727470592s ago: executing program 0 (id=65): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 3m5.587925066s ago: executing program 0 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x8, &(0x7f0000000280)={[0x9]}) r3 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) read$FUSE(r1, &(0x7f0000002040)={0x2020}, 0x2020) getdents64(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) close(0x3) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) r9 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40, 0x29147069757722ed) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000000200)={r8, 0x3, r7, 0x1}) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r7, @ANYRES16=r7, @ANYRESOCT], 0x104}}, 0x4000000) 3m5.517749007s ago: executing program 0 (id=67): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000180)="e6e0", 0x2}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0000002001100000000000000000000000100000001000000000000001c000000000000000000000008"], 0x50}}], 0x3ffffffffffff40, 0x800) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) 3m5.168943403s ago: executing program 0 (id=69): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}]}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r1, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x80000000000725) 3m5.144554693s ago: executing program 32 (id=69): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}]}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r1, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x80000000000725) 2m31.298608877s ago: executing program 1 (id=479): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 32) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (rerun: 32) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0xa, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x80, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x6}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) (async, rerun: 64) ioctl$KVM_RUN(r4, 0xae80, 0x0) (rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m30.926327963s ago: executing program 1 (id=483): keyctl$set_reqkey_keyring(0x5, 0xfffffffe) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000480)='cifs.spnego\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='key_or_keyring:', 0x0) 2m30.923917135s ago: executing program 1 (id=484): pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000c000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000f40)={0x5, 0x0, [{0x8000, 0x7, 0xfffff714, [0x9, 0x9, 0x1af, 0xb9a2, 0x1, 0x10, 0x8, 0x2]}, {0xfffff78a, 0x6, 0x9, [0x9f7, 0x3, 0x1, 0x0, 0x4, 0xf, 0x8, 0x200]}, {0x1ff, 0x9, 0x1ff, [0x94f, 0x1, 0x73e5d9cb, 0x9, 0x0, 0x9, 0xfffffff7, 0x400]}, {0x5, 0x7fffffff, 0xf, [0xbf, 0x100, 0x0, 0x10000, 0x8001, 0xca, 0x100, 0xf08b9bb]}, {0x66f7, 0x3, 0x8, [0x11800, 0x6, 0xb1, 0x7, 0x7, 0x0, 0x100, 0x4]}]}) 2m30.723076362s ago: executing program 1 (id=488): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1cb201, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)='6', 0x1}], 0x1) ioctl$SNAPSHOT_FREE(r1, 0x3305) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') 2m30.722683674s ago: executing program 1 (id=489): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r2) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2077) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0x50) (async) syz_fuse_handle_req(r1, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x1, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) (async) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0x1, 0x0, 0x0, 0x0, r5}]) (async, rerun: 32) dup3(r5, r1, 0x0) (async, rerun: 32) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r7, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) (async) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000140), 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x2f, 0xab, 0x0, 0x4, 0x3, @mcast1, @empty, 0x20, 0x8000, 0x5, 0x9}}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000540)={r0, &(0x7f0000000380)='syzkaller\x00', 0x200000, &(0x7f00000003c0)={@align=0x3, {0x2, 0x7f9, 0x80, 0xf}}, 0x2, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0x80}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x12, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@alu={0x7, 0x0, 0x5, 0xa, 0x6, 0x6, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xcd, &(0x7f0000000140)=""/205, 0x40f00, 0x6, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x10, 0x8, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, r9], 0x0, 0x10, 0x2}, 0x94) 2m30.334531447s ago: executing program 1 (id=492): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x1) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x20, 0x6000, @fd, 0x10, 0x0, 0x0, 0x0, 0x0, {0x2, r5}}) (async) io_uring_enter(r2, 0x2fa, 0xf400, 0x0, 0x0, 0x0) 2m30.305701342s ago: executing program 33 (id=492): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x1) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x20, 0x6000, @fd, 0x10, 0x0, 0x0, 0x0, 0x0, {0x2, r5}}) (async) io_uring_enter(r2, 0x2fa, 0xf400, 0x0, 0x0, 0x0) 2m18.203450867s ago: executing program 2 (id=630): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56543, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0x1, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x480a5}, 0x4048800) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x840) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000300)=ANY=[], 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0x5509, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x5b14, 0x0) 2m16.288372654s ago: executing program 2 (id=640): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1000, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r2, 0x40096100, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, 0x2c}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xac, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0xac}}, 0x24040084) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x3}, &(0x7f0000000240)=0x10) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r10 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffd, @mcast1={0xff, 0x7}, 0xc}}, {{0xa, 0x0, 0x8a, @remote, 0x1000}}}, 0x108) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r15, @ANYRES32=r14, @ANYBLOB='&'], 0x10) sendmsg$inet(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r15}, &(0x7f0000000000), &(0x7f00000002c0)=r11}, 0x20) sendmsg$inet(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}, 0x2142) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r8, 0x80}, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000001e80)=0x1a6, 0x8) 2m16.216050134s ago: executing program 2 (id=641): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0) 2m16.213083463s ago: executing program 2 (id=642): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x3c) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') (async) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') 2m16.116665251s ago: executing program 2 (id=643): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x20, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x3}}, @FRA_DST={0x14, 0x1, @empty}]}, 0x4c}}, 0x40000) r1 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x83) fchdir(r2) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4000, 0x2}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x5}]}}}]}, 0x50}}, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x1, r0, &(0x7f0000000040)=0x5, 0xc159, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x20, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x3}}, @FRA_DST={0x14, 0x1, @empty}]}, 0x4c}}, 0x40000) (async) fsopen(&(0x7f0000000000)='bpf\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x0, 0x83) (async) fchdir(r2) (async) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4000, 0x2}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x5}]}}}]}, 0x50}}, 0x0) (async) copy_file_range(r0, &(0x7f0000000000)=0x1, r0, &(0x7f0000000040)=0x5, 0xc159, 0x0) (async) 2m15.777646873s ago: executing program 2 (id=646): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x4002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) fcntl$setpipe(r2, 0x407, 0xdc7d) 2m15.697011861s ago: executing program 34 (id=646): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x4002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) fcntl$setpipe(r2, 0x407, 0xdc7d) 1m57.387522133s ago: executing program 4 (id=875): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000850) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x2, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x2, 0x400) read$FUSE(r3, &(0x7f0000003780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000280)={0x10, 0x0, r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r6, 0x1, 0x0, 0x0, {0x21}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r7, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x7, 0xb, 0x2, 0x7fff, 0x3, 0x6, 0x5, 0x292, 0x40, 0x393, 0x818, 0x4, 0x38, 0x2, 0x9, 0x4b8, 0xb0c0}, [{0x4, 0x5, 0x7, 0x6, 0x7fffffffffffffff, 0x3, 0x9, 0x9}, {0x4, 0x0, 0xd05, 0x10001, 0x8, 0x2, 0x3, 0x80000001}], "bdb0c070cd7ce30def27618574da58605fe1", ['\x00']}, 0x1c2) syz_emit_ethernet(0x3e, &(0x7f0000003740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x6308}}}}}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e130100c90001", @ANYRESOCT], 0x16) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000040)) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x139080, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r9, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r9, 0xc02064cc, &(0x7f00000001c0)={r10, r10, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01864c2, &(0x7f0000000140)={0x0, 0x1, r3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01864c2, &(0x7f0000000180)={0x0, 0x1, r3}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000280)={0x28, 0x25, 0x1, 0x70bd29, 0x25dfdbfb, {0xb}, [@nested={0x14, 0x138, 0x0, 0x1, [@nested={0x10, 0x45, 0x0, 0x1, [@typed={0xc, 0x1a, 0x0, 0x0, @u64=0x6}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400400d}, 0x20000044) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r8, 0xc01864cd, &(0x7f0000000240)={&(0x7f00000001c0)=[r10, r11, r12, 0x0], &(0x7f0000000200)=[0x36a, 0x0], 0x4}) 1m56.936815478s ago: executing program 4 (id=884): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d4", 0x20) fcntl$setlease(r1, 0x400, 0x3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0xc4}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001800f3d20000000000000000020400000400000700000000100016800c000380f702bc4d2c8f2b8b060f6e93392d16", @ANYRES32, @ANYBLOB="0600150006000000"], 0x34}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getqdisc={0x4c, 0x26, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff1, 0xd}, {0xfff2, 0xe}, {0x6, 0xffe0}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) r6 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0xa, 0x881) mmap$snddsp_control(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000008, 0x2010, r6, 0x83000000) 1m56.934595677s ago: executing program 4 (id=885): r0 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x297}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r3], 0x1}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000001900)={'syztnl1\x00', 0x0, 0x20, 0x7, 0x88, 0x976, {{0x29, 0x4, 0x2, 0x8, 0xa4, 0x68, 0x0, 0x9, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}, {[@timestamp_prespec={0x44, 0x2c, 0xe3, 0x3, 0x9, [{@remote, 0x5}, {@private=0xa010102, 0x9}, {@loopback, 0x8}, {@remote, 0x7fff}, {@broadcast, 0x9}]}, @rr={0x7, 0xb, 0xc9, [@remote, @multicast1]}, @timestamp_addr={0x44, 0x54, 0xc2, 0x1, 0xc, [{@private=0xa010102, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010101, 0x7}, {@remote, 0x1cccc9aa}, {@rand_addr=0x64010100, 0x7}, {@broadcast, 0x1ff}, {@empty, 0xffffff01}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xbc7}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x7}, {@local, 0x3}]}, @end, @end]}}}}}) sendmsg$inet(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f0000001880), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="140000000000000000000000010000b10ef479622acbaa165c0005000000000000001c0000000000", @ANYRES16=r3, @ANYBLOB="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", @ANYRESDEC=r2], 0x168}, 0x4044800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x10000000) io_uring_enter(r0, 0x6d1c, 0x4b27, 0x77, &(0x7f0000000340)={[0x7]}, 0x8) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x50, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2011042, &(0x7f0000000000)={[{@subsystem='cpuacct'}, {@subsystem='memory'}, {@subsystem='blkio'}, {@noprefix}, {@favordynmods}, {}]}) 1m56.853869821s ago: executing program 4 (id=888): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$XFS_IOC_FSBULKSTAT(r2, 0xc0205865, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$CLEAR(0xffffffffffffffff, 0x3b88, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r5, 0xaea2, 0x2) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) move_pages(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0xa4, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5d56c, 0x200}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x70, 0x16, 0x0, 0x1, [{0x6c, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x12, 0x3}}, @IFLA_VF_MAC={0x28, 0x1, {0x0, @random="260b8cc330e0"}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffffd, 0x753}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8001, 0x80}}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2404c051}, 0x200088c4) 1m56.616281379s ago: executing program 4 (id=894): ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@arm64={0x5, 0xe, 0x4, '\x00', 0x5}) r0 = socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9100, &(0x7f0000000140)={0x6, 0x8a, 0x40000, {r1}}, 0x37) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c884}, 0x4054) 1m56.299091276s ago: executing program 4 (id=903): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='nsfs\x00', 0x200000, 0x0) file_setattr(0xffffffffffffffff, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)={0x14040, 0x3, 0x0, 0x1, 0x8}, 0x18, 0x1000) 1m56.260500348s ago: executing program 35 (id=903): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='nsfs\x00', 0x200000, 0x0) file_setattr(0xffffffffffffffff, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)={0x14040, 0x3, 0x0, 0x1, 0x8}, 0x18, 0x1000) 1m46.195799736s ago: executing program 5 (id=1022): r0 = socket(0x2, 0x3, 0x67) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200), 0x210203, 0x0) (async, rerun: 64) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 64) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000380)=0xe9) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='\x00', &(0x7f00000002c0)='netdevsim0\x00', 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x10, &(0x7f00000004c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffbffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x1, 0x9, r6, 0x8}, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) (async) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r7) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000071c0)={0x0, 0x0, &(0x7f0000007180)={&(0x7f00000070c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fedbdf252400000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) (async, rerun: 32) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x40, r8, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async, rerun: 32) r9 = openat2(r0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x80, 0x185}, 0x18) faccessat2(r9, &(0x7f0000000440)='./file0\x00', 0x1f1, 0x100) 1m46.063956337s ago: executing program 5 (id=1024): syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x100000005) (async) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x100000005) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600800a000008001100", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="b2d1732a808a54811c0885d2223b45269f56"], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) 1m45.971940211s ago: executing program 5 (id=1027): r0 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10c) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x12000, 0x80) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x3) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x1, 0x6, 0x1, &(0x7f0000000040)={0x6, "9f09222b8c28a4d4edb80a23fed5113fb4122a1bbb19355cf53da14fa6e19a0829"}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f00000003c0), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x5c480, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x203) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x2, 0x6200, 0x1, &(0x7f0000000240)='/'}], 0x1}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0x1}, 0x4) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80e40, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r7, 0x50009405, &(0x7f0000000200)={0x4, 0x40, 0x5}) 1m45.373445154s ago: executing program 5 (id=1039): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0x40}}, 0x4044041) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2083880, 0x0) (async) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2083880, 0x0) unshare(0x2a020400) ioctl$NILFS_IOCTL_GET_VINFO(r3, 0xc0186e86, &(0x7f00000006c0)={&(0x7f0000000580), 0x0, 0x20, 0x4, 0x4}) (async) ioctl$NILFS_IOCTL_GET_VINFO(r3, 0xc0186e86, &(0x7f00000006c0)={&(0x7f0000000580), 0x0, 0x20, 0x4, 0x4}) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\b\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0800a0002a0a000008009f000d0000000800260094090000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f00000032c0)={0x1250, r8, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PROBE_RESP={0x8cc, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x8a7, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x91, 0xf, [@fast_bss_trans={0x37, 0x71, {0x1, 0x1, "ce14409284421a2b6f0f6805eae18887", "b47a120098bb7da03f11b0775c3122dab34333fe55935b77122c8c536223e147", "0c13e770d29a8aa16fef2fe3dcba3db3f4b556e3381d997db4c8f92b8904bac8", [{0x3, 0x1d, "d92ca036959c0fa7fbeade5da4fc9559c7e6a4ba89b9c75d89ede544c6"}]}}, @mic={0x8c, 0x18, {0x931, "9c48190209e3", @long="871ccd8398016828f7d4082bcd0ef07e"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x28, 0x7f, [@ssid={0x0, 0x6, @default_ap_ssid}, @ht={0x2d, 0x1a, {0xc, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x6, 0x0, 0x1, 0x0, 0x2}, 0x800, 0x0, 0x2}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xc, 0x7f, [@gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x1250}, 0x1, 0x0, 0x0, 0x20000841}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x19}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x54) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010003000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010003000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sysfs$2(0x2, 0x2c2b6274, &(0x7f0000000580)=""/18) (async) sysfs$2(0x2, 0x2c2b6274, &(0x7f0000000580)=""/18) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 1m45.092457556s ago: executing program 5 (id=1042): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x9, 0x5, 0xf1, 0x2, 0x64a], 0x4, &(0x7f0000000080)=[{}], 0x0, [{}, {}, {}, {}]}, 0xb8) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/181, 0xb5}], 0x1, 0x0, 0x0) 1m44.81754607s ago: executing program 5 (id=1048): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @p_u16=&(0x7f0000001b80)=0xa}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2}]}}]}, 0x48}}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x80000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)={'erspan0\x00', r4, 0x20, 0x0, 0x101, 0x2, {{0x28, 0x4, 0x0, 0x6, 0xa0, 0x68, 0x0, 0x2, 0x2b, 0x0, @multicast1, @loopback, {[@timestamp={0x44, 0x8, 0xf, 0x0, 0x3, [0x800]}, @rr={0x7, 0xb, 0xdd, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x23, 0x2a, [@multicast2, @local, @broadcast, @private=0xa010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x24, 0x69, 0x1, 0x5, [{@private=0xa010100, 0xfffffffe}, {@loopback, 0x97b}, {@remote, 0xfffffffe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc0}]}, @timestamp={0x44, 0xc, 0x35, 0x0, 0x8, [0x1, 0x7]}, @timestamp={0x44, 0xc, 0xdb, 0x0, 0x2, [0x2, 0x8]}, @timestamp_addr={0x44, 0x14, 0xb7, 0x1, 0xc, [{@multicast2, 0xf2}, {@rand_addr=0x64010101, 0x7b5}]}, @generic={0x82, 0x3, "ea"}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0xffffffe2, {0x0, 0x0, 0xe403, 0x0, 0x243, 0x71dcb}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3ff}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x84}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4090}, 0x8804) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @p_u16=&(0x7f0000001b80)=0xa}}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2}]}}]}, 0x48}}, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) mmap$xdp(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x80000000) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)={'erspan0\x00', r4, 0x20, 0x0, 0x101, 0x2, {{0x28, 0x4, 0x0, 0x6, 0xa0, 0x68, 0x0, 0x2, 0x2b, 0x0, @multicast1, @loopback, {[@timestamp={0x44, 0x8, 0xf, 0x0, 0x3, [0x800]}, @rr={0x7, 0xb, 0xdd, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x23, 0x2a, [@multicast2, @local, @broadcast, @private=0xa010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x24, 0x69, 0x1, 0x5, [{@private=0xa010100, 0xfffffffe}, {@loopback, 0x97b}, {@remote, 0xfffffffe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc0}]}, @timestamp={0x44, 0xc, 0x35, 0x0, 0x8, [0x1, 0x7]}, @timestamp={0x44, 0xc, 0xdb, 0x0, 0x2, [0x2, 0x8]}, @timestamp_addr={0x44, 0x14, 0xb7, 0x1, 0xc, [{@multicast2, 0xf2}, {@rand_addr=0x64010101, 0x7b5}]}, @generic={0x82, 0x3, "ea"}]}}}}}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0xffffffe2, {0x0, 0x0, 0xe403, 0x0, 0x243, 0x71dcb}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3ff}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x84}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4090}, 0x8804) (async) 1m44.762855216s ago: executing program 36 (id=1048): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @p_u16=&(0x7f0000001b80)=0xa}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2}]}}]}, 0x48}}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x80000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)={'erspan0\x00', r4, 0x20, 0x0, 0x101, 0x2, {{0x28, 0x4, 0x0, 0x6, 0xa0, 0x68, 0x0, 0x2, 0x2b, 0x0, @multicast1, @loopback, {[@timestamp={0x44, 0x8, 0xf, 0x0, 0x3, [0x800]}, @rr={0x7, 0xb, 0xdd, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x23, 0x2a, [@multicast2, @local, @broadcast, @private=0xa010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x24, 0x69, 0x1, 0x5, [{@private=0xa010100, 0xfffffffe}, {@loopback, 0x97b}, {@remote, 0xfffffffe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc0}]}, @timestamp={0x44, 0xc, 0x35, 0x0, 0x8, [0x1, 0x7]}, @timestamp={0x44, 0xc, 0xdb, 0x0, 0x2, [0x2, 0x8]}, @timestamp_addr={0x44, 0x14, 0xb7, 0x1, 0xc, [{@multicast2, 0xf2}, {@rand_addr=0x64010101, 0x7b5}]}, @generic={0x82, 0x3, "ea"}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0xffffffe2, {0x0, 0x0, 0xe403, 0x0, 0x243, 0x71dcb}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3ff}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x84}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4090}, 0x8804) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @p_u16=&(0x7f0000001b80)=0xa}}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2}]}}]}, 