last executing test programs: 3m15.404065279s ago: executing program 32 (id=632): modify_ldt$write(0x1, &(0x7f0000000100)={0x7, 0x20001000, 0x400}, 0x10) madvise(&(0x7f0000bde000/0x3000)=nil, 0x3000, 0xa) r0 = syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000040)={0x80000000, 0x0, {r0}, {r3}, 0xb, 0x1000000}) 3m15.403607591s ago: executing program 33 (id=557): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0x1) shutdown(r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r3) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xf4, r5, 0x10, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}]}, 0xf4}, 0x1, 0x0, 0x0, 0xc810}, 0x4000040) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r8, 0x16, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="0800050007030303030303000000d564c5a1911649f34e443fbcf83bfc41ea01990012cd1d23ce3195e4258b683b9917ab99a02ce34a558b"], 0x30}, 0x1, 0x0, 0x0, 0x24004084}, 0x40810) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x18, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}}, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0x80f0f000, 0x2, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x0, 0x0, [0x1]}) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) close_range(r1, r9, 0x0) write$sndseq(r9, &(0x7f0000000280)=[{0x2, 0x2, 0x1, 0x6, @time={0x0, 0x3}, {0xbf, 0x6}, {0x2e, 0x82}, @control={0x5, 0x8, 0x7}}, {0x4, 0x0, 0x80, 0x5, @tick=0xffffffff, {0x5, 0x81}, {0xff, 0x3}, @addr={0x6, 0x2}}, {0x9, 0xe1, 0x80, 0x40, @tick=0x200, {0x9, 0xd}, {0x2, 0x2}, @note={0x3, 0x1, 0x2, 0x3, 0x81}}, {0x4, 0x8, 0x6, 0xc, @tick=0xccff, {0x3, 0xd}, {0x8, 0xc2}, @note={0x9a, 0x40, 0xc1, 0x7, 0xf}}, {0xf, 0x8, 0xb, 0xdb, @tick=0x9, {0xa, 0x69}, {0x8, 0xe1}, @raw32={[0x5, 0x7, 0x6]}}, {0x86, 0xa, 0x7, 0x0, @tick=0x7, {0xf, 0xb2}, {0x21, 0xf1}, @ext={0x39, &(0x7f0000000240)="ed7b55a2782bb133c99eccdea6c64312c5b772511f3bbcd731c1cc1c4df4fad9b2454e36dfd5e52f11599e74798bc792b01e8439ee28446f27"}}], 0xa8) 2m58.603282852s ago: executing program 5 (id=897): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = creat(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x151) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x500000000000000) 2m58.522098378s ago: executing program 5 (id=898): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) socket$unix(0x1, 0x5, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) io_uring_setup(0x7d2e, &(0x7f0000002380)={0x0, 0xa205, 0x1046, 0x6}) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000100)='pim6reg1\x00') recvfrom$inet(r0, &(0x7f0000000200)=""/181, 0xb5, 0x0, 0x0, 0x0) r2 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000000}) 2m57.641833759s ago: executing program 5 (id=901): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r3 = fsmount(r2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r3, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18) listen(r0, 0x0) 2m57.639555196s ago: executing program 5 (id=903): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = creat(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0xd, &(0x7f0000000000), 0x8) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x0) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=virtio,', {[{@dfltuid}], [{@uid_lt}, {@uid_lt}]}}) read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x40009975, r1, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x151) r5 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) tkill(r5, 0x12) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x3, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {@in6=@private1, 0x40000fe, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x545}, {0x3, 0x7fffffffffffffff}, {0xfffffffd}, 0x70bd28, 0x3500, 0x2, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x4e24, @in=@dev={0xac, 0x14, 0x14, 0x2a}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x24040014) ptrace(0x4208, r5) 2m57.440624795s ago: executing program 5 (id=904): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4002, &(0x7f00000000c0)=0x4, 0x6, 0x5) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2242, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000004002, 0x0) r5 = dup(r4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r5, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) r7 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x9}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0) ioctl$TCSETS(r0, 0x804c4700, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) unshare(0x30060100) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x2) r9 = openat(0xffffffffffffff9c, 0x0, 0x101000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) fdatasync(r9) 2m57.137677012s ago: executing program 5 (id=906): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = creat(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x151) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x2400000000000000) 2m57.04866549s ago: executing program 34 (id=906): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = creat(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x151) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x2400000000000000) 2m16.59026401s ago: executing program 4 (id=1521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x38, r1, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='v'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4804) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x84}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) 2m16.528043881s ago: executing program 4 (id=1523): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) execveat(r0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000140), &(0x7f0000000240)={[&(0x7f00000001c0)='--\x00']}, 0x1000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r1, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'wlan0\x00', {0x2, 0x0, @loopback=0x7f000000}}) 2m16.442005733s ago: executing program 4 (id=1524): r0 = socket(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x100008}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, 0x0}, 0x20044010) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)=ANY=[@ANYBLOB="140000003800014b99bd7004ffdbdf250d"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r2) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x20, 0x5a, 0xc6b747b6bf1c6f95, 0x3, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) 2m16.381641349s ago: executing program 4 (id=1526): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x152) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0xfc, 0xfd, 0x0, 0x0, 0x7, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}, @FRA_DST={0x8, 0x1, @multicast1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000a00000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20c000, 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x152) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) umount2(&(0x7f0000000180)='./file0\x00', 0x1) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0xfc, 0xfd, 0x0, 0x0, 0x7, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}, @FRA_DST={0x8, 0x1, @multicast1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000a00000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8}, 0x94) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20c000, 0x2c) (async) 2m16.301980114s ago: executing program 4 (id=1529): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newrule={0x58, 0x20, 0x200, 0x70bd2a, 0x25dfdbfd, {0xa, 0x14, 0x30, 0x81, 0x40, 0x0, 0x0, 0x1, 0xa}, [@FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FRA_DST={0x14, 0x1, @loopback}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40041) 2m16.019707578s ago: executing program 4 (id=1541): bind$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose, 0x201}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r1, &(0x7f0000000140)=[{'PHONEIN', @void}, {'TREBLE', @val={' \'', 'Master Playback Switch'}}, {'LINE3', @void}, {'OGAIN', @val={' \'', 'Synth Capture'}}, {'DIGITAL3', @void}, {'LINE', @val={' \'', 'Synth Capture Switch'}}], 0xa8) (async) close(r1) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x2512, 0x4) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x808ed3a50aee9e48) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async, rerun: 32) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_kvm_setup_cpu$x86(r4, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000340)="66b80500000066b9326700000f01c167fbea0f008a0066b8f7fe00000f23c00f21f8663503000b000f23f80f0fb90000970ffb5b9fbaf80c66b89465ad8666efbafc0cb80000ef660f6c7d01d83a0fc71c", 0x51}], 0x1, 0x43, 0x0, 0x0) (async) setresuid(0xee00, 0x0, 0x0) (async, rerun: 32) ioprio_set$uid(0x3, 0xee00, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m15.969365912s ago: executing program 35 (id=1541): bind$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose, 0x201}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r1, &(0x7f0000000140)=[{'PHONEIN', @void}, {'TREBLE', @val={' \'', 'Master Playback Switch'}}, {'LINE3', @void}, {'OGAIN', @val={' \'', 'Synth Capture'}}, {'DIGITAL3', @void}, {'LINE', @val={' \'', 'Synth Capture Switch'}}], 0xa8) (async) close(r1) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x2512, 0x4) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x808ed3a50aee9e48) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async, rerun: 32) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_kvm_setup_cpu$x86(r4, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000340)="66b80500000066b9326700000f01c167fbea0f008a0066b8f7fe00000f23c00f21f8663503000b000f23f80f0fb90000970ffb5b9fbaf80c66b89465ad8666efbafc0cb80000ef660f6c7d01d83a0fc71c", 0x51}], 0x1, 0x43, 0x0, 0x0) (async) setresuid(0xee00, 0x0, 0x0) (async, rerun: 32) ioprio_set$uid(0x3, 0xee00, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m58.970612306s ago: executing program 7 (id=1769): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ppoll(&(0x7f00000000c0)=[{r3, 0xb}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000001c0)={0xf0f046, 0x7fff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x34, r5, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000000c0)='fd', 0x0, r1) (async) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000240)='\x04\x00\x16\x80\xa9\xb1& \xcc\xf3\x83\x06\xa5\x90$\x99wR\xf0-\xafH\xba\xe0\xcb\x8b\x04!M\xc4\xf4\x16\