0x48}}, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) mmap$xdp(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x80000000) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)={'erspan0\x00', r4, 0x20, 0x0, 0x101, 0x2, {{0x28, 0x4, 0x0, 0x6, 0xa0, 0x68, 0x0, 0x2, 0x2b, 0x0, @multicast1, @loopback, {[@timestamp={0x44, 0x8, 0xf, 0x0, 0x3, [0x800]}, @rr={0x7, 0xb, 0xdd, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x23, 0x2a, [@multicast2, @local, @broadcast, @private=0xa010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x24, 0x69, 0x1, 0x5, [{@private=0xa010100, 0xfffffffe}, {@loopback, 0x97b}, {@remote, 0xfffffffe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc0}]}, @timestamp={0x44, 0xc, 0x35, 0x0, 0x8, [0x1, 0x7]}, @timestamp={0x44, 0xc, 0xdb, 0x0, 0x2, [0x2, 0x8]}, @timestamp_addr={0x44, 0x14, 0xb7, 0x1, 0xc, [{@multicast2, 0xf2}, {@rand_addr=0x64010101, 0x7b5}]}, @generic={0x82, 0x3, "ea"}]}}}}}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0xffffffe2, {0x0, 0x0, 0xe403, 0x0, 0x243, 0x71dcb}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3ff}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x84}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4090}, 0x8804) (async) 9.623649209s ago: executing program 3 (id=2424): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000900000087"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/49}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) socket$unix(0x1, 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x20a, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0, 0xff8, 0x0, &(0x7f00000031c0)={0x30, 0x30, 0x1e}}}], 0x0, 0x0, 0x0}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 9.623036025s ago: executing program 3 (id=2425): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_clone(0x18000000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0x2, 0x4, 0x3f8, 0xffffffff, 0x0, 0x0, 0x1a0, 0xfeffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@eui64={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback, @remote}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x5, 0x4}, {0x0, 0x5}, {0x2, 0x3}]}]}, {0x0, [0x30, 0x30, 0x5f, 0x0]}}, &(0x7f00000002c0)=""/145, 0x42, 0x91, 0x0, 0x7}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x170bd26, 0x25dfdbff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x2, 0x4, {@ip4=@multicast2, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008011}, 0x4040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000002180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000bc0)=ANY=[@ANYBLOB="611834000000000061134c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf37000000000000350607000fff0720dc03000020000000260300000ee60060bf060000000000000f630000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f3fa039a196ee920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f625480a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000008e69cc5c1e7319d39fa6f96c23c8ffd591ef011294c50a0a705549134c4aa3544a99edc9535105d3aeba9ec9441f912bdc65695e731c872278b64167aa46a07c68a9eace7fa485108f9d8cb4304c4b65d61d88aacea85b53893ee96edc310c23b1fc83b4b0f3d28c3861480840b7fe39a2bc2f6a558a20ae4d30b41f32e275faf92af8456141fde716d8d10a6b30981563db05312c39e8074fd5bb8bf95c24ccdb04e40e595927181d1138510fc6162da1a5898534fc2460b957e7b77bc5e192cc36ad2949c85e15142da926fbf6f830e1aaaa5dd9538e259e7f107e49b194c537ed4a52d7175c814e880610815c4090441873b3eb27"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x5800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf22, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x700}}, [@generic={0x76, 0x7, 0x1, 0x4, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0xd4, &(0x7f0000000040)=""/212}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_clone(0x18000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0x2, 0x4, 0x3f8, 0xffffffff, 0x0, 0x0, 0x1a0, 0xfeffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@eui64={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback, @remote}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x5, 0x4}, {0x0, 0x5}, {0x2, 0x3}]}]}, {0x0, [0x30, 0x30, 0x5f, 0x0]}}, &(0x7f00000002c0)=""/145, 0x42, 0x91, 0x0, 0x7}, 0x28) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x170bd26, 0x25dfdbff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x2, 0x4, {@ip4=@multicast2, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008011}, 0x4040) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000002180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000bc0)=ANY=[@ANYBLOB="611834000000000061134c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf37000000000000350607000fff0720dc03000020000000260300000ee60060bf060000000000000f630000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f3fa039a196ee920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f625480a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000008e69cc5c1e7319d39fa6f96c23c8ffd591ef011294c50a0a705549134c4aa3544a99edc9535105d3aeba9ec9441f912bdc65695e731c872278b64167aa46a07c68a9eace7fa485108f9d8cb4304c4b65d61d88aacea85b53893ee96edc310c23b1fc83b4b0f3d28c3861480840b7fe39a2bc2f6a558a20ae4d30b41f32e275faf92af8456141fde716d8d10a6b30981563db05312c39e8074fd5bb8bf95c24ccdb04e40e595927181d1138510fc6162da1a5898534fc2460b957e7b77bc5e192cc36ad2949c85e15142da926fbf6f830e1aaaa5dd9538e259e7f107e49b194c537ed4a52d7175c814e880610815c4090441873b3eb27"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) pipe2(&(0x7f00000001c0), 0x5800) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf22, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x700}}, [@generic={0x76, 0x7, 0x1, 0x4, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0xd4, &(0x7f0000000040)=""/212}, 0x94) (async) 9.531666965s ago: executing program 3 (id=2426): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x40000001}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000003c0)='./file0\x00', 0x0, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x40000001}, 0x10) (async) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) (async) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)) (async) chown(&(0x7f00000003c0)='./file0\x00', 0x0, r1) (async) 9.531317845s ago: executing program 3 (id=2427): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @remote, 0x2}, 0x1c, 0x0}, 0x20008814) (async) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x6, @mcast2, 0xfffffffe}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x64, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xc17, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0x2}, {0x9, 0xa}, {0xf, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48090}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}}, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) (async) setns(r2, 0x24020000) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x2c, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x9, 0x0, 0xe7}}}}}}, 0x0) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x84c18, 0x0) 9.434875195s ago: executing program 3 (id=2428): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00@'], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x2020) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0xf4, 0x6, 0x0, 0x6e9, 0x5}, 0x14) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000280)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x7fffffffffffffff]}}) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="5ce00c5a", 0x4}], 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x168, 0x98, 0x0, 0x168, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xff, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @loopback, 0x0, 0x0, 'lo\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x0, 0x20}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) (async) sendto$inet6(r4, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x6}, 0x1c) (async) shutdown(r4, 0x1) 9.434563452s ago: executing program 3 (id=2429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) close(r0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x1000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x20, 0xc}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x4) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x30, 0x0, 0xb, 0x101, 0x0, 0x0, {}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x9, 0x1, '(.%^\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x30}}, 0x24040000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x3, 0x0) (async) close(r0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x1000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x20, 0xc}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x4) (async) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x30, 0x0, 0xb, 0x101, 0x0, 0x0, {}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x9, 0x1, '(.%^\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x30}}, 0x24040000) (async) 8.152126364s ago: executing program 6 (id=2446): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_STOP(r0, 0x6f2a) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002e00090027bd700000000000040000002400118031f9e05e2f"], 0x38}, 0x1, 0x0, 0x0, 0x42890}, 0x4004004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) remap_file_pages(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000001, 0x4f8788cf, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x101000, 0x121) write$P9_RVERSION(r2, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0x5837, 0x6, '9P2000'}, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 7.04215823s ago: executing program 6 (id=2448): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x2020) 6.962274912s ago: executing program 6 (id=2454): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$caif_seqpacket(0x25, 0x5, 0x3) (async) r1 = socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, 0x0, 0x13) r2 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchownat(r3, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4) ioctl$sock_ifreq(r0, 0x891a, &(0x7f00000001c0)={'gre0\x00', @ifru_data=&(0x7f0000000100)="9c5b5499de0a046c68457bc2ae59904c348123d99981318ab89d5ec3a6731132"}) (async) ioctl$sock_ifreq(r0, 0x891a, &(0x7f00000001c0)={'gre0\x00', @ifru_data=&(0x7f0000000100)="9c5b5499de0a046c68457bc2ae59904c348123d99981318ab89d5ec3a6731132"}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@RTM_GETMDB={0x18, 0x56, 0x4, 0x70bd29, 0x25dfdbfc, {0x7, r5}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r6 = gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f00000003c0)="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", 0x3) (async) write(r4, &(0x7f00000003c0)="ee4505000000010001091207d009e341640c6da300398c31d81f49c521870d1156fd0eb02bb8995fb814dd38c3b50fe76704c1791bf8de9fa0c467c4701fa4cab975fec43ff82939ba15ce86cb689896c9da3e4b1511da6a7ca2c1f863bea9616364a270591857909754e947ad5554e833f70f7a1f7b57e99333350ebc93b6370b35469487eb59007e21cb06f323550f8ef6a9e1f066fb6b7aaeb17b611ffce66c4e89930a611f1475754a5aa318e40b31167030aa55dd2fe28f2d665b1b1f49567978e0246d22abe3357df2715f0164b231a45d4803d7735cf25653a121a2146e8efb3004fb94197b902062940d13587b6e8a04633d09cee98ba0de418088f52aa87d098778fc12a447175e21e8781b2d1bab6b1d9ebf2b98372b796de44c36ca2a63c442865f244870f78773a128e50ee7a5d022240c50e34a", 0x3) 6.452846109s ago: executing program 8 (id=2460): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000440)='@\n', 0xfdef}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="9451", 0x2}], 0x1}}], 0x2, 0x8000) (async, rerun: 64) sendto$inet(r1, &(0x7f0000000240)="25d5ea67", 0x4, 0x40, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) (async, rerun: 64) syz_emit_ethernet(0x32, &(0x7f0000000880)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0xe0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x1, 0x100}}}}}}}, 0x0) (async) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f00000004c0)={0x0, 0x1, 0x0, 0x20, 0x9959, 0x8, 0x2}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r3, &(0x7f0000000300)="2e64483e599cb199e1f4299d905ae57875937816018843f35ba82736e32e15f19b4fc208533c9acf8925480e6270ed1fddd1a4891a8fed4a23fe7519cc2f8aa681362ad3ea9bd440861dfec79d9f31179e65f5449feb301ff841297600f931794421c6572108d8f87bc980e96ec35e3ddea1d607406c7230a7835c", &(0x7f0000000380)=@tcp6=r4, 0x2}, 0x20) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0xc, &(0x7f0000000180)='@', 0x1) (async) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000001900)={[{@mode}]}) (async) getsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000280)=""/23, &(0x7f0000000080)=0x17) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 6.450337587s ago: executing program 8 (id=2461): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r2, 0x7, &(0x7f00000010c0)={0x0, 0x2, 0x1, 0x1fe}) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4104, 0x1008}], 0x1, 0x33, 0x0) ioctl$TIOCSETD(r1, 0x80045440, &(0x7f0000000040)=0x15) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={@rand_addr=0x64010101, 0x1, 0x0, 0x60, 0x0, [{@initdev}, {@initdev}, {@initdev}, {@multicast1}, {@loopback}, {@remote}]}}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0xa45) 6.363595672s ago: executing program 8 (id=2462): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0xffffffff, @vifc_lcl_addr=@local, @loopback}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000240)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaa2aaaabb08ea40a5716120010a467d90ac7cf46f4400001c000000000002907800000000e000030010baf500007dae76a8ef84101100907800000000"], 0x0) syz_emit_ethernet(0x103, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0xac7c56fbddb4c575, 0x6) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @remote}) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x6005}, @void, @eth={@multicast, @remote, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x8, 0x14, 0x68, 0x6000, 0x9, 0x11, 0x0, @broadcast, @multicast1}}}}}}, 0x2a) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x218, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xeb, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}, @TCA_STAB={0x1b8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x41, 0x80, 0x2, 0x1, 0x1, 0x3, 0xfff, 0x7}}, {0x12, 0x2, [0x8001, 0x5, 0x5, 0x8001, 0x3, 0x0, 0xfff8]}}, {{0x1c, 0x1, {0x3, 0x9, 0x401, 0x2, 0x0, 0x0, 0x78, 0x7}}, {0x12, 0x2, [0x4, 0x80, 0x2, 0x3553, 0x71f3, 0x81, 0x9]}}, {{0x1c, 0x1, {0xe, 0x2f, 0x1, 0x4, 0x0, 0x7, 0x7f, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x4, 0xc3, 0xcf4, 0x9, 0x0, 0x8, 0xad, 0x6}}, {0x10, 0x2, [0x8, 0x2, 0x7, 0xb761, 0xc, 0x1]}}, {{0x1c, 0x1, {0xc7, 0x8, 0x81, 0xc0a7, 0x0, 0x0, 0xf9eb, 0x4}}, {0xc, 0x2, [0x9, 0x1, 0x9, 0x1]}}, {{0x1c, 0x1, {0x80, 0x6, 0x5, 0x8e4, 0x0, 0xffffff4a, 0x3, 0x5}}, {0xe, 0x2, [0x0, 0x1, 0x9, 0x1, 0x4]}}, {{0x1c, 0x1, {0xd, 0x5, 0x7, 0xff, 0x0, 0x5, 0xa84, 0x8}}, {0x14, 0x2, [0x8001, 0x6, 0x7, 0x3ff, 0xfffd, 0x8001, 0x100, 0x8]}}, {{0x1c, 0x1, {0xff, 0x2, 0xeca, 0x8, 0x2, 0xfffffff1, 0x200, 0x8}}, {0x14, 0x2, [0x9, 0xe3c, 0x6, 0x43, 0xb4, 0x2, 0xa, 0xd]}}, {{0x1c, 0x1, {0x81, 0x6, 0x0, 0x7, 0x0, 0xb6000000, 0x2, 0x1}}, {0x6, 0x2, [0xec]}}, {{0x1c, 0x1, {0x9, 0x8, 0xba8, 0x7, 0x2, 0x7ff, 0x81a, 0x6}}, {0x10, 0x2, [0x8, 0x6, 0x90e, 0x8, 0x1, 0xf]}}]}]}, 0x218}}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0x10}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) 5.989391028s ago: executing program 6 (id=2466): r0 = semget$private(0x0, 0x5, 0x1a) r1 = socket(0x1d, 0x2, 0x6) socket(0x0, 0x2, 0xa6) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x6a, 0x3, 0x20000000, 0x4) semctl$GETVAL(r0, 0x0, 0xc, 0x0) 5.403461195s ago: executing program 8 (id=2476): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x581, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002, 0x20}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r0}}}}, @IFLA_MAP={0x24, 0xe, {0x3, 0x7, 0x3337, 0x7f, 0x2d, 0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) 5.233371558s ago: executing program 8 (id=2477): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235004000000f30b9fa000000130f01d9300d76c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d9000f32ba00e500000f30660fc775022e0fba600c9864660ffc76002f3166b85766baa00066ed00d0", 0x59}], 0x1, 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000300)) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd28, 0x8000, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x80, 0x0, 0x2, 0x0, 0xa0, 0x0, 0x0, r4}, {0x0, 0x6, 0x1000, 0x8}, {0x0, 0xe97b, 0x0, 0xffffffffffffffff}, 0x400000, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4044004}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x40) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000002900)={r5, 0x2, 0x0, [0x4, 0x100, 0x8, 0x608a, 0x2], [0x7, 0x3ff, 0x7, 0x1, 0xa690, 0x1, 0x7fffffffffffffff, 0xc5, 0x7, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x1, 0x9, 0x0, 0x6, 0x1, 0x4, 0xfffffffffffffff9, 0x8, 0x1, 0xffffffffffffffff, 0x1, 0x81, 0x8, 0x8000000000000001, 0x2, 0x6, 0xffffffffffff0001, 0x6, 0x5, 0xb93, 0x2, 0x2, 0x5, 0x1, 0x5, 0xffffffffffffffff, 0x5, 0x2, 0x0, 0x909, 0x2, 0xce, 0x81, 0x3, 0x0, 0x4, 0x4, 0x7dff, 0x6, 0x800, 0xc52c, 0x9, 0x7, 0x101, 0x2, 0x0, 0xf, 0x8, 0x7, 0x35, 0x3, 0x0, 0x5, 0x9, 0x100000000000, 0x85d7, 0x1, 0x3ff, 0x0, 0x3, 0xfffffffffffffffb, 0x3, 0x4, 0xdabe, 0x8, 0xf, 0x1000, 0x8, 0x5, 0x73, 0x80000000, 0x1, 0x3ff, 0x1, 0x400, 0x1, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x1, 0x2, 0x2, 0x2, 0x8000000000000000, 0xbf35, 0x1, 0xffffffffffffffff, 0x1, 0x3, 0x8000, 0x8, 0x1ff4, 0x100000001, 0x10001, 0x74, 0x80000001, 0x0, 0x8, 0xfffffffffffffff7, 0x7, 0xdb, 0x63, 0x27a8318c, 0x7]}) 2.249037772s ago: executing program 7 (id=2496): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x4080) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='omfs\x00', 0x208000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x10) 2.197957012s ago: executing program 7 (id=2497): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r0, 0x29, 0x7, 0x0, &(0x7f00000017c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x28, r4, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44094}, 0x20000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e657665"], 0x6c}}, 0x40) syz_open_procfs$pagemap(r1, &(0x7f0000000080)) exit(0xf) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)={0x34, r7, 0x1, 0x70bd29, 0x3, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r7, 0xd10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d7e04cd38690"}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4) 1.266675221s ago: executing program 7 (id=2498): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xd}, 'port1\x00', 0x72, 0x21cfa, 0x0, 0x8000007, 0x3, 0x4, 0x12, 0x0, 0x6}) r1 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) close(r0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000380)={0x100, @tick=0x9, 0xe5, {0x6, 0x1}, 0x5, 0x0, 0x4}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newtaction={0x19ac, 0x30, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{0x40c, 0x1, [@m_skbmod={0xa0, 0x2, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x3800000, 0x2, 0xffffffff, 0x1c000000}, 0xb}}]}, {0x2c, 0x6, "7f6aef8f83e7a205d007881fc33e877822cb7751468ce8d640cf61dcc0b61b14ed8e6ab4fbed257b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_bpf={0xd4, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0xab, 0x6, "50b8e0c45026fe929fb3adcc694276bd66f4811715d9aae8cdff19d8b446f20449497fe123668d9bc014a443618a475f24792036ec55055eb2914e168bc1ee09cfd041ead71aeb3b4df4af4752890cb30249efa246b92b1e8f45b90f00513d304ec9441d926747766947dac43857c95bfbd04042e85cc2059d4f9b61b2fd7281ddf63463ac8286c99b2ed008a5adb377ff76b38e7eed539cdf28243dce7c09c99d25038d8ca686"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x80, 0x1a, 0x0, 0x0, {{0xf}, {0x4}, {0x50, 0x6, "bdbce959f5c306057d0aecb0317f4f4e0cf0664dcdff7efd9efdb69b20c7035338c3d108c265e88c641c48c8cede33fc1644d5dc752cd0bdcad844f16c9d8eb753f321b5b71a1d86b566644a"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_nat={0x214, 0x12, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x0, 0xea, 0x1000}, @multicast1, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x3, 0x1, 0x9}, @rand_addr=0x64010102, @loopback, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x9, 0x4, 0x9f, 0xff}, @local, @dev={0xac, 0x14, 0x14, 0xc}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x1, 0x2, 0xfffffff7, 0x8000}, @multicast1, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x40, 0x2, 0x5, 0xed}, @multicast1, @multicast1, 0xffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0x5, 0x10000000, 0x4, 0x10000}, @broadcast, @multicast2, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xc0000000, 0x4, 0x1, 0x7}, @local, @dev={0xac, 0x14, 0x14, 0x3f}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x8000, 0x0, 0x52, 0x3}, @loopback, @multicast2, 0xffffff00}}]}, {0xac, 0x6, "e3f471e35aa2666c282ab8ac916fda6080260c6e008b9668304d649928503cb53e48b7ebca684e6a95ef1d97156584df3a76e16371a32412cb715ea604e7085b4793184116024d08d659d3b00f39cb763aa8be07258b9f1466e28473ab10c4f4fc0430d0b42b4209c13556678ab8a5bc669192420ad7b7d13aa30dcbc3104d83ec5da809ce353b97ca0611b233b3b9b03ef5198fbd23962760920201986a20eb979ff3c2a72bf7eb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x158c, 0x1, [@m_vlan={0x64, 0x4, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x874}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x80009}, 0x2}}]}, {0xb, 0x6, "0281debf3b7832"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x190, 0x0, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x6, 0x2, 0x7}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffff472, 0x2, 0xfffffffffffffffe, 0x7, 0x3}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fffffff, 0x8, 0x4, 0x10, 0xfffff414}, 0xc8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10001, 0x4, 0x7, 0x5161, 0x2}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x2, 0xffffffff}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x2, 0x4, 0x2}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8f, 0x1, 0x4, 0x7, 0x4}, 0x8}}]}, {0x9a, 0x6, "11effc4cf02649013f7f4f3c530cfff4f540276c4d8639b8c71a3e6fd563033ffc0137bc47950d3a513a13f378fd3657e5c74e78c1f00cbfbbe02b46504074371f6ce74313a190f73ef77893bfa3a2547479b5d4685921598650aca33cdad9c4251151118d2765e5c75e728553e4b99bb9777a335b92570f9b947f6ddeb71bf35e0e11f40140e25bb1ae58f60f56a1cc5f748eb32d9a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x61c39567d1758476, 0x1}}}}, @m_bpf={0xbc, 0x19, 0x0, 0x0, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x14, 0x4, [{0x6, 0x9, 0x9, 0x7f}, {0x6, 0x20, 0x0, 0x7fff}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0xb, 0x4, 0x6f, 0x2}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x45a, 0x1, 0x7, 0x9, 0x5}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x8001, 0x4, 0x80000000, 0x1}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xbd6b, 0x2, 0x20000000, 0x7fff, 0x9}}, @TCA_ACT_BPF_NAME={0xa, 0x6, './bus\x00'}]}, {0x9, 0x6, "4beee4b44b"}, {0xc}, {0xc, 0x8, {0x1, 0x7}}}}, @m_ife={0x1ac, 0x12, 0x0, 0x0, {{0x8}, {0xac, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xe825}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x4e4}]}, @TCA_IFE_DMAC={0xa, 0x3, @random="df3a5fb26835"}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_METALST={0x40, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xfff9}, @IFE_META_PRIO={0x8, 0x3, @val=0x2}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7f}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x10000}, @IFE_META_PRIO={0x8, 0x3, @val=0x5}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0xdc, 0x6, "51f74b315f0cd7f91df7c85c27cd1a9a11dba46864f9177d9c0171a02aa3f524b818761fc225eba8e02d68175077db6d763257785d31b5332c0c7524175fb857f7f239ded01a79f5df2c618071f10a10c9d73fd1b6b03640f88624d082d2cbc980d1aa112d10c3ab864387350f2d4e2fe00e42bff809dd00820f317a220e2b7ed5a9fbe62707834ac76b91e131290937306e090a0152916ce1d7af07a3638e1af4de8ded0542e2d6814333b8b41e0bc4b23116a8e4532d52588694d441805cf3277415e6f96b9739c3e5d482773de444730f7052aa21c1b7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x1048, 0x1, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_LABELS={0x14, 0x7, "98a74f747ac7dc5c0a0bc008fd44c45a"}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0xe4, 0x19, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x8}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @local}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @broadcast}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x200}, @TCA_CT_ZONE={0x6, 0x4, 0xff5e}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x2}, @TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_LABELS={0x14, 0x7, "5cb9c21d9e29d6edb194156b9629306a"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}]}, {0x52, 0x6, "aeabf8751a5c3a9fafdb92f481196a5cbb03a7e0c3cd64f76796266d6342271b3989e8b3fd95b4dda20528ca52886d14e2cbf6862e2ceaacd701aa6fefd18f758f1a99cd976650015ab11b6f3bca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x19ac}}, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x181) write$cgroup_int(r4, &(0x7f0000000540), 0xfffffdd8) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4c, r3}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r6, 0x20, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20044887}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') lseek(r8, 0x8, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r6, 0x8, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000802}, 0x40400c0) 999.496646ms ago: executing program 7 (id=2499): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = memfd_secret(0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf2502000000050037000000000005002f000000000005002e0000000000050030000000000008002b000800000008003b000300000005002f0001000000a036dbf426060216e47233cd011ff76772b024c1cb830e47b290e7796aaf65cb05e6ae4c1a"], 0x4c}, 0x1, 0x0, 0x0, 0x24000084}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0xa, 0x148, 0x0, 0x10, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @local, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg2\x00', {0xffffffffffffffff, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x2, 0x7, [0x0, 0x10, 0x1b, 0x2b, 0x37, 0x2e, 0x2b, 0x18, 0x2b, 0x34, 0xd, 0x0, 0x3d, 0x1, 0x32, 0x37], 0x1, 0x6, 0x1570000000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x428) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r2, &(0x7f0000000180)="17", 0xfffffffffffffdfd, 0x10008095, 0x0, 0x240) r3 = socket$inet6(0x10, 0x2, 0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) chroot(&(0x7f0000000500)='./file0\x00') connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'pim6reg1\x00'}}, 0x1e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x30}}, 0x4000080) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x0, @multicast, 'veth0_to_team\x00'}}, 0xffe9) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x68040200) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x8, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x8000, 0x3) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) 690.156237ms ago: executing program 7 (id=2500): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x4000, &(0x7f0000000000)=0x100, 0x2, 0x0) r0 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) 689.789151ms ago: executing program 7 (id=2501): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='sched\x00') syz_emit_ethernet(0x76, &(0x7f0000001100)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33883", 0x3c, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "74cd7b", 0x0, 0x88, 0x0, @private1, @mcast1, [], "c6214c55d1055a616515f5a7"}}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(r3) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000200)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLCREATE(r5, 0x0, 0xfffffece) accept$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000280)=0x1c) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000480)={0x14, &(0x7f0000000380)={0x0, 0x30, 0x71, {0x71, 0x21, "88c510c41684aede219564fe8e207e453506372fa2340288927c2b7d71cfca5381cfce779a8d120e3059388bbc439ce852d4de97e38d794bcb4fbd341bf3d87de5523dd36e0fa85bc59167000fc715c77c4066267d2d1809bf116fcb7328e012a8330d60656a261bca2fb97cc85f38"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000580)={0x0, 0xb, 0xd0, "87203341485830c7ab5c3f5cb3af74d88dd4bf7dced42ab9b4f810bba2e33d18a93a7f2f76e9ba3ac142e0090fa7f1d6bd67e34a1576ebf73c7807a928cff3b990031007eb57b2126e6ec7cf4ae62e6bb6aa23e6b74377345035a43f146c72dc9726ec126f66fb5974da64b26da773a21b784918c6653396b044019afaadf8ff884a798b13b286e187a23bed8f93c2b6c159a174b2933ce9b14ea59f153430623bf9ed103d7227e24ef708639d1f44ae04a5628e6cd81f34b02694b4b05a988c8f8859844e889867b845704bbf00186f"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xf7}, &(0x7f0000000500)={0x0, 0x8, 0x1}, &(0x7f0000000680)={0x20, 0x81, 0x2, '\t\a'}, &(0x7f00000006c0)={0x20, 0x82, 0x1, "ce"}, &(0x7f0000000700)={0x20, 0x83, 0x1, '7'}, &(0x7f0000000740)={0x20, 0x84, 0x4, "596ab0f6"}, &(0x7f0000000780)={0x20, 0x85, 0x3, "a7f086"}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110a, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x42, 0x1000000, 0x0}) read$FUSE(r6, &(0x7f0000006380)={0x2020}, 0x2020) r9 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="0c6f789640bfcd31145cf5f0f31ec73994598f63a00b79667a48eedae49c6a47698ee4977770b73c0ce568f1", 0x2c, r9) r10 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) ioctl$CDROMMULTISESSION(r10, 0x5310, &(0x7f0000000040)={@lba, 0x0, 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f562308020456dbbcd54ec965f676c33e5e5a05f2a3bc0df97c4a1e56f88d9e8e0cc7676de05bfe2a3feca49962fa67266106e5f5fa7333e2e0fd34eb592079212eb9"], 0xfd12}}, 0x0) keyctl$clear(0x7, r9) 3.918448ms ago: executing program 6 (id=2502): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x1c, 0x0, 0x0}) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f00000000c0)=0x7) 395.337µs ago: executing program 8 (id=2503): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) pipe2$watch_queue(&(0x7f00000000c0), 0x80) sched_setscheduler(r1, 0x6, &(0x7f0000000080)=0xf2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 0s ago: executing program 6 (id=2504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x54) timerfd_gettime(0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0xf4, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x401}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000094}, 0x20008884) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = epoll_create1(0x80000) io_setup(0x2dd8, &(0x7f00000000c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x85, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)={0x2016}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r6, 0x80046402, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f0000000000)=0x1) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0xb, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc050) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="040000000050a62d67e00700000000002000000000000000", @ANYBLOB="02000000010000000000000002000000"], 0x2c, 0x0) r7 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) write$UHID_INPUT(r7, &(0x7f0000000d00)={0x8, {"7894e6e62ce0f10fcdce74f21ad5b47c923d4dec90cefd599912070f341d59a8802e33af9869738f25b2f72093dd0ffa688e8e417c6e0e09b99649818d7caca39e142ef69d9101397854c3f51bde013686a626b2120c03d98c0ad981069188fbbddb88bf41a6b29ed43d1244e6025e1e4a2f40577619ccee39385bfc86461023a7906e5c07d16415140f4ab26db004362c885ef2c9ee82d3dd7e2ac42ca05d81ccea87dc0ec4a8f222013d6d4d0b0c828f3d2e3151dce87bfb335c1ad67bb3323564022ab23a6ba54ca117ca592c8d4227922347ea6f7c9d3dbdbc8d235f2d03e688d5ca7718d60e911534f964bf20359a0057847e7d7fd2cc463784aab2b06ba95512cfc427da44aa73634b0797b9baab391aa176d259c047ee9d346e63903860ab3c571d064509a715c5c4c6edffce9e1701e8291c2d937e3ff18691fe9a665b1a3b717a40205f8efa239b37e6b33f5c8ac28e616f788d0294c8d39ff4a63aaca7d4c578a935dd84850432201081bc1b00c5797847eaff8cecf8af8a60f075b5ff1c3dc9e62f9a3cfc4333a7501dd8badfdc691a9d35d3fc2c0e8f1b21a2c619201004a0d82bace1738ba9ca93e6fbf8ebaa78b5423efb19d3337ad050a7a1a634737a0169921911b277ab235f8b186efd60c3eff58e974a856ba460c5fbd91c1b5c999a7f6b4474560e0c5698085e1ff96381999bf7338dddab4499c6ae315245ecc98d3ca2ebc11214a4115e9205e7d1705591be4029a5e92ae06c02ba39ac70cf1ba082ccee070bf2feafa55ac6e863adb6f89a7475c2dc073058b0f8a52151d8c3ced025463656942bfd257ace6c54bd57985a44cef1c20777db47d12bd34371ef6f537e455b7787e3a853713877fa9465937602ceef8b9439507ab802ea4eaf5ee2ecd710b1840d8b8c995b5904434198abd8f0e830857ed1af53f3bcede9d57afb1cd7ad27bf222a6d1c58286c40d22211a3b2b7b7bbf5923a528fa4d781aaec1f67e013392b17197d2f6ff2d0e68bea94ce57cc516daffdf2348333a8dc596894540aa2a79437d95465fc27627b0e26871d5248c39e1a3badb319d449a7d67145418e1a35cb4bf950a5483d6e80763ea676b89d1f1e2cea20c590c76ae9fb228ffd638ccabdb3830cf944e1cccfb7ba8b1d1f0aabc498155ddda8404ebe2e25cfcfa9058af7d66bef79e592a579d556404ea3f28d6ddb3fdead9123247e23827f729eee41540d0f0e94027d65eee4e7c1c913c634f9abf546388cd2e4b351b16bd97faae3b54f5b2750495619ec36d97a1080564fa30a9f8a2700b77340b5bbd9cc377ee35420b5b762935047af7837e973a9da42ef93c11f145704d041054bcc4680363cbbee16a2bc0eaaa49cfa23330a666dff32daa17a6ea425f1ed2354d0c36893c895a0564e100d3e1385467405ca2706cfb62453faf72b1648727faeffb3c934bc4e48e4ce93af11bff3208cb3843da7ed68451b4af747ef72e2fb78a73990c95097c9504aacddffc5caadeb171e95ad113561144907d361fd28695239f6619360b9d0eead653cc83ab13fc7c0c60237e3363b6f319daa38d792426393e2396404a112ed9e70b378f494d4b540bf9b44d76b347a12c8cdaeed350a85698eb71bd126f75b9aa0ff7435926a4a4ce04e4187eae5a80b1ff56aa7f1b005a9a057b6ace4cf08c404f66c0b31974d151e9a2840ebcbfbfd898e6694b89fe78a68b90551c9d33c14914dceff64a699c1cf1570c2d1f53e905abef9f954fbdd100b1b18f10dbd673bd6c7a9693286cf2dc0ab9919466750aa42ccfa27e9ff4190dd784ec6f2e19270521f98561a959152b16a80f0b1e183375d3886936ae03ff4949777d30481c24bbae918d5fdcc8f46ff05e2370095bc85cde086dc1e32423f21c13c42490fb679462f35dd0c4ef06f8c3f24327af47ea2c73a856f112385094fe138022e308c157adb19b94ed0e8d94b805883318b33b22f371d62f0b764b2a44b65018bef417357aa997ea4ef95a2899963e06a3c553943e14d3364b73919f5e6d8395d56d522f1b19ae37d48f1534d92e4248824adb555281aea2fb317bfb30cdc7d4efada900006f45578a061b19e2eeefffdbf1974a1633182501611724079f926122c1c8fd9b1d8e6302d76ed90616abcfcac478e3b8d3be91eee5f9c653f8fed3afc1eb33d9314aaa021e8b53ab7ba3e59b301a6c757efd95c6661d7d3e8a73cdec7833f4608dc238d8e144a5b0196a9aea6fb30efdfdb05f9529c52af93cd78d857e3cc920bf30b2292380c662890f3679c09aea55c77a75dbb4da338c0fb737a5fc31252d9fa798f9dd70947f6cfa0474a7a835c694dfbb5c678216915d1f04c81d5df8f2efde80fdbce8248525d9b639f394847b9a8c2e7f7288b031df91db059eabb750c1bfe732b78001c2cca0f74cd8873cc2a892d26e1dbd48db297853775c21d68ce1daebee4f4d65bf8e448b1c80da35eaff3295ffe0aef68baff15f7585aba741699c3ed9a62f2c18200e40cbb383b844459ca9636d61645470d4f8b04704b84a7986d816c037d368d807ab936faa842a427cc4987ab506f3f08841195c893f39656547ff62730ec43aa78311d57defe4002301f6b9e1f6573f3a46715e2d1f899480e8bc97f5dfe48ad14df280126998d32dc0a63231584b5ee82d5f90d5ccd3eb3923cee0dfe0eb9b1ac54fd97214ad86c6459cf916ba0bfc9d4210a95346d753f4bc7440d78274c4cd1850907a2bf150a1c1b511bf0438494a6aa1a197f787c96b410d866b4cb284f74122ffbb2f5fa7c2c22f935c7e1542ff83f01e3024ee6e3d7fd0fba2754e635c8116a27f15586300d6522979822c1f97038f33c644ef82e9818f4a09388cb9a69514c929e9bc149fd7a26b458d89abb5e3ae1de29ed1f28d613878a24a9296c967339b9c6749f92c720982cb78a120bcf7593c6fbae36f9a06caa384a7e5d3f05442b0a69f72518a76a916968aae56abda54dac318fd726335e95592f80d030ef51aea41d5e348267fcea65e49d8e36e711fedb3fb9ad37d3fdf2185dcc3ff44736d6a0d4b4bd1810f89ec6e0e6b6f58f74d73ddd2a27fcfaf36d1aec6c3769787a1d3b8514487a399e6497bd0bf4c4242868d599aeb2202cae535e8118d478fc43b4c8bfdcf024f36f5d7c9f75c69bc9d4d5414e8bef740bcaf9027dbdb0f47643b984406c9ce1999d7631243c26d6824ae74ab71f536e40e934a5dfea7f5c5d10713c831df6ba168f4080a4b082e94bc23c0807aab7c0bc29f327d185a2a9302cc255aa54764c4eb8ef5b17d640afa30b36572294914d51ac146f87af6f5abd97823724aba25f589e769aa1047e72365e9ee67e7f90e80542cc842aebabc97679dd893075e8a1bd6934ac9e768e20bcf4c2fa29c5f7a103d3ff689c721e08ef1d0ca61ee3e07a815aa943879dd5c406dcff6a946b0a12980620cfb224912e27accbb63b1e2d571c65918c806060dcd08d5cef341e5c5705021ec19605b809a44d2a8f6f27e18f2b8fd268e23706564df5501096fd8f8261e27d5c8b582673f0c76bf78b27f754cddb5b64a33c87841681d8eef2b5abe8a8deabee587189f75b8b518909cd2a6f89910425e8647f25077829f1b400b3abcaeff6f54ccc00f6fb7abeeefe0226e4e2b55fba0925b49be8310fc5a490384e4a5e7216b0fd0c09c00e3327ada8c59eb37443ac9148a9df92b0d4e6851cd93b784d3e0a236d9fe7c483f03d813fc98e632cf6255dc4a70a0458570776509ebfb545f35956c7e32493f6ad886ec858bfc29bffb7f2ae7eed7d83e3075554dd81e72c93f4c2e4dcdb0832e76861b983b17c2a6f887a988e4fd47459fd45134560b5b1bec10c50914f2d7f327a4e68a0c453f067035f243ca01aa22969481d5fb48d1da82f35222c4e8d249625c454159f7b00a85d43414eb5e7c8044922b323f2473af648d1dba5ffff34bd5e023a2fe4860d7568fa4d35ad20c461eb38bced561edcef853dbcdd7b69bb40e9cda525a71a286c956a1268cacad0bc0c79ed7632aedbb8dc78ba1a2adea2b650314072d1ebc08f9753d6d38e53a758ea4700160588e819239711a506f004ec57037cd6efcbb9cee3bba556eaaa008bf8e8390085b85653c7aa006dd836c7ad025bed9dec77a4a00b309776862fca4dd01dff16aa6bd70a876662093b85ffbb07b2f8b4361f5dc635f940571239a71865e8f1a289f449ae9a74266205c8b1fe8a732db502c9ea5e5c379b704d43ef795b40450aa498535803767d2c2cbd2749474d2997e00f37612fcc0ae7322b8c8e2a90cf66ada69bd05b82d5707562b37e40674f0a3f58d9c776a931b8768d5c23f17c5f9135e7a4ce0c6eb356d9fb4a53d112194c19e6f045d2bd44132a70b9ccd7e65d2787899785f7ee9185589136c847347142440e0a405c18ff3f31acb791a805dd281aaf97aee708dcce2f1aa53161b7716fa0978c0d02871637ad7e1af5a158b727a1dfc2ae1aafbb9c516469ee89fa0f1de23a17115ded5e9c560a468c5192943be74aeaba51083ca0379563f1fa78e29eca1eaf849cd00f419ceb59e640248c332c845e68e9a398281b962ae59aa5b18006b6ea6e0c5f1b30665e1fb975da11ed6a47bd44b4241bbf0443f178e8249805cc3f980a4bb2f46baab0a12e9e9b2aaa7e0ca22b2314a9e5ef6412f4efe31381e3d716244af3112444eabbb0c353acafc0f1179ad4c63b81e5f5bfd771591d24e5254fa72e30aa53717c24b49cee71cdd9368e207af5e992a04f06de912cfcfca38732f5c8393d466d209680ebfa5764897f04531138beff3f65691593e334c2ae2825ffa9353e8aeef37b90691ea5c78d7c86124abf6491a068bf03c3467e5e42ca4b58192d17856722207568777141ccbef3f3891708897af9c196be92056527a8da820d28dccaf4dfed4d38fb8fe826b238d31bad751631a0d8b1eabdfa7bffe65241238ff982d21b2222cdd3a536385d0ab2180ccdf4672d0b21156377fe640ee8c8744b9ba1efce91c295e83a4271a34a1f70adbc2ff0aa6ba9e1965061cadcd3d824636bbc1f977c78dde1859d752c86b099705616edf6e94523f108af79ab5073d26f3788c4d56f1b17b764c1bc387e531dab5dd71198c56b02c68552dc1098beec85dc1bbe2dde316e6093a9a33f578d789da9b2a9209ed6e73a0597bc62467afc42f0348c9b885b92f37569a953f6316d5c8b188539474da3836abeae7ec259cf8fd28f02593597e9206e05e8da4f4346aab36f179deb68a9dab9b550d6fe4f0c88563935328a699b9cbb2015be57c28beaf60be499114f04a96a2f7fb3bf3b5b31e422954c96790aa1e49c5bc1946df0df2b4be63c0aac1ddcf187714f6e67a076a823feaeba5db4a99e5f494ec939d1b0ecd23752c08c3b788704612127e7f080ef581b4990accd6dca7ce52844bc7bbc8c8752497c171d8e628c53609a920fb5a1bc740cb05e2035de72f636ef0498ed2f3cccb64d5740afbc30015442ca0511160787b2c763072c70035f7f3bbbd3966bcc80d021ce1482e27681b963a28189c2ee9d64d0622a94eac689d3fc1a4137c4d62a4c73fab4b0175a8ff8fa256118affd94aaeee33b155043f53d9e3d4eb82173df0938c6c3e51c118c1acf187c84f12090ad1dd663013e433455290f87ca88959f9f481e4dd05e6a483abe00f7c974e5ff602a7a6eaa71f8ac06c50afac0c2858b554f59bf88002766a619ae9b0864926d07b273238e1ebd456543f77ea800231dbf4479f0b90fc607", 0x1000}}, 0x1006) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES16=r5], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x40800) 0s ago: executing program 6 (id=2506): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="02060000000000000401"], 0x40) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa4}, 0x94) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000000)={0x22, &(0x7f0000000140)}) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$HIDIOCSREPORT(r2, 0x400c4808, 0x0) ioctl$BLKOPENZONE(r2, 0x40101286, &(0x7f0000000280)={0x95a, 0x10}) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x10) ioctl$FE_READ_UNCORRECTED_BLOCKS(r3, 0x80046f49, &(0x7f0000000240)) write$P9_RVERSION(r3, &(0x7f0000000100)={0x13, 0x65, 0xffff, 0x5cc, 0x6, '9P2000'}, 0x13) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0xd24, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1ff}, 0x1c) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f00000000c0)={0x7, 0x4}) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) kernel console output (not intermixed with test programs): proto 3 vid 0x03F0 pid 0x6C17 [ 231.331470][ T40] audit: type=1400 audit(1774478502.989:1707): avc: denied { nlmsg_write } for pid=11701 comm="syz.3.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 231.479116][ T40] audit: type=1400 audit(1774478503.129:1708): avc: denied { read write } for pid=11686 comm="syz.7.1575" name="lp0" dev="devtmpfs" ino=3175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 231.490789][ T40] audit: type=1400 audit(1774478503.129:1709): avc: denied { open } for pid=11686 comm="syz.7.1575" path="/dev/usb/lp0" dev="devtmpfs" ino=3175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 231.498590][T11687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11687 comm=syz.7.1575 [ 231.506902][ T24] usb 12-1: USB disconnect, device number 14 [ 231.514605][ T24] usblp0: removed [ 231.722847][ T40] audit: type=1400 audit(1774478503.354:1710): avc: denied { listen } for pid=11712 comm="syz.8.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 231.800662][T11729] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1590'. [ 231.800684][T11729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1590'. [ 231.800987][T11729] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20000 [ 232.090254][T11738] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 232.112220][T11738] netlink: 236 bytes leftover after parsing attributes in process `syz.7.1593'. [ 232.192189][T11746] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 232.220438][T11746] netlink: 'syz.7.1595': attribute type 29 has an invalid length. [ 232.335587][T11749] netlink: zone id is out of range [ 232.359552][T11751] netlink: 'syz.7.1595': attribute type 3 has an invalid length. [ 232.364598][T11751] netlink: 'syz.7.1595': attribute type 3 has an invalid length. [ 232.371903][T11751] 9p: Bad value for 'wfdno' [ 232.448462][T11754] binder: 11752:11754 ioctl c0306201 2000000004c0 returned -14 [ 232.451432][T11754] binder_alloc: 11752: binder_alloc_buf, no vma [ 232.713340][T11773] batadv_slave_0: entered promiscuous mode [ 232.865381][T11778] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 233.186752][T11789] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 233.236104][T11793] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1612'. [ 233.330015][T11799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=11799 comm=syz.8.1615 [ 233.421140][T11802] input: syz1 as /devices/virtual/input/input15 [ 233.486806][T11807] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1617'. [ 233.695372][T11830] netlink: 'syz.7.1624': attribute type 11 has an invalid length. [ 233.812740][T11843] lo speed is unknown, defaulting to 1000 [ 234.046859][T11853] netlink: 'syz.7.1631': attribute type 2 has an invalid length. [ 234.050186][T11853] netlink: 'syz.7.1631': attribute type 1 has an invalid length. [ 234.056927][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1631'. [ 234.363435][T11876] lo speed is unknown, defaulting to 1000 [ 234.713520][T11889] netlink: 'syz.8.1640': attribute type 21 has an invalid length. [ 234.716301][T11889] IPv6: NLM_F_CREATE should be specified when creating new route [ 234.972516][ T50] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 235.134524][ T50] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 235.138216][ T50] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 235.141480][ T50] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 235.145392][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.150386][T11891] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 235.158605][ T50] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 235.395620][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 235.395637][ T40] audit: type=1804 audit(1774478506.796:1721): pid=11893 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1641" name="/newroot/422/bus/file0" dev="overlay" ino=2292 res=1 errno=0 [ 235.406784][ T40] audit: type=1804 audit(1774478506.805:1722): pid=11891 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1641" name="/newroot/422/bus/file0" dev="overlay" ino=2292 res=1 errno=0 [ 235.412453][T11893] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: 0, delta: -1 [ 235.418667][T11893] ref_ctr decrement failed for inode: 0x8f4 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803992e200 [ 235.422211][T11893] uprobe: syz.3.1641:11893 failed to unregister, leaking uprobe [ 235.474500][ T9] usb 8-1: USB disconnect, device number 27 [ 237.402195][T11867] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 237.534154][T11923] xt_socket: unknown flags 0x48 [ 237.540022][T11923] xt_recent: Unsupported userspace flags (000000b2) [ 237.542290][T11922] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1652'. [ 237.588135][T11922] bond2: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 237.597335][T11922] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1652'. [ 237.601419][T11922] bond2: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 237.655104][ T40] audit: type=1400 audit(1774478508.901:1723): avc: denied { create } for pid=11937 comm="syz.6.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 237.665226][ T40] audit: type=1400 audit(1774478508.910:1724): avc: denied { ioctl } for pid=11937 comm="syz.6.1657" path="socket:[50330]" dev="sockfs" ino=50330 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 237.675874][ T40] audit: type=1400 audit(1774478508.910:1725): avc: denied { bind } for pid=11937 comm="syz.6.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 237.710860][T11940] netlink: 112 bytes leftover after parsing attributes in process `syz.8.1658'. [ 237.742306][T11942] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1659'. [ 237.764921][T11942] bond0: entered promiscuous mode [ 237.768473][T11947] FAULT_INJECTION: forcing a failure. [ 237.768473][T11947] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 237.775831][T11947] CPU: 3 UID: 0 PID: 11947 Comm: syz.8.1660 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.775862][T11947] Tainted: [L]=SOFTLOCKUP [ 237.775869][T11947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.775896][T11947] Call Trace: [ 237.775904][T11947] [ 237.775912][T11947] dump_stack_lvl+0x100/0x190 [ 237.775961][T11947] should_fail_ex.cold+0x5/0xa [ 237.775987][T11947] _copy_from_user+0x2e/0xd0 [ 237.776015][T11947] __sys_bpf+0x243/0x4b90 [ 237.776040][T11947] ? __pfx___sys_bpf+0x10/0x10 [ 237.776058][T11947] ? proc_fail_nth_write+0x9f/0x220 [ 237.776085][T11947] ? find_held_lock+0x2b/0x80 [ 237.776116][T11947] ? find_held_lock+0x2b/0x80 [ 237.776139][T11947] ? ksys_write+0x190/0x250 [ 237.776162][T11947] ? __mutex_unlock_slowpath+0x15c/0x790 [ 237.776199][T11947] ? __fget_files+0x215/0x3d0 [ 237.776234][T11947] ? fput+0x79/0x100 [ 237.776256][T11947] ? ksys_write+0x1ac/0x250 [ 237.776272][T11947] ? __pfx_ksys_write+0x10/0x10 [ 237.776294][T11947] __x64_sys_bpf+0x7b/0xc0 [ 237.776314][T11947] ? lockdep_hardirqs_on+0x78/0x100 [ 237.776338][T11947] do_syscall_64+0x106/0xf80 [ 237.776362][T11947] ? clear_bhb_loop+0x40/0x90 [ 237.776384][T11947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.776403][T11947] RIP: 0033:0x7f28e199c799 [ 237.776419][T11947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.776435][T11947] RSP: 002b:00007f28e2929028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 237.776452][T11947] RAX: ffffffffffffffda RBX: 00007f28e1c15fa0 RCX: 00007f28e199c799 [ 237.776464][T11947] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 237.776474][T11947] RBP: 00007f28e2929090 R08: 0000000000000000 R09: 0000000000000000 [ 237.776485][T11947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.776496][T11947] R13: 00007f28e1c16038 R14: 00007f28e1c15fa0 R15: 00007ffcc6b0f768 [ 237.776521][T11947] [ 237.777399][T11942] batadv_slave_0: entered promiscuous mode [ 237.858157][T11950] Bluetooth: MGMT ver 1.23 [ 237.917638][T11959] netlink: 'syz.8.1665': attribute type 4 has an invalid length. [ 237.917638][T11958] netlink: 25 bytes leftover after parsing attributes in process `syz.8.1665'. [ 237.951157][T11961] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 237.962369][T11961] loop6: detected capacity change from 0 to 8 [ 238.139968][T11961] Dev loop6: unable to read RDB block 8 [ 238.143097][T11961] loop6: unable to read partition table [ 238.145684][T11961] loop6: partition table beyond EOD, truncated [ 238.161547][T11961] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 238.248076][T11983] FAULT_INJECTION: forcing a failure. [ 238.248076][T11983] name failslab, interval 1, probability 0, space 0, times 1 [ 238.254905][T11983] CPU: 3 UID: 0 PID: 11983 Comm: syz.8.1673 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.254935][T11983] Tainted: [L]=SOFTLOCKUP [ 238.254941][T11983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.254951][T11983] Call Trace: [ 238.254971][T11983] [ 238.254978][T11983] dump_stack_lvl+0x100/0x190 [ 238.255020][T11983] should_fail_ex.cold+0x5/0xa [ 238.255045][T11983] ? bpf_test_init.isra.0+0x88/0x100 [ 238.255076][T11983] should_failslab+0xc2/0x120 [ 238.255095][T11983] __kmalloc_noprof+0xe0/0x850 [ 238.255125][T11983] bpf_test_init.isra.0+0x88/0x100 [ 238.255151][T11983] bpf_prog_test_run_skb+0x489/0x3230 [ 238.255182][T11983] ? find_held_lock+0x2b/0x80 [ 238.255204][T11983] ? __fget_files+0x215/0x3d0 [ 238.255230][T11983] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 238.255258][T11983] ? fput+0x79/0x100 [ 238.255280][T11983] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 238.255305][T11983] __sys_bpf+0x1725/0x4b90 [ 238.255328][T11983] ? __pfx___sys_bpf+0x10/0x10 [ 238.255345][T11983] ? proc_fail_nth_write+0x9f/0x220 [ 238.255370][T11983] ? find_held_lock+0x2b/0x80 [ 238.255398][T11983] ? find_held_lock+0x2b/0x80 [ 238.255420][T11983] ? ksys_write+0x190/0x250 [ 238.255442][T11983] ? __mutex_unlock_slowpath+0x15c/0x790 [ 238.255469][T11983] ? __fget_files+0x215/0x3d0 [ 238.255499][T11983] ? fput+0x79/0x100 [ 238.255520][T11983] ? ksys_write+0x1ac/0x250 [ 238.255541][T11983] ? __pfx_ksys_write+0x10/0x10 [ 238.255562][T11983] __x64_sys_bpf+0x7b/0xc0 [ 238.255582][T11983] ? lockdep_hardirqs_on+0x78/0x100 [ 238.255606][T11983] do_syscall_64+0x106/0xf80 [ 238.255636][T11983] ? clear_bhb_loop+0x40/0x90 [ 238.255657][T11983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.255675][T11983] RIP: 0033:0x7f28e199c799 [ 238.255691][T11983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.255708][T11983] RSP: 002b:00007f28e2929028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 238.255725][T11983] RAX: ffffffffffffffda RBX: 00007f28e1c15fa0 RCX: 00007f28e199c799 [ 238.255737][T11983] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 238.255746][T11983] RBP: 00007f28e2929090 R08: 0000000000000000 R09: 0000000000000000 [ 238.255756][T11983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.255766][T11983] R13: 00007f28e1c16038 R14: 00007f28e1c15fa0 R15: 00007ffcc6b0f768 [ 238.255786][T11983] [ 238.292673][T11985] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1674'. [ 238.336927][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1676'. [ 238.352635][T11985] netlink: 'syz.7.1674': attribute type 6 has an invalid length. [ 238.365295][T11985] netlink: 'syz.7.1674': attribute type 5 has an invalid length. [ 238.389723][T11985] netlink: 'syz.7.1674': attribute type 4 has an invalid length. [ 238.408617][T11995] rdma_rxe: rxe_newlink: failed to add lo [ 238.446380][T11997] ip6t_REJECT: ECHOREPLY is not supported [ 238.494528][T12008] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 238.545051][T12016] FAULT_INJECTION: forcing a failure. [ 238.545051][T12016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.550849][T12016] CPU: 0 UID: 0 PID: 12016 Comm: syz.8.1684 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.550878][T12016] Tainted: [L]=SOFTLOCKUP [ 238.550885][T12016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.550896][T12016] Call Trace: [ 238.550901][T12016] [ 238.550908][T12016] dump_stack_lvl+0x100/0x190 [ 238.550943][T12016] should_fail_ex.cold+0x5/0xa [ 238.550969][T12016] _copy_from_user+0x2e/0xd0 [ 238.550999][T12016] bpf_test_init.isra.0+0xaf/0x100 [ 238.551026][T12016] bpf_prog_test_run_skb+0x489/0x3230 [ 238.551057][T12016] ? find_held_lock+0x2b/0x80 [ 238.551080][T12016] ? __fget_files+0x215/0x3d0 [ 238.551108][T12016] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 238.551135][T12016] ? fput+0x79/0x100 [ 238.551159][T12016] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 238.551184][T12016] __sys_bpf+0x1725/0x4b90 [ 238.551209][T12016] ? __pfx___sys_bpf+0x10/0x10 [ 238.551226][T12016] ? proc_fail_nth_write+0x9f/0x220 [ 238.551254][T12016] ? find_held_lock+0x2b/0x80 [ 238.551283][T12016] ? find_held_lock+0x2b/0x80 [ 238.551304][T12016] ? ksys_write+0x190/0x250 [ 238.551326][T12016] ? __mutex_unlock_slowpath+0x15c/0x790 [ 238.551353][T12016] ? __fget_files+0x215/0x3d0 [ 238.551386][T12016] ? fput+0x79/0x100 [ 238.551407][T12016] ? ksys_write+0x1ac/0x250 [ 238.551422][T12016] ? __pfx_ksys_write+0x10/0x10 [ 238.551444][T12016] __x64_sys_bpf+0x7b/0xc0 [ 238.551464][T12016] ? lockdep_hardirqs_on+0x78/0x100 [ 238.551489][T12016] do_syscall_64+0x106/0xf80 [ 238.551513][T12016] ? clear_bhb_loop+0x40/0x90 [ 238.551534][T12016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.551552][T12016] RIP: 0033:0x7f28e199c799 [ 238.551567][T12016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.551585][T12016] RSP: 002b:00007f28e2929028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 238.551602][T12016] RAX: ffffffffffffffda RBX: 00007f28e1c15fa0 RCX: 00007f28e199c799 [ 238.551614][T12016] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 238.551624][T12016] RBP: 00007f28e2929090 R08: 0000000000000000 R09: 0000000000000000 [ 238.551634][T12016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.551643][T12016] R13: 00007f28e1c16038 R14: 00007f28e1c15fa0 R15: 00007ffcc6b0f768 [ 238.551665][T12016] [ 238.660174][T12020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1685'. [ 238.736462][T12025] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1687'. [ 238.742891][T12025] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1687'. [ 239.459184][T12036] geneve1: entered allmulticast mode [ 239.552015][T12050] FAULT_INJECTION: forcing a failure. [ 239.552015][T12050] name failslab, interval 1, probability 0, space 0, times 0 [ 239.556074][T12050] CPU: 2 UID: 0 PID: 12050 Comm: syz.6.1694 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.556096][T12050] Tainted: [L]=SOFTLOCKUP [ 239.556100][T12050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.556107][T12050] Call Trace: [ 239.556112][T12050] [ 239.556117][T12050] dump_stack_lvl+0x100/0x190 [ 239.556141][T12050] should_fail_ex.cold+0x5/0xa [ 239.556158][T12050] ? sk_prot_alloc+0x10b/0x2a0 [ 239.556175][T12050] should_failslab+0xc2/0x120 [ 239.556188][T12050] __kmalloc_noprof+0xe0/0x850 [ 239.556208][T12050] sk_prot_alloc+0x10b/0x2a0 [ 239.556228][T12050] sk_alloc+0x36/0xe80 [ 239.556242][T12050] bpf_prog_test_run_skb+0x4cd/0x3230 [ 239.556264][T12050] ? find_held_lock+0x2b/0x80 [ 239.556279][T12050] ? __fget_files+0x215/0x3d0 [ 239.556296][T12050] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 239.556314][T12050] ? fput+0x79/0x100 [ 239.556329][T12050] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 239.556346][T12050] __sys_bpf+0x1725/0x4b90 [ 239.556361][T12050] ? __pfx___sys_bpf+0x10/0x10 [ 239.556373][T12050] ? proc_fail_nth_write+0x9f/0x220 [ 239.556390][T12050] ? find_held_lock+0x2b/0x80 [ 239.556408][T12050] ? find_held_lock+0x2b/0x80 [ 239.556423][T12050] ? ksys_write+0x190/0x250 [ 239.556436][T12050] ? __mutex_unlock_slowpath+0x15c/0x790 [ 239.556454][T12050] ? __fget_files+0x215/0x3d0 [ 239.556473][T12050] ? fput+0x79/0x100 [ 239.556487][T12050] ? ksys_write+0x1ac/0x250 [ 239.556496][T12050] ? __pfx_ksys_write+0x10/0x10 [ 239.556509][T12050] __x64_sys_bpf+0x7b/0xc0 [ 239.556522][T12050] ? lockdep_hardirqs_on+0x78/0x100 [ 239.556538][T12050] do_syscall_64+0x106/0xf80 [ 239.556554][T12050] ? clear_bhb_loop+0x40/0x90 [ 239.556568][T12050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.556580][T12050] RIP: 0033:0x7ffb9779c799 [ 239.556591][T12050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.556602][T12050] RSP: 002b:00007ffb98681028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 239.556613][T12050] RAX: ffffffffffffffda RBX: 00007ffb97a15fa0 RCX: 00007ffb9779c799 [ 239.556620][T12050] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 239.556627][T12050] RBP: 00007ffb98681090 R08: 0000000000000000 R09: 0000000000000000 [ 239.556634][T12050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.556641][T12050] R13: 00007ffb97a16038 R14: 00007ffb97a15fa0 R15: 00007ffff1c42a08 [ 239.556655][T12050] [ 239.754533][T12056] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 239.804030][T12063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12063 comm=syz.6.1698 [ 239.811932][T12063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12063 comm=syz.6.1698 [ 239.899917][T12071] netlink: 'syz.3.1701': attribute type 1 has an invalid length. [ 239.920157][T12071] 8021q: adding VLAN 0 to HW filter on device bond9 [ 239.934583][T12071] vlan0: entered promiscuous mode [ 239.936840][T12071] bond9: entered promiscuous mode [ 239.939157][T12071] vlan0: entered allmulticast mode [ 239.941330][T12071] bond9: entered allmulticast mode [ 239.959338][T12071] bond9: (slave bridge7): making interface the new active one [ 239.962439][T12071] bridge7: entered promiscuous mode [ 239.965001][ T40] audit: type=1400 audit(1774478511.061:1726): avc: denied { write } for pid=12076 comm="syz.8.1702" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 239.974872][T12071] bridge7: entered allmulticast mode [ 239.978276][T12071] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 240.079848][T12086] FAULT_INJECTION: forcing a failure. [ 240.079848][T12086] name failslab, interval 1, probability 0, space 0, times 0 [ 240.084561][T12086] CPU: 1 UID: 0 PID: 12086 Comm: syz.3.1704 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.084581][T12086] Tainted: [L]=SOFTLOCKUP [ 240.084585][T12086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.084593][T12086] Call Trace: [ 240.084598][T12086] [ 240.084602][T12086] dump_stack_lvl+0x100/0x190 [ 240.084626][T12086] should_fail_ex.cold+0x5/0xa [ 240.084642][T12086] ? lsm_blob_alloc+0x68/0x90 [ 240.084654][T12086] should_failslab+0xc2/0x120 [ 240.084666][T12086] __kmalloc_noprof+0xe0/0x850 [ 240.084683][T12086] ? trace_kmalloc+0x101/0x130 [ 240.084697][T12086] lsm_blob_alloc+0x68/0x90 [ 240.084709][T12086] security_sk_alloc+0x2d/0x290 [ 240.084724][T12086] sk_prot_alloc+0x12a/0x2a0 [ 240.084750][T12086] sk_alloc+0x36/0xe80 [ 240.084765][T12086] bpf_prog_test_run_skb+0x4cd/0x3230 [ 240.084786][T12086] ? find_held_lock+0x2b/0x80 [ 240.084802][T12086] ? __fget_files+0x215/0x3d0 [ 240.084818][T12086] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 240.084837][T12086] ? fput+0x79/0x100 [ 240.084852][T12086] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 240.084868][T12086] __sys_bpf+0x1725/0x4b90 [ 240.084883][T12086] ? __pfx___sys_bpf+0x10/0x10 [ 240.084895][T12086] ? proc_fail_nth_write+0x9f/0x220 [ 240.084912][T12086] ? find_held_lock+0x2b/0x80 [ 240.084930][T12086] ? find_held_lock+0x2b/0x80 [ 240.084944][T12086] ? ksys_write+0x190/0x250 [ 240.084957][T12086] ? __mutex_unlock_slowpath+0x15c/0x790 [ 240.084975][T12086] ? __fget_files+0x215/0x3d0 [ 240.084995][T12086] ? fput+0x79/0x100 [ 240.085008][T12086] ? ksys_write+0x1ac/0x250 [ 240.085018][T12086] ? __pfx_ksys_write+0x10/0x10 [ 240.085031][T12086] __x64_sys_bpf+0x7b/0xc0 [ 240.085044][T12086] ? lockdep_hardirqs_on+0x78/0x100 [ 240.085060][T12086] do_syscall_64+0x106/0xf80 [ 240.085076][T12086] ? clear_bhb_loop+0x40/0x90 [ 240.085089][T12086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.085101][T12086] RIP: 0033:0x7f47ced9c799 [ 240.085112][T12086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.085125][T12086] RSP: 002b:00007f47cfcc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.085141][T12086] RAX: ffffffffffffffda RBX: 00007f47cf015fa0 RCX: 00007f47ced9c799 [ 240.085151][T12086] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 240.085161][T12086] RBP: 00007f47cfcc4090 R08: 0000000000000000 R09: 0000000000000000 [ 240.085171][T12086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.085183][T12086] R13: 00007f47cf016038 R14: 00007f47cf015fa0 R15: 00007ffcb8802648 [ 240.085206][T12086] [ 240.205924][T12088] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 240.216555][T12088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.500961][T12097] bond8: (slave dummy0): Releasing active interface [ 240.507840][T12097] batman_adv: batadv0: Adding interface: dummy0 [ 240.510061][T12097] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 240.562047][T12099] 8021q: adding VLAN 0 to HW filter on device bond10 [ 241.570314][T12131] netlink: 'syz.3.1718': attribute type 89 has an invalid length. [ 241.574481][T12131] overlay: ./file0 is not a directory [ 241.728118][T12056] syz.7.1696 (12056): /proc/12054/oom_adj is deprecated, please use /proc/12054/oom_score_adj instead. [ 241.732167][T12142] netlink: 'syz.6.1720': attribute type 1 has an invalid length. [ 241.810170][T12145] FAULT_INJECTION: forcing a failure. [ 241.810170][T12145] name failslab, interval 1, probability 0, space 0, times 0 [ 241.815265][T12145] CPU: 3 UID: 0 PID: 12145 Comm: syz.3.1722 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.815283][T12145] Tainted: [L]=SOFTLOCKUP [ 241.815288][T12145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.815295][T12145] Call Trace: [ 241.815299][T12145] [ 241.815303][T12145] dump_stack_lvl+0x100/0x190 [ 241.815326][T12145] should_fail_ex.cold+0x5/0xa [ 241.815341][T12145] should_failslab+0xc2/0x120 [ 241.815353][T12145] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 241.815369][T12145] ? skb_clone+0x190/0x400 [ 241.815388][T12145] skb_clone+0x190/0x400 [ 241.815403][T12145] bpf_clone_redirect+0x166/0x500 [ 241.815419][T12145] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 241.815438][T12145] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 241.815449][T12145] ? unwind_get_return_address+0x59/0xa0 [ 241.815466][T12145] ? __lock_acquire+0x4a5/0x2630 [ 241.815478][T12145] ? __lock_acquire+0x4a5/0x2630 [ 241.815500][T12145] ? find_held_lock+0x2b/0x80 [ 241.815515][T12145] ? bpf_test_timer_enter+0xf7/0x2b0 [ 241.815530][T12145] ? ktime_get+0x200/0x300 [ 241.815545][T12145] ? lockdep_hardirqs_on+0x78/0x100 [ 241.815561][T12145] ? ktime_get+0x1a7/0x300 [ 241.815577][T12145] ? __pfx___cant_migrate+0x10/0x10 [ 241.815603][T12145] ? bpf_test_timer_enter+0xf7/0x2b0 [ 241.815624][T12145] bpf_test_run+0x39c/0xa40 [ 241.815645][T12145] ? bpf_test_run+0x1c6/0xa40 [ 241.815671][T12145] ? __pfx_bpf_test_run+0x10/0x10 [ 241.815711][T12145] ? eth_type_trans+0x2e3/0x720 [ 241.815738][T12145] bpf_prog_test_run_skb+0x107b/0x3230 [ 241.815777][T12145] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 241.815805][T12145] ? fput+0x79/0x100 [ 241.815827][T12145] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 241.815845][T12145] __sys_bpf+0x1725/0x4b90 [ 241.815860][T12145] ? __pfx___sys_bpf+0x10/0x10 [ 241.815871][T12145] ? proc_fail_nth_write+0x9f/0x220 [ 241.815886][T12145] ? find_held_lock+0x2b/0x80 [ 241.815903][T12145] ? find_held_lock+0x2b/0x80 [ 241.815917][T12145] ? ksys_write+0x190/0x250 [ 241.815929][T12145] ? __mutex_unlock_slowpath+0x15c/0x790 [ 241.815946][T12145] ? __fget_files+0x215/0x3d0 [ 241.815964][T12145] ? fput+0x79/0x100 [ 241.815976][T12145] ? ksys_write+0x1ac/0x250 [ 241.815985][T12145] ? __pfx_ksys_write+0x10/0x10 [ 241.815997][T12145] __x64_sys_bpf+0x7b/0xc0 [ 241.816010][T12145] ? lockdep_hardirqs_on+0x78/0x100 [ 241.816031][T12145] do_syscall_64+0x106/0xf80 [ 241.816054][T12145] ? clear_bhb_loop+0x40/0x90 [ 241.816075][T12145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.816094][T12145] RIP: 0033:0x7f47ced9c799 [ 241.816111][T12145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.816126][T12145] RSP: 002b:00007f47cfcc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 241.816142][T12145] RAX: ffffffffffffffda RBX: 00007f47cf015fa0 RCX: 00007f47ced9c799 [ 241.816149][T12145] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 241.816156][T12145] RBP: 00007f47cfcc4090 R08: 0000000000000000 R09: 0000000000000000 [ 241.816162][T12145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.816168][T12145] R13: 00007f47cf016038 R14: 00007f47cf015fa0 R15: 00007ffcb8802648 [ 241.816181][T12145] [ 241.817995][T12146] fuse: Unknown parameter '0x0000000000000003' [ 242.165123][T12167] tipc: Started in network mode [ 242.171873][T12167] tipc: Node identity 080211000001, cluster identity 4711 [ 242.175417][T12167] tipc: Enabled bearer , priority 0 [ 242.179446][T12167] syzkaller0: mtu less than device minimum [ 242.388329][T12179] netlink: 'syz.3.1734': attribute type 1 has an invalid length. [ 242.405380][T12169] use of bytesused == 0 is deprecated and will be removed in the future, [ 242.409395][T12169] use the actual size instead. [ 242.442155][T12179] 8021q: adding VLAN 0 to HW filter on device bond11 [ 242.458367][T12181] bond11: (slave gretap2): making interface the new active one [ 242.463250][T12181] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 242.469969][ T40] audit: type=1326 audit(1774478513.409:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12168 comm="syz.6.1731" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb9779c799 code=0x0 [ 242.508127][T12179] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 242.516129][T12179] overlayfs: failed to set xattr on upper [ 242.518811][T12179] overlayfs: ...falling back to redirect_dir=nofollow. [ 242.522418][T12179] overlayfs: ...falling back to index=off. [ 242.552443][T12179] overlayfs: ...falling back to uuid=null. [ 242.554659][T12179] overlayfs: maximum fs stacking depth exceeded [ 242.554971][T12181] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12181 comm=syz.3.1734 [ 242.741618][T12202] FAULT_INJECTION: forcing a failure. [ 242.741618][T12202] name failslab, interval 1, probability 0, space 0, times 0 [ 242.745765][T12202] CPU: 3 UID: 0 PID: 12202 Comm: syz.8.1742 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.745783][T12202] Tainted: [L]=SOFTLOCKUP [ 242.745787][T12202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.745794][T12202] Call Trace: [ 242.745798][T12202] [ 242.745802][T12202] dump_stack_lvl+0x100/0x190 [ 242.745825][T12202] should_fail_ex.cold+0x5/0xa [ 242.745840][T12202] should_failslab+0xc2/0x120 [ 242.745853][T12202] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 242.745869][T12202] ? dst_alloc+0x99/0x1a0 [ 242.745884][T12202] dst_alloc+0x99/0x1a0 [ 242.745898][T12202] rt_dst_alloc+0x35/0x3a0 [ 242.745916][T12202] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 242.745933][T12202] ip_route_output_key_hash+0x118/0x2b0 [ 242.745946][T12202] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 242.745958][T12202] ? __vlan_get_protocol_offset+0x256/0x350 [ 242.745978][T12202] ip_route_output_flow+0x27/0x150 [ 242.745993][T12202] ip_tunnel_xmit+0xf27/0x3200 [ 242.746014][T12202] ? stack_trace_consume_entry+0x50/0x170 [ 242.746032][T12202] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 242.746049][T12202] ? arch_stack_walk+0xa6/0xf0 [ 242.746067][T12202] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 242.746085][T12202] __gre_xmit+0x820/0xb20 [ 242.746103][T12202] ? __pfx___gre_xmit+0x10/0x10 [ 242.746120][T12202] ? skb_network_protocol+0xac/0x3d0 [ 242.746133][T12202] ipgre_xmit+0x532/0xb30 [ 242.746150][T12202] dev_hard_start_xmit+0x121/0x7d0 [ 242.746164][T12202] __dev_queue_xmit+0x32c1/0x4800 [ 242.746181][T12202] ? __pfx___dev_queue_xmit+0x10/0x10 [ 242.746192][T12202] ? trace_kmalloc+0x101/0x130 [ 242.746203][T12202] ? __kasan_kmalloc+0x50/0xb0 [ 242.746220][T12202] ? __kmalloc_node_track_caller_noprof+0x321/0x850 [ 242.746263][T12202] ? pskb_expand_head+0x246/0xfe0 [ 242.746279][T12202] ? skb_release_data+0x7a0/0x9d0 [ 242.746293][T12202] ? kmalloc_reserve+0xf9/0x350 [ 242.746304][T12202] ? skb_headers_offset_update+0x129/0x260 [ 242.746325][T12202] ? __pfx_pskb_expand_head+0x10/0x10 [ 242.746339][T12202] ? __asan_memcpy+0x3c/0x60 [ 242.746355][T12202] __bpf_redirect+0x836/0xfa0 [ 242.746373][T12202] bpf_clone_redirect+0x37b/0x500 [ 242.746391][T12202] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 242.746402][T12202] ? unwind_get_return_address+0x59/0xa0 [ 242.746418][T12202] ? __lock_acquire+0x4a5/0x2630 [ 242.746431][T12202] ? __lock_acquire+0x4a5/0x2630 [ 242.746445][T12202] ? find_held_lock+0x2b/0x80 [ 242.746459][T12202] ? bpf_test_timer_enter+0xf7/0x2b0 [ 242.746480][T12202] ? ktime_get+0x200/0x300 [ 242.746495][T12202] ? lockdep_hardirqs_on+0x78/0x100 [ 242.746511][T12202] ? ktime_get+0x1a7/0x300 [ 242.746526][T12202] ? __pfx___cant_migrate+0x10/0x10 [ 242.746544][T12202] ? bpf_test_timer_enter+0xf7/0x2b0 [ 242.746558][T12202] bpf_test_run+0x39c/0xa40 [ 242.746573][T12202] ? bpf_test_run+0x1c6/0xa40 [ 242.746589][T12202] ? __pfx_bpf_test_run+0x10/0x10 [ 242.746613][T12202] ? eth_type_trans+0x2e3/0x720 [ 242.746632][T12202] bpf_prog_test_run_skb+0x107b/0x3230 [ 242.746656][T12202] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 242.746673][T12202] ? fput+0x79/0x100 [ 242.746687][T12202] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 242.746703][T12202] __sys_bpf+0x1725/0x4b90 [ 242.746717][T12202] ? __pfx___sys_bpf+0x10/0x10 [ 242.746728][T12202] ? proc_fail_nth_write+0x9f/0x220 [ 242.746745][T12202] ? find_held_lock+0x2b/0x80 [ 242.746762][T12202] ? find_held_lock+0x2b/0x80 [ 242.746776][T12202] ? ksys_write+0x190/0x250 [ 242.746788][T12202] ? __mutex_unlock_slowpath+0x15c/0x790 [ 242.746805][T12202] ? __fget_files+0x215/0x3d0 [ 242.746823][T12202] ? fput+0x79/0x100 [ 242.746835][T12202] ? ksys_write+0x1ac/0x250 [ 242.746845][T12202] ? __pfx_ksys_write+0x10/0x10 [ 242.746857][T12202] __x64_sys_bpf+0x7b/0xc0 [ 242.746869][T12202] ? lockdep_hardirqs_on+0x78/0x100 [ 242.746884][T12202] do_syscall_64+0x106/0xf80 [ 242.746899][T12202] ? clear_bhb_loop+0x40/0x90 [ 242.746912][T12202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.746924][T12202] RIP: 0033:0x7f28e199c799 [ 242.746933][T12202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.746943][T12202] RSP: 002b:00007f28e2929028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 242.746953][T12202] RAX: ffffffffffffffda RBX: 00007f28e1c15fa0 RCX: 00007f28e199c799 [ 242.746960][T12202] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 242.746966][T12202] RBP: 00007f28e2929090 R08: 0000000000000000 R09: 0000000000000000 [ 242.746972][T12202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.746978][T12202] R13: 00007f28e1c16038 R14: 00007f28e1c15fa0 R15: 00007ffcc6b0f768 [ 242.746992][T12202] [ 242.883732][ T6418] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 243.133881][ T6418] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 243.139147][ T6418] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 243.146948][ T6418] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 243.155376][ T6418] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.164720][T12188] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 243.171842][ T6418] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 243.250931][ T50] tipc: Node number set to 134418688 [ 243.424680][T12231] i2c i2c-1: dvb_frontend_start: failed to start kthread (-4) [ 243.430985][ T6021] usb 12-1: USB disconnect, device number 15 [ 243.529415][T12226] __nla_validate_parse: 72 callbacks suppressed [ 243.529429][T12226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1749'. [ 243.608672][T12239] openvswitch: netlink: IP tunnel dst address not specified [ 243.639606][T12239] netlink: 'syz.6.1752': attribute type 7 has an invalid length. [ 243.781374][T12252] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 243.786385][T12252] overlayfs: missing 'lowerdir' [ 243.861567][ T40] audit: type=1400 audit(1774478514.710:1728): avc: denied { setopt } for pid=12256 comm="syz.3.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 244.030018][ T40] audit: type=1400 audit(1774478514.869:1729): avc: denied { ioctl } for pid=12269 comm="syz.3.1762" path="socket:[51613]" dev="sockfs" ino=51613 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 244.052822][T12270] wg1 speed is unknown, defaulting to 1000 [ 244.056464][T12270] wg1 speed is unknown, defaulting to 1000 [ 244.058906][T12270] wg1 speed is unknown, defaulting to 1000 [ 244.294285][ T24] wg1 speed is unknown, defaulting to 1000 [ 244.297426][T12270] infiniband syz2: set down [ 244.299232][T12270] infiniband syz2: added wg1 [ 244.347520][T12270] RDS/IB: syz2: added [ 244.350425][T12270] smc: adding ib device syz2 with port count 1 [ 244.353126][T12270] smc: ib device syz2 port 1 has no pnetid [ 244.359626][ T24] wg1 speed is unknown, defaulting to 1000 [ 244.369970][T12270] wg1 speed is unknown, defaulting to 1000 [ 244.498413][T12283] kvm: user requested TSC rate below hardware speed [ 244.518067][T12270] wg1 speed is unknown, defaulting to 1000 [ 244.617751][T12270] wg1 speed is unknown, defaulting to 1000 [ 244.740413][T12270] wg1 speed is unknown, defaulting to 1000 [ 245.202581][T12315] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1779'. [ 245.206150][T12315] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1779'. [ 245.209745][T12315] netlink: 'syz.3.1779': attribute type 6 has an invalid length. [ 245.212895][T12315] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1779'. [ 245.305076][ T40] audit: type=1400 audit(1774478516.066:1730): avc: denied { read } for pid=12320 comm="syz.7.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 245.476018][T12330] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 245.492110][T12330] SELinux: failed to load policy [ 245.931822][ T40] audit: type=1400 audit(1774478516.655:1731): avc: denied { read } for pid=12347 comm="syz.8.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 246.072325][T12361] ipt_ECN: cannot use operation on non-tcp rule [ 246.582265][T12384] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 246.607813][T12384] romfs: unable to set blocksize [ 246.607813][T12384] [ 246.656921][T12401] xt_connbytes: Forcing CT accounting to be enabled [ 246.660874][T12401] set match dimension is over the limit! [ 246.730236][ T40] audit: type=1400 audit(1774478517.394:1732): avc: denied { read } for pid=12398 comm="syz.7.1802" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 246.818141][T12408] hpfs: hpfs_map_sector(): read error [ 246.897489][T12412] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 246.952524][T12417] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1808'. [ 246.961547][T12417] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1808'. [ 246.984436][ T40] audit: type=1400 audit(1774478517.628:1733): avc: denied { setopt } for pid=12419 comm="syz.7.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 247.002551][ T40] audit: type=1400 audit(1774478517.637:1734): avc: denied { write } for pid=12419 comm="syz.7.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 247.021092][ T40] audit: type=1400 audit(1774478517.656:1735): avc: denied { write } for pid=12419 comm="syz.7.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 247.177807][T12433] Bluetooth: hci0: invalid len left 7, exp >= 49 [ 247.187236][ T40] audit: type=1400 audit(1774478517.824:1736): avc: denied { connect } for pid=12434 comm="syz.8.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 247.211475][T12435] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input16 [ 247.372056][T12441] FAULT_INJECTION: forcing a failure. [ 247.372056][T12441] name failslab, interval 1, probability 0, space 0, times 0 [ 247.378267][T12441] CPU: 1 UID: 0 PID: 12441 Comm: syz.6.1817 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.378297][T12441] Tainted: [L]=SOFTLOCKUP [ 247.378303][T12441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.378313][T12441] Call Trace: [ 247.378319][T12441] [ 247.378326][T12441] dump_stack_lvl+0x100/0x190 [ 247.378370][T12441] should_fail_ex.cold+0x5/0xa [ 247.378401][T12441] should_failslab+0xc2/0x120 [ 247.378419][T12441] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 247.378444][T12441] ? skb_clone+0x190/0x400 [ 247.378479][T12441] skb_clone+0x190/0x400 [ 247.378502][T12441] bpf_clone_redirect+0x166/0x500 [ 247.378532][T12441] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 247.378550][T12441] ? unwind_get_return_address+0x59/0xa0 [ 247.378577][T12441] ? __lock_acquire+0x4a5/0x2630 [ 247.378597][T12441] ? __lock_acquire+0x4a5/0x2630 [ 247.378620][T12441] ? find_held_lock+0x2b/0x80 [ 247.378641][T12441] ? bpf_test_timer_enter+0xf7/0x2b0 [ 247.378666][T12441] ? ktime_get+0x200/0x300 [ 247.378690][T12441] ? lockdep_hardirqs_on+0x78/0x100 [ 247.378717][T12441] ? __pfx___cant_migrate+0x10/0x10 [ 247.378745][T12441] ? bpf_test_timer_continue+0x17b/0x5d0 [ 247.378764][T12441] ? lockdep_hardirqs_on+0x78/0x100 [ 247.378789][T12441] bpf_test_run+0x39c/0xa40 [ 247.378811][T12441] ? bpf_test_run+0x1c6/0xa40 [ 247.378837][T12441] ? __pfx_bpf_test_run+0x10/0x10 [ 247.378877][T12441] ? eth_type_trans+0x2e3/0x720 [ 247.378906][T12441] bpf_prog_test_run_skb+0x107b/0x3230 [ 247.378946][T12441] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 247.378974][T12441] ? fput+0x79/0x100 [ 247.378997][T12441] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 247.379020][T12441] __sys_bpf+0x1725/0x4b90 [ 247.379044][T12441] ? __pfx___sys_bpf+0x10/0x10 [ 247.379060][T12441] ? proc_fail_nth_write+0x9f/0x220 [ 247.379085][T12441] ? find_held_lock+0x2b/0x80 [ 247.379112][T12441] ? find_held_lock+0x2b/0x80 [ 247.379133][T12441] ? ksys_write+0x190/0x250 [ 247.379155][T12441] ? __mutex_unlock_slowpath+0x15c/0x790 [ 247.379180][T12441] ? __fget_files+0x215/0x3d0 [ 247.379211][T12441] ? fput+0x79/0x100 [ 247.379230][T12441] ? ksys_write+0x1ac/0x250 [ 247.379246][T12441] ? __pfx_ksys_write+0x10/0x10 [ 247.379265][T12441] __x64_sys_bpf+0x7b/0xc0 [ 247.379285][T12441] ? lockdep_hardirqs_on+0x78/0x100 [ 247.379307][T12441] do_syscall_64+0x106/0xf80 [ 247.379330][T12441] ? clear_bhb_loop+0x40/0x90 [ 247.379351][T12441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.379369][T12441] RIP: 0033:0x7ffb9779c799 [ 247.379385][T12441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.379408][T12441] RSP: 002b:00007ffb98681028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.379426][T12441] RAX: ffffffffffffffda RBX: 00007ffb97a15fa0 RCX: 00007ffb9779c799 [ 247.379436][T12441] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 247.379445][T12441] RBP: 00007ffb98681090 R08: 0000000000000000 R09: 0000000000000000 [ 247.379456][T12441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 247.379466][T12441] R13: 00007ffb97a16038 R14: 00007ffb97a15fa0 R15: 00007ffff1c42a08 [ 247.379490][T12441] [ 247.466510][T10626] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 247.587520][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 247.596227][T12447] netlink: 'syz.6.1818': attribute type 1 has an invalid length. [ 247.598522][T12449] cgroup: name respecified [ 247.620201][T12447] 8021q: adding VLAN 0 to HW filter on device bond2 [ 247.655325][T12447] 8021q: adding VLAN 0 to HW filter on device bond2 [ 247.658225][T12447] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 247.665858][T12447] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 247.709781][T12456] ip6erspan0: entered promiscuous mode [ 247.713588][T12456] bond2: (slave ip6erspan0): making interface the new active one [ 247.717218][T12456] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 247.724866][T12453] vlan2: entered promiscuous mode [ 247.727584][T12453] vlan2: entered allmulticast mode [ 247.729149][T12453] hsr_slave_1: entered allmulticast mode [ 247.814446][T12463] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1823'. [ 247.859062][T10626] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.865987][T10626] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.869734][T10626] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.873525][T10626] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.881061][T12465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.884915][T12465] batadv_slave_0: entered promiscuous mode [ 247.894997][T12460] input: syz1 as /devices/virtual/input/input17 [ 247.926484][T10626] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.934056][T10626] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.938478][T10626] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.942232][T10626] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.959238][T12470] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 248.064755][T12472] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 248.071517][T12472] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1827'. [ 248.086183][T12472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.097726][T12472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.106665][T12472] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 248.114885][T12472] bond0 (unregistering): (slave team0): Releasing backup interface [ 248.122668][T12472] bond0 (unregistering): Released all slaves [ 248.215213][T12479] xt_hashlimit: size too large, truncated to 1048576 [ 248.276960][T12486] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1829'. [ 248.387875][T12503] overlayfs: failed to clone lowerpath [ 248.396205][T12503] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1831'. [ 248.541999][T12525] FAULT_INJECTION: forcing a failure. [ 248.541999][T12525] name failslab, interval 1, probability 0, space 0, times 0 [ 248.547259][T12525] CPU: 3 UID: 0 PID: 12525 Comm: syz.8.1836 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.547286][T12525] Tainted: [L]=SOFTLOCKUP [ 248.547292][T12525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.547302][T12525] Call Trace: [ 248.547309][T12525] [ 248.547316][T12525] dump_stack_lvl+0x100/0x190 [ 248.547350][T12525] should_fail_ex.cold+0x5/0xa [ 248.547374][T12525] should_failslab+0xc2/0x120 [ 248.547392][T12525] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 248.547417][T12525] ? skb_clone+0x190/0x400 [ 248.547451][T12525] skb_clone+0x190/0x400 [ 248.547473][T12525] bpf_clone_redirect+0x166/0x500 [ 248.547504][T12525] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 248.547522][T12525] ? unwind_get_return_address+0x59/0xa0 [ 248.547548][T12525] ? __lock_acquire+0x4a5/0x2630 [ 248.547566][T12525] ? __lock_acquire+0x4a5/0x2630 [ 248.547587][T12525] ? find_held_lock+0x2b/0x80 [ 248.547609][T12525] ? bpf_test_timer_enter+0xf7/0x2b0 [ 248.547631][T12525] ? ktime_get+0x200/0x300 [ 248.547653][T12525] ? lockdep_hardirqs_on+0x78/0x100 [ 248.547677][T12525] ? __pfx___cant_migrate+0x10/0x10 [ 248.547704][T12525] ? bpf_test_timer_continue+0x17b/0x5d0 [ 248.547724][T12525] ? lockdep_hardirqs_on+0x78/0x100 [ 248.547747][T12525] bpf_test_run+0x39c/0xa40 [ 248.547769][T12525] ? bpf_test_run+0x1c6/0xa40 [ 248.547794][T12525] ? __pfx_bpf_test_run+0x10/0x10 [ 248.547836][T12525] ? eth_type_trans+0x2e3/0x720 [ 248.547863][T12525] bpf_prog_test_run_skb+0x107b/0x3230 [ 248.547901][T12525] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 248.547927][T12525] ? fput+0x79/0x100 [ 248.547948][T12525] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 248.547971][T12525] __sys_bpf+0x1725/0x4b90 [ 248.547991][T12525] ? __pfx___sys_bpf+0x10/0x10 [ 248.548006][T12525] ? proc_fail_nth_write+0x9f/0x220 [ 248.548030][T12525] ? find_held_lock+0x2b/0x80 [ 248.548058][T12525] ? find_held_lock+0x2b/0x80 [ 248.548080][T12525] ? ksys_write+0x190/0x250 [ 248.548099][T12525] ? __mutex_unlock_slowpath+0x15c/0x790 [ 248.548122][T12525] ? __fget_files+0x215/0x3d0 [ 248.548151][T12525] ? fput+0x79/0x100 [ 248.548170][T12525] ? ksys_write+0x1ac/0x250 [ 248.548184][T12525] ? __pfx_ksys_write+0x10/0x10 [ 248.548204][T12525] __x64_sys_bpf+0x7b/0xc0 [ 248.548222][T12525] ? lockdep_hardirqs_on+0x78/0x100 [ 248.548244][T12525] do_syscall_64+0x106/0xf80 [ 248.548266][T12525] ? clear_bhb_loop+0x40/0x90 [ 248.548288][T12525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.548305][T12525] RIP: 0033:0x7f28e199c799 [ 248.548320][T12525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.548336][T12525] RSP: 002b:00007f28e2929028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 248.548353][T12525] RAX: ffffffffffffffda RBX: 00007f28e1c15fa0 RCX: 00007f28e199c799 [ 248.548364][T12525] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 248.548374][T12525] RBP: 00007f28e2929090 R08: 0000000000000000 R09: 0000000000000000 [ 248.548384][T12525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 248.548393][T12525] R13: 00007f28e1c16038 R14: 00007f28e1c15fa0 R15: 00007ffcc6b0f768 [ 248.548416][T12525] [ 248.773267][T12543] kvm: kvm [12540]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x1 [ 248.827602][ T9] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 248.989519][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.993231][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.997042][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 249.001533][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.005098][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.009859][ T9] usb 8-1: config 0 descriptor?? [ 249.018918][T12558] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 249.067189][ T40] audit: type=1400 audit(1774478519.583:1737): avc: denied { connect } for pid=12573 comm="syz.7.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 249.172995][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1844'. [ 249.176194][T12586] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1844'. [ 249.454317][ T9] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 249.469145][ T9] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 249.645109][T12600] ipvlan2: entered allmulticast mode [ 249.647558][T12600] batadv_slave_1: entered allmulticast mode [ 249.651945][T12600] batman_adv: batadv0: Adding interface: ipvlan2 [ 249.654587][T12600] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.666149][T12600] batman_adv: batadv0: Interface activated: ipvlan2 [ 249.729162][T12529] Cannot find del_set index 4 as target [ 249.732499][ T9] usb 8-1: USB disconnect, device number 28 [ 249.738301][T12610] syzkaller0: entered promiscuous mode [ 249.740582][T12610] syzkaller0: entered allmulticast mode [ 249.814508][T12623] futex_wake_op: syz.7.1855 tries to shift op by -1; fix this program [ 249.822866][ T40] audit: type=1800 audit(1774478520.285:1738): pid=12623 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.1855" name="nullb0" dev="tmpfs" ino=1115 res=0 errno=0 [ 249.894033][ T40] audit: type=1400 audit(1774478520.350:1739): avc: denied { setopt } for pid=12627 comm="syz.7.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 249.902533][T12629] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1857'. [ 249.904022][T12630] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 249.909108][T12628] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1859'. [ 249.916761][ T40] audit: type=1400 audit(1774478520.350:1740): avc: denied { bind } for pid=12627 comm="syz.7.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 249.930167][ T40] audit: type=1400 audit(1774478520.378:1741): avc: denied { override_creds } for pid=12631 comm="syz.8.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 249.996877][T12641] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=128 sclass=netlink_xfrm_socket pid=12641 comm=syz.7.1862 [ 250.009208][T12628] mkiss: ax0: crc mode is auto. [ 250.085712][ T40] audit: type=1400 audit(1774478520.528:1742): avc: denied { create } for pid=12653 comm="syz.7.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 250.103597][ T40] audit: type=1400 audit(1774478520.556:1743): avc: denied { ioctl } for pid=12653 comm="syz.7.1864" path="socket:[54436]" dev="sockfs" ino=54436 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 250.118825][ T40] audit: type=1400 audit(1774478520.565:1744): avc: denied { write } for pid=12653 comm="syz.7.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 250.188142][ T40] audit: type=1400 audit(1774478520.631:1745): avc: denied { read write } for pid=12661 comm="syz.6.1866" name="file0" dev="tmpfs" ino=1589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 250.197890][T12668] kAFS: Can only specify source 'none' with -o dyn [ 250.197931][ T40] audit: type=1400 audit(1774478520.631:1746): avc: denied { open } for pid=12661 comm="syz.6.1866" path="/289/file0" dev="tmpfs" ino=1589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 250.278142][T12680] FAULT_INJECTION: forcing a failure. [ 250.278142][T12680] name failslab, interval 1, probability 0, space 0, times 0 [ 250.282573][T12680] CPU: 3 UID: 0 PID: 12680 Comm: syz.8.1871 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.282593][T12680] Tainted: [L]=SOFTLOCKUP [ 250.282597][T12680] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.282604][T12680] Call Trace: [ 250.282609][T12680] [ 250.282614][T12680] dump_stack_lvl+0x100/0x190 [ 250.282638][T12680] should_fail_ex.cold+0x5/0xa [ 250.282654][T12680] should_failslab+0xc2/0x120 [ 250.282673][T12680] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 250.282690][T12680] ? skb_clone+0x190/0x400 [ 250.282709][T12680] skb_clone+0x190/0x400 [ 250.282726][T12680] bpf_clone_redirect+0x166/0x500 [ 250.282746][T12680] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 250.282758][T12680] ? unwind_get_return_address+0x59/0xa0 [ 250.282777][T12680] ? __lock_acquire+0x4a5/0x2630 [ 250.282790][T12680] ? __lock_acquire+0x4a5/0x2630 [ 250.282806][T12680] ? find_held_lock+0x2b/0x80 [ 250.282821][T12680] ? bpf_test_timer_enter+0xf7/0x2b0 [ 250.282838][T12680] ? ktime_get+0x200/0x300 [ 250.282855][T12680] ? lockdep_hardirqs_on+0x78/0x100 [ 250.282873][T12680] ? __pfx___cant_migrate+0x10/0x10 [ 250.282892][T12680] ? bpf_test_timer_continue+0x17b/0x5d0 [ 250.282907][T12680] ? lockdep_hardirqs_on+0x78/0x100 [ 250.282924][T12680] bpf_test_run+0x39c/0xa40 [ 250.282956][T12680] ? bpf_test_run+0x1c6/0xa40 [ 250.282981][T12680] ? __pfx_bpf_test_run+0x10/0x10 [ 250.283020][T12680] ? eth_type_trans+0x2e3/0x720 [ 250.283045][T12680] bpf_prog_test_run_skb+0x107b/0x3230 [ 250.283072][T12680] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 250.283091][T12680] ? fput+0x79/0x100 [ 250.283107][T12680] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 250.283125][T12680] __sys_bpf+0x1725/0x4b90 [ 250.283141][T12680] ? __pfx___sys_bpf+0x10/0x10 [ 250.283153][T12680] ? proc_fail_nth_write+0x9f/0x220 [ 250.283171][T12680] ? find_held_lock+0x2b/0x80 [ 250.283190][T12680] ? find_held_lock+0x2b/0x80 [ 250.283205][T12680] ? ksys_write+0x190/0x250 [ 250.283219][T12680] ? __mutex_unlock_slowpath+0x15c/0x790 [ 250.283236][T12680] ? __fget_files+0x215/0x3d0 [ 250.283256][T12680] ? fput+0x79/0x100 [ 250.283270][T12680] ? ksys_write+0x1ac/0x250 [ 250.283280][T12680] ? __pfx_ksys_write+0x10/0x10 [ 250.283294][T12680] __x64_sys_bpf+0x7b/0xc0 [ 250.283307][T12680] ? lockdep_hardirqs_on+0x78/0x100 [ 250.283323][T12680] do_syscall_64+0x106/0xf80 [ 250.283340][T12680] ? clear_bhb_loop+0x40/0x90 [ 250.283354][T12680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.283367][T12680] RIP: 0033:0x7f28e199c799 [ 250.283377][T12680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.283389][T12680] RSP: 002b:00007f28e2929028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 250.283401][T12680] RAX: ffffffffffffffda RBX: 00007f28e1c15fa0 RCX: 00007f28e199c799 [ 250.283408][T12680] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 250.283415][T12680] RBP: 00007f28e2929090 R08: 0000000000000000 R09: 0000000000000000 [ 250.283424][T12680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 250.283430][T12680] R13: 00007f28e1c16038 R14: 00007f28e1c15fa0 R15: 00007ffcc6b0f768 [ 250.283445][T12680] [ 250.422242][T12692] ip6gre1: entered promiscuous mode [ 250.441870][T12692] ip6gre1: entered allmulticast mode [ 250.598124][T12717] netlink: 'syz.7.1881': attribute type 1 has an invalid length. [ 250.619409][T12717] bond3: entered promiscuous mode [ 250.621665][T12717] 8021q: adding VLAN 0 to HW filter on device bond3 [ 250.784033][ T50] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 250.830113][T12735] netlink: 'syz.8.1885': attribute type 10 has an invalid length. [ 250.833900][T12735] team0: Cannot enslave team device to itself [ 250.956778][ T50] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 250.960493][ T50] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 250.964787][ T50] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 250.969434][ T50] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 250.974530][ T50] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 250.981337][ T50] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 250.985324][ T50] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 250.989426][ T50] usb 8-1: Product: syz [ 250.992155][ T50] usb 8-1: Manufacturer: syz [ 251.000301][ T50] cdc_wdm 8-1:1.0: skipping garbage [ 251.002623][ T50] cdc_wdm 8-1:1.0: skipping garbage [ 251.007897][ T50] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 251.010715][ T50] cdc_wdm 8-1:1.0: Unknown control protocol [ 251.275824][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 251.275893][ T9] usb 8-1: USB disconnect, device number 29 [ 251.278837][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 251.283207][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 251.585255][T12726] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 251.588152][T12726] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 251.596653][T12726] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 251.600963][T12726] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 251.604628][T12726] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 251.607880][T12726] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 251.632242][T12726] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 251.684710][T12741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47392 sclass=netlink_route_socket pid=12741 comm=syz.8.1888 [ 251.693257][T12742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=12742 comm=syz.8.1888 [ 251.753730][T12756] macvtap0: entered allmulticast mode [ 251.756135][T12756] veth0_macvtap: entered allmulticast mode [ 252.039598][T12767] could not allocate digest TFM handle cryptd(blake2b-160) [ 252.128418][T12782] fuse: Bad value for 'fd' [ 252.193204][T12771] tipc: Started in network mode [ 252.196994][T12771] tipc: Node identity 7637d1a02946, cluster identity 4711 [ 252.200056][T12771] tipc: Enabled bearer , priority 0 [ 252.204276][T12771] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1896'. [ 252.233718][T12770] tipc: Disabling bearer [ 252.595792][T12804] netlink: 'syz.6.1905': attribute type 1 has an invalid length. [ 252.669969][T12812] xt_hashlimit: size too large, truncated to 1048576 [ 252.724690][T12816] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1908'. [ 252.876133][T12822] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 252.938669][T12835] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1917'. [ 252.976359][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 253.820790][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout [ 253.948050][T12874] overlay: ./file0 is not a directory [ 254.311650][T12905] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1934'. [ 254.376807][T12902] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1934'. [ 254.497091][T12923] CIFS mount error: No usable UNC path provided in device string! [ 254.497091][T12923] [ 254.501280][T12923] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 254.783861][T12959] netlink: 'syz.6.1950': attribute type 10 has an invalid length. [ 254.786985][T12959] macvlan0: entered allmulticast mode [ 254.789079][T12959] veth1_vlan: entered allmulticast mode [ 254.792740][T12959] team0: Port device macvlan0 added [ 254.800031][T12959] 9pnet_fd: p9_fd_create_unix (12959): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 254.899871][ T24] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 255.075265][T12980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=12980 comm=syz.3.1957 [ 255.105170][ T24] usb 13-1: Using ep0 maxpacket: 32 [ 255.110523][ T24] usb 13-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 255.117270][ T24] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.123134][ T24] usb 13-1: config 0 descriptor?? [ 255.132038][ T24] as10x_usb: device has been detected [ 255.137374][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 255.155067][ T24] usb 13-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 255.168205][T12987] netlink: 25 bytes leftover after parsing attributes in process `syz.6.1958'. [ 255.179651][ T24] as10x_usb: error during firmware upload part1 [ 255.182817][ T24] Registered device nBox DVB-T Dongle [ 255.188916][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 255.235114][T13002] 9p: Invalid gid '0x00000000ffffffff' [ 255.246690][T12999] bond4: entered allmulticast mode [ 255.321010][T13008] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.324222][T13008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1967'. [ 255.329568][T13008] netlink: 75 bytes leftover after parsing attributes in process `syz.3.1967'. [ 255.356513][T13012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1968'. [ 255.450973][T13009] netlink: 'syz.8.1945': attribute type 1 has an invalid length. [ 255.451942][T13024] netlink: 'syz.8.1945': attribute type 1 has an invalid length. [ 255.487554][T13009] bond3: entered promiscuous mode [ 255.493643][T13009] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.497304][T13027] veth0_to_bond: entered allmulticast mode [ 255.528243][T12941] bond3: (slave bridge2): making interface the new active one [ 255.531644][T12941] bridge2: entered promiscuous mode [ 255.534917][T12941] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 255.544797][T13039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1975'. [ 255.550582][T13009] bond3: (slave bridge3): Enslaving as a backup interface with an up link [ 255.566740][T13039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1975'. [ 255.705360][T10028] usb 13-1: USB disconnect, device number 5 [ 255.715673][T10028] Unregistered device nBox DVB-T Dongle [ 255.717955][T10028] as10x_usb: device has been disconnected [ 255.793971][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1979'. [ 255.799353][T13049] bond0: Device is already in use. [ 255.803156][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 255.803167][ T40] audit: type=1400 audit(1774478525.878:1755): avc: denied { getopt } for pid=13048 comm="syz.6.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 256.043823][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout [ 256.317212][T13078] bridge0: port 1(ipvlan3) entered blocking state [ 256.320031][T13078] bridge0: port 1(ipvlan3) entered disabled state [ 256.326658][T13078] ipvlan3: entered allmulticast mode [ 256.329045][T13081] overlayfs: failed to clone upperpath [ 256.329099][T13078] bridge0: entered allmulticast mode [ 256.336606][T13078] ipvlan3: left allmulticast mode [ 256.338261][T13078] bridge0: left allmulticast mode [ 256.381957][T13081] tipc: Enabling of bearer rejected, failed to enable media [ 256.503829][T13088] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 256.583501][T13102] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1991'. [ 256.727324][T13122] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2001'. [ 256.762420][T13126] overlayfs: missing 'lowerdir' [ 256.766317][T13124] netlink: 'syz.8.2002': attribute type 1 has an invalid length. [ 256.769681][T13124] netlink: 'syz.8.2002': attribute type 1 has an invalid length. [ 256.802861][ T832] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 256.952450][ T6021] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 256.977379][ T832] usb 11-1: config 0 has an invalid interface number: 120 but max is 0 [ 256.980608][ T832] usb 11-1: config 0 has no interface number 0 [ 256.983066][ T832] usb 11-1: config 0 interface 120 altsetting 0 endpoint 0x83 has an invalid bInterval 195, changing to 11 [ 256.995211][ T832] usb 11-1: config 0 interface 120 altsetting 0 endpoint 0x83 has invalid maxpacket 9866, setting to 1024 [ 256.999189][ T832] usb 11-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 257.002668][ T832] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.008125][ T832] usb 11-1: config 0 descriptor?? [ 257.010468][T13099] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 257.015781][ T832] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.120/input/input19 [ 257.025936][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2010'. [ 257.073738][T13144] SET target dimension over the limit! [ 257.081793][T13148] usb usb9: usbfs: process 13148 (syz.8.2012) did not claim interface 0 before use [ 257.113939][ T6021] usb 8-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 257.117077][ T6021] usb 8-1: config 0 interface 0 has no altsetting 0 [ 257.120707][ T6021] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 257.123921][ T6021] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 257.126436][ T6021] usb 8-1: Product: syz [ 257.127642][ T6021] usb 8-1: Manufacturer: syz [ 257.129051][ T6021] usb 8-1: SerialNumber: syz [ 257.132367][ T6021] usb 8-1: config 0 descriptor?? [ 257.134436][T13118] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 257.139370][ T6021] usb 8-1: selecting invalid altsetting 0 [ 257.234276][ T832] usb 11-1: USB disconnect, device number 7 [ 257.235248][ T40] audit: type=1400 audit(1774478527.225:1756): avc: denied { map } for pid=13098 comm="syz.6.1994" path="socket:[57807]" dev="sockfs" ino=57807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 257.412315][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 257.764002][ T832] usb 8-1: USB disconnect, device number 30 [ 257.855126][T13145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.867290][T13176] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 257.896730][ T40] audit: type=1400 audit(1774478527.843:1757): avc: denied { module_load } for pid=13178 comm="syz.7.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 257.896752][T13179] Invalid ELF header type: 0 != 1 [ 258.267816][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout [ 258.367771][T13204] binder: 13202:13204 ioctl c00c620f 200000000040 returned -22 [ 258.935901][T13222] lo speed is unknown, defaulting to 1000 [ 258.939848][T13222] wg1 speed is unknown, defaulting to 1000 [ 259.169606][T13229] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13229 comm=syz.6.2034 [ 259.597814][T13250] bond5: option downdelay: invalid value (18446744073709551615) [ 259.600354][T13250] bond5: option downdelay: allowed values 0 - 2147483647 [ 259.604326][T13250] bond5 (unregistering): Released all slaves [ 259.646519][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 259.649714][T13252] fuse: Bad value for 'fd' [ 259.732823][T13256] syzkaller0: entered promiscuous mode [ 259.735169][T13256] syzkaller0: entered allmulticast mode [ 260.056841][T13264] openvswitch: netlink: Duplicate or invalid key (type 0). [ 260.057175][T13265] openvswitch: netlink: Duplicate or invalid key (type 0). [ 260.059800][T13264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.066859][T13265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.248469][ T40] audit: type=1400 audit(1774478530.041:1758): avc: denied { connect } for pid=13278 comm="syz.6.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 260.537847][T13303] netlink: 'syz.7.2060': attribute type 1 has an invalid length. [ 260.541556][T13303] netlink: 'syz.7.2060': attribute type 2 has an invalid length. [ 260.544285][T13303] netlink: 'syz.7.2060': attribute type 2 has an invalid length. [ 260.577417][T13306] netlink: 'syz.7.2062': attribute type 1 has an invalid length. [ 260.589873][T13306] 8021q: adding VLAN 0 to HW filter on device bond5 [ 260.602843][T13306] ip6erspan0: entered promiscuous mode [ 260.606850][T13306] bond5: (slave ip6erspan0): making interface the new active one [ 260.610659][T13306] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 260.653076][ T40] audit: type=1800 audit(1774478530.424:1759): pid=13310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2063" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 260.662544][ T40] audit: type=1800 audit(1774478530.424:1760): pid=13310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.2063" name="nullb0" dev="tmpfs" ino=1115 res=0 errno=0 [ 260.708776][T13313] lo speed is unknown, defaulting to 1000 [ 260.712549][T13313] wg1 speed is unknown, defaulting to 1000 [ 260.755457][T13316] __nla_validate_parse: 5 callbacks suppressed [ 260.755476][T13316] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2064'. [ 261.086466][T10028] libceph: connect (1)[c::]:6789 error -101 [ 261.088717][T10028] libceph: mon0 (1)[c::]:6789 connect error [ 261.201678][T13344] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 261.204001][T13344] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 261.204642][T13341] netlink: 'syz.3.2072': attribute type 322 has an invalid length. [ 261.207062][T13344] vhci_hcd vhci_hcd.0: Device attached [ 261.231496][T13346] vhci_hcd: connection closed [ 261.231903][ T193] vhci_hcd vhci_hcd.6: stop threads [ 261.237824][ T193] vhci_hcd vhci_hcd.6: release socket [ 261.240744][ T193] vhci_hcd vhci_hcd.6: disconnect device [ 261.379821][ T34] libceph: connect (1)[c::]:6789 error -101 [ 261.382018][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 261.406965][T13362] netlink: 'syz.3.2078': attribute type 9 has an invalid length. [ 261.410211][T13362] netlink: 'syz.3.2078': attribute type 11 has an invalid length. [ 261.415690][T13362] netlink: 'syz.3.2078': attribute type 12 has an invalid length. [ 261.418928][T13362] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.2078'. [ 261.423735][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2078'. [ 261.429344][T13362] x_tables: duplicate underflow at hook 2 [ 261.438480][T13362] netlink: 46 bytes leftover after parsing attributes in process `syz.3.2078'. [ 261.745554][T13380] tipc: Failed to remove unknown binding: 66,0,0/134418688:1539288550/1539288551 [ 261.750100][T13380] tipc: Failed to remove unknown binding: 66,0,0/134418688:1539288550/1539288551 [ 261.754794][T13380] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 261.923966][ T34] libceph: connect (1)[c::]:6789 error -101 [ 261.926780][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 261.970435][T13336] ceph: No mds server is up or the cluster is laggy [ 262.111790][T13410] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.114603][T13410] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.208392][T13410] veth0_to_bond: left allmulticast mode [ 262.235955][T13410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.252672][T13410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.417199][T13410] erspan1: left promiscuous mode [ 262.423108][T13410] bond3: left promiscuous mode [ 262.426238][T13410] bond4: left allmulticast mode [ 262.438510][T13410] ip6erspan0: left promiscuous mode [ 262.441473][ T24] lo speed is unknown, defaulting to 1000 [ 262.445041][T10626] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.446408][ T24] syz0: Port: 1 Link DOWN [ 262.453212][T10626] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.457143][T10626] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.460986][T10626] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.521484][ T40] audit: type=1400 audit(1774478532.164:1761): avc: denied { mounton } for pid=13418 comm="syz.7.2098" path="/bus" dev="bpf" ino=57303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 262.526902][T13419] overlayfs: upper fs does not support tmpfile. [ 262.744860][ T40] audit: type=1400 audit(1774478532.370:1762): avc: denied { mount } for pid=13431 comm="syz.7.2103" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 262.824394][T13441] ceph: No source [ 262.839310][T13443] ceph: No source [ 263.009253][T13456] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2108'. [ 263.031073][T13456] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2108'. [ 263.353322][T13471] validate_nla: 2 callbacks suppressed [ 263.353334][T13471] netlink: 'syz.3.2114': attribute type 1 has an invalid length. [ 263.454930][T13471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2114'. [ 263.488855][T13471] bond0 (unregistering): Released all slaves [ 263.536936][T13479] netlink: 'syz.7.2116': attribute type 1 has an invalid length. [ 263.543323][T13478] bond0: Unable to set up delay as MII monitoring is disabled [ 263.561359][T13478] bond0 (unregistering): Released all slaves [ 263.599359][T13479] 8021q: adding VLAN 0 to HW filter on device bond6 [ 263.609446][T13479] bond6: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 263.614443][T13479] bond6: entered allmulticast mode [ 263.634842][T13479] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2116'. [ 263.650245][ T40] audit: type=1400 audit(1774478533.221:1763): avc: denied { shutdown } for pid=13486 comm="syz.3.2119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 263.686241][T13489] IPVS: Unknown mcast interface: syzkaller1 [ 263.892639][T13505] fuse: Bad value for 'fd' [ 263.895830][ T40] audit: type=1326 audit(1774478533.455:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13504 comm="syz.7.2126" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f654379c799 code=0x0 [ 264.248894][T13517] kvm: emulating exchange as write [ 264.265195][T13517] ip6gretap0: entered promiscuous mode [ 264.269922][T13517] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.272948][T13517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.619055][ T40] audit: type=1400 audit(2000000000.336:1765): avc: denied { map } for pid=13529 comm="syz.3.2133" path="pipe:[59884]" dev="pipefs" ino=59884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 264.620587][T13530] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2133'. [ 264.639004][ T40] audit: type=1400 audit(2000000000.336:1766): avc: denied { execute } for pid=13529 comm="syz.3.2133" path="pipe:[59884]" dev="pipefs" ino=59884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 264.662349][T13530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2133'. [ 264.864261][T13539] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 264.968006][T13546] bridge_slave_1: default FDB implementation only supports local addresses [ 265.134439][ T40] audit: type=1400 audit(2000000000.813:1767): avc: denied { append } for pid=13551 comm="syz.3.2141" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 265.152239][T13552] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 265.166959][T13552] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 265.171619][T13552] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 265.177113][ T40] audit: type=1400 audit(2000000000.860:1768): avc: denied { map } for pid=13551 comm="syz.3.2141" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 265.361166][T13557] netlink: 'syz.3.2143': attribute type 4 has an invalid length. [ 265.428633][T13560] xt_hashlimit: size too large, truncated to 1048576 [ 265.540785][ T40] audit: type=1400 audit(2000000001.197:1769): avc: denied { bind } for pid=13559 comm="syz.3.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 265.541144][ T40] audit: type=1400 audit(2000000001.197:1770): avc: denied { write } for pid=13559 comm="syz.3.2144" path="socket:[58800]" dev="sockfs" ino=58800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 266.008436][T13573] netlink: 'syz.7.2148': attribute type 4 has an invalid length. [ 266.008971][T13574] netlink: 'syz.7.2148': attribute type 4 has an invalid length. [ 266.229126][T13584] omfs: Invalid superblock (0) [ 266.450760][T13600] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 266.525069][T13608] tipc: Invalid UDP bearer configuration [ 266.527590][T13608] tipc: Enabling of bearer rejected, failed to enable media [ 266.570917][T13611] lo speed is unknown, defaulting to 1000 [ 266.573714][T13611] wg1 speed is unknown, defaulting to 1000 [ 266.865469][T13619] __nla_validate_parse: 3 callbacks suppressed [ 266.865481][T13619] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2163'. [ 266.871047][T13619] netlink: 'syz.6.2163': attribute type 2 has an invalid length. [ 267.264374][T13640] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20001 [ 267.330899][T13642] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 267.439755][T13645] netlink: 'syz.3.2172': attribute type 1 has an invalid length. [ 267.450754][T13645] netlink: 'syz.3.2172': attribute type 2 has an invalid length. [ 267.655707][T13650] xt_l2tp: v2 doesn't support IP mode [ 267.936088][T13667] overlayfs: workdir and upperdir must be separate subtrees [ 268.100373][T13676] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 268.105618][T13676] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 268.110059][T13676] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 268.215566][T13688] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2188'. [ 268.255822][T13690] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2189'. [ 268.402215][ T29] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 268.472982][T13715] netlink: 'syz.8.2196': attribute type 1 has an invalid length. [ 268.475989][T13715] netlink: 'syz.8.2196': attribute type 4 has an invalid length. [ 268.480665][T13715] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.2196'. [ 268.583867][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 268.587162][ T29] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 268.591344][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 268.595328][ T29] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 268.599107][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 268.602998][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 268.608908][ T29] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 268.611816][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 268.616891][ T29] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 268.620794][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 268.624815][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 268.629570][ T29] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 268.632001][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 268.636118][ T29] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 268.642146][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 268.646972][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 268.655587][ T29] usb 8-1: string descriptor 0 read error: -22 [ 268.657790][ T29] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 268.660968][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.670658][T13730] tipc: Enabled bearer , priority 10 [ 268.673988][ T29] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 268.944298][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 268.944313][ T40] audit: type=1400 audit(2000000004.377:1774): avc: denied { write } for pid=13742 comm="syz.8.2205" name="usbmon2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 269.002214][T13752] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2209'. [ 269.007635][T13751] usb usb9: usbfs: process 13751 (syz.8.2208) did not claim interface 0 before use [ 269.050333][T13760] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 269.190015][T13768] netlink: 210848 bytes leftover after parsing attributes in process `syz.6.2214'. [ 269.238701][T13786] fuse: Bad value for 'fd' [ 269.492759][T13812] comedi comedi4: bad chanlist[0]=0x00001000 chan=4096 range length=2 [ 269.738643][ T8477] tipc: Node number set to 1601294752 [ 269.806511][ T40] audit: type=1804 audit(2000000005.191:1775): pid=13822 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.2233" name="/newroot/378/file1" dev="tmpfs" ino=2047 res=1 errno=0 [ 269.817713][T13822] kAFS: unable to lookup cell '(' [ 269.823318][T13822] kAFS: unable to lookup cell '(,cL' [ 269.834938][ T40] audit: type=1804 audit(2000000005.210:1776): pid=13822 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.2233" name="/newroot/378/file1" dev="tmpfs" ino=2047 res=1 errno=0 [ 269.852524][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2235'. [ 269.870349][T13833] 8021q: adding VLAN 0 to HW filter on device bond7 [ 269.875161][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2235'. [ 269.879221][T13833] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2235'. [ 269.882522][T13833] netlink: 'syz.7.2235': attribute type 4 has an invalid length. [ 269.884936][T13833] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2235'. [ 269.889491][T13833] .`: renamed from bond0 [ 269.978890][T13842] lo speed is unknown, defaulting to 1000 [ 269.981536][T13842] wg1 speed is unknown, defaulting to 1000 [ 269.992283][T13844] unsupported nlmsg_type 40 [ 270.201689][ T40] audit: type=1400 audit(2000000005.556:1777): avc: denied { lock } for pid=13851 comm="syz.7.2242" path="socket:[62790]" dev="sockfs" ino=62790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 270.488703][T13863] input: syz1 as /devices/virtual/input/input20 [ 270.491552][T13863] input: failed to attach handler leds to device input20, error: -6 [ 270.844950][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.847230][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.883872][T13887] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 270.888649][T13888] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 270.989949][T13893] IPVS: set_ctl: invalid protocol: 135 172.20.20.12:20003 [ 271.110420][ T9] usb 8-1: USB disconnect, device number 31 [ 271.121306][T13907] Invalid ELF header type: 0 != 1 [ 271.177361][T13913] netlink: 'syz.7.2260': attribute type 21 has an invalid length. [ 271.221470][T13916] overlay: ./file0 is not a directory [ 271.245933][T13920] netlink: 'syz.6.2262': attribute type 20 has an invalid length. [ 271.332679][T13926] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 271.352929][T13928] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 271.452647][T13940] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 271.506095][T13945] fuse: Unknown parameter '~Ǹr+755s?7Q*q\7?65U0 ͯx4! n0x0000000000000004' [ 271.547385][T13949] netlink: 'syz.7.2272': attribute type 1 has an invalid length. [ 271.691650][T13963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13963 comm=syz.8.2276 [ 271.763850][T13971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13971 comm=syz.3.2277 [ 271.799602][T13971] ip6_vti0: left allmulticast mode [ 271.823781][T13971] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.826502][T13971] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.866913][T13971] veth1: left promiscuous mode [ 271.933288][T13971] batadv_slave_0: left promiscuous mode [ 271.940135][T13971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.032345][T13971] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 272.036886][T13971] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 272.091921][T13971] bond4: left allmulticast mode [ 272.093646][T13971] bond5: left allmulticast mode [ 272.115624][T13971] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 272.118399][T13971] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 272.131123][T13971] bond6: left promiscuous mode [ 272.137903][T13971] ip6gre1: left promiscuous mode [ 272.139592][T13971] ip6gre1: left allmulticast mode [ 272.149065][T13971] geneve2: left promiscuous mode [ 272.160213][T13971] gretap1: left promiscuous mode [ 272.163158][T13971] ip6tnl1: left promiscuous mode [ 272.184030][T13971] vlan0: left promiscuous mode [ 272.189044][T13971] bond9: left promiscuous mode [ 272.191138][T13971] bridge7: left promiscuous mode [ 272.193691][T13971] vlan0: left allmulticast mode [ 272.195985][T13971] bond9: left allmulticast mode [ 272.198533][T13971] bridge7: left allmulticast mode [ 272.222525][ T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.225748][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.228768][ T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.231987][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.235000][ T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.237990][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.241496][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.250680][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.293054][T13983] veth0_to_bond: entered allmulticast mode [ 272.326492][T13990] __nla_validate_parse: 10 callbacks suppressed [ 272.326511][T13990] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2284'. [ 272.350559][T13986] netlink: 'syz.8.2282': attribute type 30 has an invalid length. [ 272.365015][T13986] bond5: option arp_missed_max: invalid value (0) [ 272.367369][T13986] bond5: option arp_missed_max: allowed values 1 - 255 [ 272.371415][T13986] bond5 (unregistering): Released all slaves [ 272.381777][T13995] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2285'. [ 272.412757][T14003] afs: Unknown parameter '޸JN뻂1GS7̓Ryӣ' [ 272.478807][T14009] tmpfs: Bad value for 'mpol' [ 272.614925][ T40] audit: type=1400 audit(2000000007.810:1778): avc: denied { setopt } for pid=14023 comm="syz.7.2293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 272.694824][T14038] overlayfs: failed to clone upperpath [ 272.697941][T14038] overlayfs: failed to clone upperpath [ 272.741558][T14045] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2301'. [ 272.741579][T14046] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2301'. [ 272.743801][T14043] tipc: Cannot configure node identity twice [ 272.769574][T14045] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2301'. [ 272.773376][T14045] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2301'. [ 272.778954][T14045] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2301'. [ 272.778976][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2301'. [ 272.782880][T14045] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2301'. [ 272.789128][T14046] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2301'. [ 272.846498][ T40] audit: type=1400 audit(2000000008.025:1779): avc: denied { setopt } for pid=14059 comm="syz.7.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 272.922075][T14069] cgroup: Unknown subsys name 'subj_role' [ 273.357185][T14125] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 273.534470][T14142] random: crng reseeded on system resumption [ 273.545188][T14142] Cache volume key already in use (9p,syz,) [ 273.564637][ T40] audit: type=1400 audit(2000000008.699:1780): avc: denied { map } for pid=14141 comm="syz.6.2326" path="/394/file0/memory.events.local" dev="9p" ino=76546207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 273.586112][ T40] audit: type=1400 audit(2000000008.717:1781): avc: denied { ioctl } for pid=14141 comm="syz.6.2326" path="/394/file0/memory.events.local" dev="9p" ino=76546207 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 273.640598][T14149] tipc: Enabled bearer , priority 0 [ 273.658118][T14151] new mount options do not match the existing superblock, will be ignored [ 273.687424][ T40] audit: type=1400 audit(2000000008.820:1782): avc: denied { unmount } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 273.745914][T14163] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 273.798112][T14169] Illegal XDP return value 4294967274 on prog (id 345) dev N/A, expect packet loss! [ 273.931014][T14182] SELinux: Context system_u:object_r:src_t:s0 is not valid (left unmapped). [ 273.934134][ T40] audit: type=1400 audit(2000000009.045:1783): avc: denied { relabelfrom } for pid=14181 comm="syz.7.2340" name="NETLINK" dev="sockfs" ino=62336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 273.953574][T14192] gfs2: not a GFS2 filesystem [ 274.038875][T14207] binder: 14205:14207 ioctl c0306201 0 returned -14 [ 274.140801][T14221] netlink: 'syz.8.2355': attribute type 2 has an invalid length. [ 274.219383][T14230] overlayfs: failed to clone upperpath [ 274.225274][T14230] overlayfs: failed to clone lowerpath [ 274.300332][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 274.300345][ T40] audit: type=1400 audit(2000000009.391:1791): avc: denied { getattr } for pid=14249 comm="syz.7.2365" path="socket:[63955]" dev="sockfs" ino=63955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 274.670351][ T40] audit: type=1400 audit(2000000009.737:1792): avc: denied { remove_name } for pid=14289 comm="syz.8.2379" name="file2" dev="9p" ino=76546189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 274.677991][ T40] audit: type=1400 audit(2000000009.737:1793): avc: denied { rmdir } for pid=14289 comm="syz.8.2379" name="file2" dev="9p" ino=76546189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 274.730982][ T29] tipc: Node number set to 4278321153 [ 275.078938][T14306] nbd: must specify at least one socket [ 275.085449][T14300] syz_tun: entered promiscuous mode [ 275.087925][T14300] syz_tun: left promiscuous mode [ 275.126724][ T9544] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 275.172470][ T10] libceph: connect (1)[c::]:6789 error -22 [ 275.174606][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 275.286950][ T9544] usb 8-1: Using ep0 maxpacket: 16 [ 275.292402][ T9544] usb 8-1: config 154 has an invalid interface number: 234 but max is 3 [ 275.295864][ T9544] usb 8-1: config 154 has an invalid interface number: 246 but max is 3 [ 275.299931][ T9544] usb 8-1: config 154 has an invalid interface number: 199 but max is 3 [ 275.303042][ T9544] usb 8-1: config 154 has an invalid interface number: 8 but max is 3 [ 275.306439][ T9544] usb 8-1: config 154 has an invalid interface number: 105 but max is 3 [ 275.310124][ T9544] usb 8-1: config 154 has 5 interfaces, different from the descriptor's value: 4 [ 275.313675][ T9544] usb 8-1: config 154 has no interface number 0 [ 275.316193][ T9544] usb 8-1: config 154 has no interface number 1 [ 275.319145][ T9544] usb 8-1: config 154 has no interface number 2 [ 275.321561][ T9544] usb 8-1: config 154 has no interface number 3 [ 275.324151][ T9544] usb 8-1: config 154 has no interface number 4 [ 275.326551][ T9544] usb 8-1: config 154 interface 234 altsetting 7 endpoint 0x84 has invalid maxpacket 512, setting to 64 [ 275.331504][ T9544] usb 8-1: config 154 interface 234 altsetting 7 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 275.335637][ T9544] usb 8-1: config 154 interface 234 altsetting 7 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 275.341128][ T9544] usb 8-1: too many endpoints for config 154 interface 246 altsetting 139: 197, using maximum allowed: 30 [ 275.345574][ T9544] usb 8-1: config 154 interface 246 altsetting 139 has a duplicate endpoint with address 0x4, skipping [ 275.349763][ T9544] usb 8-1: config 154 interface 246 altsetting 139 has an endpoint descriptor with address 0xD9, changing to 0x89 [ 275.354644][ T9544] usb 8-1: config 154 interface 246 altsetting 139 endpoint 0x89 has invalid maxpacket 40816, setting to 1024 [ 275.359372][ T9544] usb 8-1: config 154 interface 246 altsetting 139 bulk endpoint 0x89 has invalid maxpacket 1024 [ 275.364084][ T9544] usb 8-1: config 154 interface 246 altsetting 139 endpoint 0xF has an invalid bInterval 255, changing to 7 [ 275.368835][ T9544] usb 8-1: config 154 interface 246 altsetting 139 has a duplicate endpoint with address 0x1, skipping [ 275.373612][ T9544] usb 8-1: config 154 interface 246 altsetting 139 has 5 endpoint descriptors, different from the interface descriptor's value: 197 [ 275.378687][ T9544] usb 8-1: config 154 interface 199 altsetting 10 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 275.383043][ T9544] usb 8-1: config 154 interface 199 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 275.387027][ T9544] usb 8-1: config 154 interface 199 altsetting 10 has a duplicate endpoint with address 0x4, skipping [ 275.391526][ T9544] usb 8-1: config 154 interface 199 altsetting 10 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 275.396697][ T9544] usb 8-1: config 154 interface 199 altsetting 10 endpoint 0x8E has invalid maxpacket 1024, setting to 64 [ 275.400805][ T9544] usb 8-1: config 154 interface 199 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 275.405371][ T9544] usb 8-1: config 154 interface 8 altsetting 128 has a duplicate endpoint with address 0x3, skipping [ 275.409702][ T9544] usb 8-1: config 154 interface 8 altsetting 128 has a duplicate endpoint with address 0xA, skipping [ 275.413672][ T9544] usb 8-1: config 154 interface 8 altsetting 128 has a duplicate endpoint with address 0x2, skipping [ 275.418198][ T9544] usb 8-1: config 154 interface 8 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 275.419782][ T40] audit: type=1400 audit(2000000010.429:1794): avc: denied { bind } for pid=14325 comm="syz.8.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 275.422855][ T9544] usb 8-1: config 154 interface 8 altsetting 128 has a duplicate endpoint with address 0x3, skipping [ 275.429582][ T40] audit: type=1400 audit(2000000010.429:1795): avc: denied { bind } for pid=14325 comm="syz.8.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 275.434015][ T9544] usb 8-1: config 154 interface 105 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 275.444398][ T9544] usb 8-1: config 154 interface 105 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 275.449321][ T10] libceph: connect (1)[c::]:6789 error -22 [ 275.452337][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 275.455085][ T9544] usb 8-1: config 154 interface 105 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 275.459566][ T9544] usb 8-1: config 154 interface 105 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 275.463885][ T9544] usb 8-1: config 154 interface 105 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 275.467781][ T9544] usb 8-1: config 154 interface 105 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 275.472756][ T9544] usb 8-1: config 154 interface 105 altsetting 7 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 275.477442][ T9544] usb 8-1: config 154 interface 105 altsetting 7 has an endpoint descriptor with address 0x91, changing to 0x81 [ 275.482210][ T9544] usb 8-1: config 154 interface 105 altsetting 7 has a duplicate endpoint with address 0x81, skipping [ 275.486241][ T9544] usb 8-1: config 154 interface 105 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 275.490840][ T9544] usb 8-1: config 154 interface 234 has no altsetting 0 [ 275.493820][ T9544] usb 8-1: config 154 interface 246 has no altsetting 0 [ 275.496952][ T9544] usb 8-1: config 154 interface 199 has no altsetting 0 [ 275.499357][ T9544] usb 8-1: config 154 interface 8 has no altsetting 0 [ 275.502547][ T9544] usb 8-1: config 154 interface 105 has no altsetting 0 [ 275.507976][ T9544] usb 8-1: Dual-Role OTG device on HNP port [ 275.510728][ T9544] usb 8-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice= d.34 [ 275.514988][ T9544] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.519262][ T9544] usb 8-1: Product: 䴽㉴끻骵⤈掏宎鏺ꐴ鐄蔄⿮꽺룭풤䥖䛣褜섊앴욎吉┴㧢䈾许襗 [ 275.524611][ T9544] usb 8-1: Manufacturer: ⓖ쩦鶰훥ஆ泧榁ᅈ뢹釶᯿㭆埯棞໫۱狹脈榣渠继漰✰즸ϊ걱⢢滌瘈ꀘꊂ䇵癯뽨죏쯑찧뚤揷쐚㼛勫敤원䎘⑘舜 [ 275.531209][ T9544] usb 8-1: SerialNumber: 㰁 [ 275.574665][T14336] netlink: 'syz.7.2393': attribute type 13 has an invalid length. [ 275.579967][T14336] gretap0: refused to change device tx_queue_len [ 275.582496][T14336] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 275.756272][T14298] sctp: [Deprecated]: syz.3.2382 (pid 14298) Use of int in max_burst socket option deprecated. [ 275.756272][T14298] Use struct sctp_assoc_value instead [ 275.769937][ T9544] sierra 8-1:154.234: Sierra USB modem converter detected [ 275.780860][ T9544] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 275.789721][ T9544] sierra 8-1:154.246: Sierra USB modem converter detected [ 275.795829][ T9544] usb 8-1: Sierra USB modem converter now attached to ttyUSB1 [ 275.805323][ T9544] sierra 8-1:154.199: Sierra USB modem converter detected [ 275.812929][ T9544] usb 8-1: Sierra USB modem converter now attached to ttyUSB2 [ 275.820281][ T9544] sierra 8-1:154.8: Sierra USB modem converter detected [ 275.826604][ T9544] usb 8-1: Sierra USB modem converter now attached to ttyUSB3 [ 275.832759][ T9544] sierra 8-1:154.105: Sierra USB modem converter detected [ 275.840120][ T9544] usb 8-1: Sierra USB modem converter now attached to ttyUSB4 [ 275.852167][ T9544] usb 8-1: USB disconnect, device number 32 [ 275.862078][T14354] /dev/nullb0: Can't lookup blockdev [ 275.863175][ T9544] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 275.868219][ T9544] sierra 8-1:154.234: device disconnected [ 275.894676][ T9544] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 275.899215][ T9544] sierra 8-1:154.246: device disconnected [ 275.910940][ T9544] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 275.914955][ T9544] sierra 8-1:154.199: device disconnected [ 275.922652][ T9544] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3 [ 275.926701][ T9544] sierra 8-1:154.8: device disconnected [ 275.933062][ T9544] sierra ttyUSB4: Sierra USB modem converter now disconnected from ttyUSB4 [ 275.937080][ T9544] sierra 8-1:154.105: device disconnected [ 275.995304][ T10] libceph: connect (1)[c::]:6789 error -22 [ 275.997979][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 276.057065][T14310] ceph: No mds server is up or the cluster is laggy [ 276.304776][ T40] audit: type=1400 audit(2000000011.271:1796): avc: denied { mount } for pid=14362 comm="syz.6.2403" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 276.460547][T14368] dlm: non-version read from control device 0 [ 276.563738][ T40] audit: type=1400 audit(2000000011.505:1797): avc: denied { accept } for pid=14372 comm="syz.3.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 276.684257][T14381] netlink: 'syz.8.2409': attribute type 32 has an invalid length. [ 276.717816][T14381] bond5: Setting coupled_control to off (0) [ 276.720086][T14381] bond5: entered promiscuous mode [ 276.808080][T14395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=14395 comm=syz.8.2415 [ 276.810392][ T40] audit: type=1400 audit(2000000011.739:1798): avc: denied { accept } for pid=14394 comm="syz.7.2414" path="socket:[65647]" dev="sockfs" ino=65647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 276.812779][T14395] netlink: 'syz.8.2415': attribute type 1 has an invalid length. [ 276.831511][T14396] bond0: Unable to set up delay as MII monitoring is disabled [ 276.834856][T14396] bond0 (unregistering): Released all slaves [ 277.027351][T14406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=14406 comm=syz.8.2418 [ 277.038790][T14408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=14408 comm=syz.8.2418 [ 277.147883][ T40] audit: type=1400 audit(2000000012.057:1799): avc: denied { unmount } for pid=8296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 277.177931][T14415] dvmrp0: entered allmulticast mode [ 277.254204][T14417] netlink: 'syz.3.2422': attribute type 1 has an invalid length. [ 277.266371][T14417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.350107][ T832] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 277.422761][T14429] ip6t_REJECT: ECHOREPLY is not supported [ 277.513669][T14439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14439 comm=syz.3.2427 [ 277.521252][ T832] usb 13-1: Using ep0 maxpacket: 8 [ 277.525045][ T832] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 277.529190][ T832] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 277.533849][ T832] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 277.538111][ T832] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 277.544083][ T832] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 277.547900][ T832] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.556312][T14443] Cannot find set identified by id 3 to match [ 277.596978][T14447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=14447 comm=syz.3.2429 [ 277.654891][ T5341] Dev loop2: unable to read RDB block 7 [ 277.656766][ T5341] loop2: AHDI p1 p2 p3 [ 277.658594][ T5341] loop2: partition table partially beyond EOD, truncated [ 277.662162][ T5341] loop2: p1 start 1601398130 is beyond EOD, truncated [ 277.664604][ T5341] loop2: p2 start 1702059890 is beyond EOD, truncated [ 277.687618][ T5950] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.695392][ T5950] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.699426][ T5950] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.705621][ T5950] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.708234][ T5950] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.735981][T14451] lo speed is unknown, defaulting to 1000 [ 277.739700][T14451] wg1 speed is unknown, defaulting to 1000 [ 277.773300][ T832] usb 13-1: GET_CAPABILITIES returned 0 [ 277.775763][ T832] usbtmc 13-1:16.0: can't read capabilities [ 277.885609][T14454] PKCS8: Unsupported PKCS#8 version [ 277.889485][T14454] __nla_validate_parse: 116 callbacks suppressed [ 277.889496][T14454] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2431'. [ 277.924698][ T5944] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 277.948780][T14451] chnl_net:caif_netlink_parms(): no params data found [ 277.958913][T14463] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2433'. [ 277.971258][T14464] 9pnet: Found fid 0 not clunked [ 277.990835][ C3] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 277.995207][ C3] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 277.999139][ C3] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.005620][ C3] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.006088][T14451] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.008503][ C3] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.010932][T14451] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.013899][ C3] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.013934][ C3] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.013967][ C3] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.016641][T14451] bridge_slave_0: entered allmulticast mode [ 278.019456][ C3] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.023890][T14451] bridge_slave_0: entered promiscuous mode [ 278.025949][ C3] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.029309][T14451] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.031556][ C3] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.033457][T14451] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.040559][ C3] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.042600][T14451] bridge_slave_1: entered allmulticast mode [ 278.045311][ C3] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.045357][ C3] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.049415][T14451] bridge_slave_1: entered promiscuous mode [ 278.050785][ C3] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.063329][ C3] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.070727][T14451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.074880][T10028] usb 13-1: USB disconnect, device number 6 [ 278.076286][T14451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.103080][T14451] team0: Port device team_slave_0 added [ 278.106326][T14451] team0: Port device team_slave_1 added [ 278.121561][T14451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.123816][T14451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.132659][T14451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.137966][T14451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.140450][T14451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.150790][T14451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.174779][T14451] hsr_slave_0: entered promiscuous mode [ 278.175164][T14474] tmpfs: Bad value for 'mpol' [ 278.177042][T14451] hsr_slave_1: entered promiscuous mode [ 278.180307][T14451] debugfs: 'hsr0' already exists in 'hsr' [ 278.182226][T14451] Cannot create hsr debugfs directory [ 278.658288][T14502] xt_hashlimit: overflow, rate too high: 0 [ 278.671739][T14502] fuse: Bad value for 'rootmode' [ 278.682278][T14502] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2443'. [ 278.716141][ T104] bridge_slave_1: left allmulticast mode [ 278.721120][ T104] bridge_slave_1: left promiscuous mode [ 278.723377][ T104] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.728473][ T104] bridge_slave_0: left allmulticast mode [ 278.732799][ T104] bridge_slave_0: left promiscuous mode [ 278.735431][ T104] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.836882][ T104] batman_adv: batadv0: Removing interface: gretap1 [ 278.849928][ T104] bond11 (unregistering): (slave gretap2): Releasing active interface [ 279.118623][ T104] bond7 (unregistering): (slave bridge3): Releasing active interface [ 279.289414][ T104] bond9 (unregistering): (slave bridge7): Releasing active interface [ 279.493157][ T104] bond1 (unregistering): Released all slaves [ 279.501426][ T104] bond2 (unregistering): Released all slaves [ 279.508815][ T104] bond3 (unregistering): Released all slaves [ 279.517426][ T104] bond4 (unregistering): (slave bond5): Releasing backup interface [ 279.520939][ T104] bond4 (unregistering): Released all slaves [ 279.530335][ T104] bond5 (unregistering): Released all slaves [ 279.543730][ T104] bond6 (unregistering): Released all slaves [ 279.551639][ T104] bond7 (unregistering): Released all slaves [ 279.564306][ T104] bond8 (unregistering): Released all slaves [ 279.578042][ T104] bond9 (unregistering): Released all slaves [ 279.585432][ T104] bond10 (unregistering): Released all slaves [ 279.592426][ T104] bond11 (unregistering): Released all slaves [ 279.602057][ T104] bond12 (unregistering): Released all slaves [ 279.610333][ T104] bond0 (unregistering): Released all slaves [ 279.702599][T14519] sysfs: cannot create duplicate filename '/class/ieee80211/1^!' [ 279.706110][T14519] CPU: 1 UID: 0 PID: 14519 Comm: syz.6.2446 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.706143][T14519] Tainted: [L]=SOFTLOCKUP [ 279.706152][T14519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 279.706165][T14519] Call Trace: [ 279.706172][T14519] [ 279.706179][T14519] dump_stack_lvl+0x100/0x190 [ 279.706214][T14519] sysfs_warn_dup.cold+0x1c/0x28 [ 279.706244][T14519] sysfs_do_create_link_sd+0x113/0x140 [ 279.706279][T14519] sysfs_create_link+0x61/0xc0 [ 279.706310][T14519] device_add+0x675/0x1950 [ 279.706349][T14519] ? __pfx_device_add+0x10/0x10 [ 279.706387][T14519] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 279.706420][T14519] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 279.706460][T14519] wiphy_register+0x1e5b/0x2d30 [ 279.706488][T14519] ? __rtnl_unlock+0xb9/0xf0 [ 279.706517][T14519] ? netdev_run_todo+0x7d0/0x12c0 [ 279.706549][T14519] ? __pfx_wiphy_register+0x10/0x10 [ 279.706579][T14519] ? __asan_memset+0x23/0x50 [ 279.706606][T14519] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 279.706646][T14519] ieee80211_register_hw+0x2cfd/0x4140 [ 279.706689][T14519] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 279.706718][T14519] ? __pfx___debug_object_init+0x10/0x10 [ 279.706751][T14519] ? find_held_lock+0x2b/0x80 [ 279.706779][T14519] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 279.706808][T14519] ? __hrtimer_setup+0x178/0x280 [ 279.706832][T14519] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 279.706880][T14519] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 279.706910][T14519] ? __asan_memcpy+0x3c/0x60 [ 279.706942][T14519] hwsim_new_radio_nl+0xc1f/0x1340 [ 279.706974][T14519] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 279.707012][T14519] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 279.707033][T14519] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 279.707060][T14519] genl_family_rcv_msg_doit+0x214/0x300 [ 279.707084][T14519] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 279.707131][T14519] ? bpf_lsm_capable+0x9/0x10 [ 279.707154][T14519] ? security_capable+0x80/0x260 [ 279.707178][T14519] ? ns_capable+0xd2/0xf0 [ 279.707204][T14519] genl_rcv_msg+0x560/0x800 [ 279.707227][T14519] ? __pfx_genl_rcv_msg+0x10/0x10 [ 279.707248][T14519] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 279.707287][T14519] netlink_rcv_skb+0x159/0x420 [ 279.707315][T14519] ? __pfx_genl_rcv_msg+0x10/0x10 [ 279.707337][T14519] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 279.707376][T14519] ? netlink_deliver_tap+0x1ae/0xcc0 [ 279.707408][T14519] genl_rcv+0x28/0x40 [ 279.707443][T14519] netlink_unicast+0x5aa/0x870 [ 279.707476][T14519] ? __pfx_netlink_unicast+0x10/0x10 [ 279.707515][T14519] netlink_sendmsg+0x8b0/0xda0 [ 279.707549][T14519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.707579][T14519] ? __might_fault+0x20/0x140 [ 279.707618][T14519] ____sys_sendmsg+0x9e1/0xb70 [ 279.707647][T14519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.707678][T14519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.707714][T14519] ? __pfx_futex_wake_mark+0x10/0x10 [ 279.707744][T14519] ___sys_sendmsg+0x190/0x1e0 [ 279.707766][T14519] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.707822][T14519] __sys_sendmsg+0x170/0x220 [ 279.707849][T14519] ? __pfx___sys_sendmsg+0x10/0x10 [ 279.707873][T14519] ? __x64_sys_futex+0x34f/0x4d0 [ 279.707911][T14519] do_syscall_64+0x106/0xf80 [ 279.707938][T14519] ? clear_bhb_loop+0x40/0x90 [ 279.707963][T14519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.707983][T14519] RIP: 0033:0x7ffb9779c799 [ 279.708002][T14519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.708019][T14519] RSP: 002b:00007ffb98660028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.708039][T14519] RAX: ffffffffffffffda RBX: 00007ffb97a16090 RCX: 00007ffb9779c799 [ 279.708051][T14519] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 279.708063][T14519] RBP: 00007ffb97832c99 R08: 0000000000000000 R09: 0000000000000000 [ 279.708077][T14519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.708089][T14519] R13: 00007ffb97a16128 R14: 00007ffb97a16090 R15: 00007ffff1c42a08 [ 279.708118][T14519] [ 279.920098][ T5944] Bluetooth: hci4: command tx timeout [ 279.920125][ T104] : left promiscuous mode [ 279.954155][T14451] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 279.981960][T14451] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 280.019072][T14451] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 280.036923][T14544] input: syz0 as /devices/virtual/input/input24 [ 280.056387][T14451] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 280.075029][ T104] tipc: Disabling bearer [ 280.079292][ T40] audit: type=1400 audit(2000000014.798:1800): avc: denied { mount } for pid=14545 comm="syz.6.2454" name="/" dev="configfs" ino=3082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 280.090494][ T104] tipc: Left network mode [ 280.094387][ T40] audit: type=1400 audit(2000000014.807:1801): avc: denied { search } for pid=14545 comm="syz.6.2454" name="/" dev="configfs" ino=3082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 280.102450][ T40] audit: type=1400 audit(2000000014.807:1802): avc: denied { search } for pid=14545 comm="syz.6.2454" name="/" dev="configfs" ino=3082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 280.110964][ T40] audit: type=1400 audit(2000000014.807:1803): avc: denied { setattr } for pid=14545 comm="syz.6.2454" name="/" dev="configfs" ino=3082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 280.348355][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2458'. [ 280.405289][T14451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.413247][T14451] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.430918][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.433282][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.436606][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.438916][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.442503][ T5944] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 280.606475][T14595] syz_tun: entered allmulticast mode [ 280.623675][T14451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.646108][T14451] veth0_vlan: entered promiscuous mode [ 280.650901][T14451] veth1_vlan: entered promiscuous mode [ 280.688537][T14451] veth0_macvtap: entered promiscuous mode [ 280.694959][T14451] veth1_macvtap: entered promiscuous mode [ 280.704940][T14451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.712979][T14451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.722230][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.733081][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.736671][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.742196][T14598] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 280.749099][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.838216][T14604] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2463'. [ 281.083021][T14632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14632 comm=syz.7.2468 [ 281.317075][ T40] audit: type=1400 audit(2000000015.957:1804): avc: denied { getopt } for pid=14654 comm="syz.7.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 281.552442][T14594] syz_tun: left allmulticast mode [ 282.007553][ T40] audit: type=1326 audit(2000000016.593:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14670 comm="syz.7.2479" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f654379c799 code=0x0 [ 282.128886][ T5944] Bluetooth: hci4: command tx timeout [ 282.471008][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 282.471121][ T50] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 282.476607][ T50] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 283.116303][T14701] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2483'. [ 283.540942][T14725] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2492'. [ 283.612037][T14728] netlink: 'syz.7.2493': attribute type 39 has an invalid length. [ 284.352597][ T5944] Bluetooth: hci4: command tx timeout [ 284.694600][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout [ 284.694623][ T50] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 284.698969][ T50] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 284.792381][T14738] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2497'. [ 284.795284][T14738] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2497'. [ 286.041738][T14745] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 286.049060][T14745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14745 comm=syz.7.2499 [ 286.076437][T14745] lo speed is unknown, defaulting to 1000 [ 286.080257][T14745] wg1 speed is unknown, defaulting to 1000 [ 286.576681][ T5944] Bluetooth: hci4: command tx timeout [ 286.929205][ T50] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 286.931062][ T50] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 287.038940][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.042642][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.058114][T14758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=14758 comm=syz.6.2504 [ 287.059957][T10626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.066703][T10626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.117453][T14761] ================================================================== [ 287.120102][T14761] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4c/0xd0 [ 287.122695][T14761] Write of size 4 at addr ffff88802d509f08 by task syz.6.2506/14761 [ 287.126934][T14761] [ 287.128363][T14761] CPU: 1 UID: 0 PID: 14761 Comm: syz.6.2506 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.128383][T14761] Tainted: [L]=SOFTLOCKUP [ 287.128387][T14761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 287.128394][T14761] Call Trace: [ 287.128400][T14761] [ 287.128405][T14761] dump_stack_lvl+0x100/0x190 [ 287.128427][T14761] print_report+0x156/0x4c9 [ 287.128443][T14761] ? __virt_addr_valid+0x81/0x620 [ 287.128461][T14761] ? __phys_addr+0xe8/0x180 [ 287.128477][T14761] ? try_module_get+0x4c/0xd0 [ 287.128491][T14761] kasan_report+0xdf/0x1e0 [ 287.128502][T14761] ? try_module_get+0x4c/0xd0 [ 287.128517][T14761] kasan_check_range+0x10f/0x1e0 [ 287.128529][T14761] try_module_get+0x4c/0xd0 [ 287.128544][T14761] dvb_device_open+0x124/0x3b0 [ 287.128560][T14761] ? __pfx_dvb_device_open+0x10/0x10 [ 287.128574][T14761] chrdev_open+0x234/0x6a0 [ 287.128586][T14761] ? __pfx_chrdev_open+0x10/0x10 [ 287.128598][T14761] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 287.128613][T14761] do_dentry_open+0x6d8/0x1660 [ 287.128623][T14761] ? __pfx_chrdev_open+0x10/0x10 [ 287.128636][T14761] vfs_open+0x82/0x3f0 [ 287.128651][T14761] path_openat+0x208c/0x31a0 [ 287.128665][T14761] ? __pfx_path_openat+0x10/0x10 [ 287.128679][T14761] do_file_open+0x20e/0x430 [ 287.128691][T14761] ? __pfx_do_file_open+0x10/0x10 [ 287.128707][T14761] ? alloc_fd+0x476/0x790 [ 287.128719][T14761] ? do_getname+0x191/0x390 [ 287.128734][T14761] do_sys_openat2+0x10d/0x1e0 [ 287.128747][T14761] ? __pfx_do_sys_openat2+0x10/0x10 [ 287.128763][T14761] __x64_sys_openat+0x12d/0x210 [ 287.128776][T14761] ? __pfx___x64_sys_openat+0x10/0x10 [ 287.128791][T14761] ? do_user_addr_fault+0x8d6/0x12f0 [ 287.128804][T14761] do_syscall_64+0x106/0xf80 [ 287.128819][T14761] ? clear_bhb_loop+0x40/0x90 [ 287.128831][T14761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.128842][T14761] RIP: 0033:0x7ffb9775cfce [ 287.128853][T14761] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 287.128868][T14761] RSP: 002b:00007ffb98680b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 287.128885][T14761] RAX: ffffffffffffffda RBX: 00007ffb986816c0 RCX: 00007ffb9775cfce [ 287.128894][T14761] RDX: 0000000000000002 RSI: 00007ffb98680c00 RDI: ffffffffffffff9c [ 287.128904][T14761] RBP: 00007ffb98680c00 R08: 0000000000000000 R09: 0000000000000000 [ 287.128913][T14761] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 287.128922][T14761] R13: 00007ffb97a16038 R14: 00007ffb97a15fa0 R15: 00007ffff1c42a08 [ 287.128933][T14761] [ 287.128937][T14761] [ 287.233157][T14761] Allocated by task 1: [ 287.234955][T14761] kasan_save_stack+0x30/0x50 [ 287.236940][T14761] kasan_save_track+0x14/0x30 [ 287.238930][T14761] __kasan_kmalloc+0xaa/0xb0 [ 287.240918][T14761] bus_add_driver+0x92/0x5b0 [ 287.242995][T14761] driver_register+0x1e2/0x360 [ 287.245162][T14761] vidtv_bridge_init+0x38/0x70 [ 287.247275][T14761] do_one_initcall+0x11d/0x760 [ 287.249294][T14761] kernel_init_freeable+0x6e5/0x7a0 [ 287.251465][T14761] kernel_init+0x1f/0x1e0 [ 287.253342][T14761] ret_from_fork+0x754/0xd80 [ 287.255422][T14761] ret_from_fork_asm+0x1a/0x30 [ 287.257669][T14761] [ 287.258863][T14761] The buggy address belongs to the object at ffff88802d509e00 [ 287.258863][T14761] which belongs to the cache kmalloc-256 of size 256 [ 287.264280][T14761] The buggy address is located 56 bytes to the right of [ 287.264280][T14761] allocated 208-byte region [ffff88802d509e00, ffff88802d509ed0) [ 287.269983][T14761] [ 287.270920][T14761] The buggy address belongs to the physical page: [ 287.273438][T14761] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802d509800 pfn:0x2d508 [ 287.277910][T14761] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 287.281554][T14761] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 287.284735][T14761] page_type: f5(slab) [ 287.286459][T14761] raw: 00fff00000000240 ffff88801b842b40 ffffea0000fa6e90 ffffea0000fac890 [ 287.290107][T14761] raw: ffff88802d509800 000000080010000d 00000000f5000000 0000000000000000 [ 287.293774][T14761] head: 00fff00000000240 ffff88801b842b40 ffffea0000fa6e90 ffffea0000fac890 [ 287.297879][T14761] head: ffff88802d509800 000000080010000d 00000000f5000000 0000000000000000 [ 287.302175][T14761] head: 00fff00000000001 ffffea0000b54201 00000000ffffffff 00000000ffffffff [ 287.306093][T14761] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 287.309476][T14761] page dumped because: kasan: bad access detected [ 287.311697][T14761] page_owner tracks the page as allocated [ 287.313643][T14761] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19149969721, free_ts 0 [ 287.320297][T14761] post_alloc_hook+0x153/0x170 [ 287.322075][T14761] get_page_from_freelist+0x111d/0x3140 [ 287.324250][T14761] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 287.326361][T14761] new_slab+0xa6/0x6b0 [ 287.327588][T14761] refill_objects+0x26b/0x400 [ 287.329107][T14761] __pcs_replace_empty_main+0x1ab/0x660 [ 287.330902][T14761] __kmalloc_cache_noprof+0x493/0x6f0 [ 287.332700][T14761] bus_add_driver+0x92/0x5b0 [ 287.334244][T14761] driver_register+0x1e2/0x360 [ 287.335761][T14761] usb_register_driver+0x21c/0x3e0 [ 287.337417][T14761] do_one_initcall+0x11d/0x760 [ 287.339041][T14761] kernel_init_freeable+0x6e5/0x7a0 [ 287.340753][T14761] kernel_init+0x1f/0x1e0 [ 287.342400][T14761] ret_from_fork+0x754/0xd80 [ 287.344004][T14761] ret_from_fork_asm+0x1a/0x30 [ 287.345600][T14761] page_owner free stack trace missing [ 287.348125][T14761] [ 287.349293][T14761] Memory state around the buggy address: [ 287.351857][T14761] ffff88802d509e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 287.355259][T14761] ffff88802d509e80: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 287.357917][T14761] >ffff88802d509f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 287.360441][T14761] ^ [ 287.361844][T14761] ffff88802d509f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 287.364465][T14761] ffff88802d50a000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 287.367595][T14761] ================================================================== [ 287.378143][T14761] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 287.380720][T14761] CPU: 0 UID: 0 PID: 14761 Comm: syz.6.2506 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.384995][T14761] Tainted: [L]=SOFTLOCKUP [ 287.387052][T14761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 287.391375][T14761] Call Trace: SYZFAIL: failed to recv rpc [ 287.392832][T14761] fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 287.394237][T14761] dump_stack_lvl+0x100/0x190 [ 287.396453][T14761] vpanic+0x552/0x970 [ 287.398170][T14761] ? __pfx_vpanic+0x10/0x10 [ 287.400135][T14761] ? try_module_get+0x4c/0xd0 [ 287.402160][T14761] panic+0xd1/0xe0 [ 287.403776][T14761] ? __pfx_panic+0x10/0x10 [ 287.405681][T14761] ? try_module_get+0x4c/0xd0 [ 287.407697][T14761] ? preempt_schedule_common+0x42/0xc0 [ 287.410085][T14761] check_panic_on_warn.cold+0x19/0x34 [ 287.412730][T14761] end_report.part.0+0x3a/0x90 [ 287.415256][T14761] kasan_report.cold+0xe/0x18 [ 287.417506][T14761] ? try_module_get+0x4c/0xd0 [ 287.419541][T14761] kasan_check_range+0x10f/0x1e0 [ 287.421654][T14761] try_module_get+0x4c/0xd0 [ 287.423639][T14761] dvb_device_open+0x124/0x3b0 [ 287.425617][T14761] ? __pfx_dvb_device_open+0x10/0x10 [ 287.427674][T14761] chrdev_open+0x234/0x6a0 [ 287.429612][T14761] ? __pfx_chrdev_open+0x10/0x10 [ 287.431797][T14761] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 287.434556][T14761] do_dentry_open+0x6d8/0x1660 [ 287.436660][T14761] ? __pfx_chrdev_open+0x10/0x10 [ 287.439076][T14761] vfs_open+0x82/0x3f0 [ 287.441055][T14761] path_openat+0x208c/0x31a0 [ 287.443185][T14761] ? __pfx_path_openat+0x10/0x10 [ 287.445445][T14761] do_file_open+0x20e/0x430 [ 287.447554][T14761] ? __pfx_do_file_open+0x10/0x10 [ 287.450113][T14761] ? alloc_fd+0x476/0x790 [ 287.452154][T14761] ? do_getname+0x191/0x390 [ 287.454171][T14761] do_sys_openat2+0x10d/0x1e0 [ 287.456468][T14761] ? __pfx_do_sys_openat2+0x10/0x10 [ 287.458860][T14761] __x64_sys_openat+0x12d/0x210 [ 287.460962][T14761] ? __pfx___x64_sys_openat+0x10/0x10 [ 287.463303][T14761] ? do_user_addr_fault+0x8d6/0x12f0 [ 287.465673][T14761] do_syscall_64+0x106/0xf80 [ 287.467690][T14761] ? clear_bhb_loop+0x40/0x90 [ 287.469824][T14761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.472585][T14761] RIP: 0033:0x7ffb9775cfce [ 287.474652][T14761] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 287.482686][T14761] RSP: 002b:00007ffb98680b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 287.486211][T14761] RAX: ffffffffffffffda RBX: 00007ffb986816c0 RCX: 00007ffb9775cfce [ 287.489509][T14761] RDX: 0000000000000002 RSI: 00007ffb98680c00 RDI: ffffffffffffff9c [ 287.493182][T14761] RBP: 00007ffb98680c00 R08: 0000000000000000 R09: 0000000000000000 [ 287.496819][T14761] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 287.500141][T14761] R13: 00007ffb97a16038 R14: 00007ffb97a15fa0 R15: 00007ffff1c42a08 [ 287.503473][T14761] [ 287.505703][T14761] Kernel Offset: disabled [ 287.507806][T14761] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:42:47 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81fc7d82 RDX=ffff888034f724c0 RSI=ffffffff81fc7d5c RDI=ffff888034f724c0 RBP=ffff88806a540da0 RSP=ffffc900038c7878 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4a81b5 R14=0000000000000001 R15=ffff88806a43c440 RIP=ffffffff81fc7d5e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d633f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c32262d CR3=000000000e598000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0023646e65746e6f 72662f2372657470 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff1c42ef6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff1c42ef6 00007ffff1c42efc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb9783327c ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb978332bc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb97833420 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb978332ae ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb979ec600 00007ffb979ec5e0 00007ffb979ec5e8 00007ffb979ec618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb979ec5f8 00007ffb979ec5c8 00007ffb979ec600 00007ffb979ec5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff857a46b5 RDI=ffffffff9b4a6b40 RBP=ffffffff9b4a6b00 RSP=ffffc90005b0f2b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666657 R12=0000000000000000 R13=000000000000002e R14=0000000000000010 R15=ffffffff857a4650 RIP=ffffffff857a46df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ffb986816c0 ffffffff 00c00000 GS =0000 ffff8880d643f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffb97785dc0 CR3=000000002d3f7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000000000000 Opmask02=0000000008000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff1c42ef6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff1c42ef6 00007ffff1c42efc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb9783327c ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb978332bc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb97833420 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb978332ae ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb979ec5f8 00007ffb979ec5c8 00007ffb979ec600 00007ffb979ec5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000021161d RBX=ffff88801eafc980 RCX=ffffffff8b909c75 RDX=0000000000000000 RSI=ffffffff8de788ab RDI=ffffffff8c1b1220 RBP=0000000000000000 RSP=ffffc90000187df0 R8 =0000000000000001 R9 =ffffed100d4c679d R10=ffff88806a633ceb R11=0000000000000000 R12=0000000000000002 R13=ffffed1003d5f930 R14=0000000000000002 R15=ffffffff90d9ae10 RIP=ffffffff8b9085df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d653f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f28e1a4eddd CR3=0000000037226000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000fcfc0000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc6b0fc56 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc6b0fc56 00007ffcc6b0fc5c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28e1a3327c ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28e1a332bc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28e1a33420 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28e1a332ae ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28e1bec5f8 00007f28e1bec5c8 00007f28e1bec600 00007f28e1bec5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=0000000000000001 RCX=ffffffff81fc7d82 RDX=0000000000000001 RSI=0000000000000000 RDI=0000000000000005 RBP=ffff88806a542e20 RSP=ffffc900048ff580 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4a85c5 R14=0000000000000001 R15=ffff88806a73c440 RIP=ffffffff8208da40 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555577f31500 ffffffff 00c00000 GS =0000 ffff8880d663f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc4b89f4b30 CR3=000000005f267000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=0000000008000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7570637265705f65 676173752e746363 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff1c42ef6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff1c42ef6 00007ffff1c42efc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb9783327c ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb978332bc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb97833420 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb978332ae ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000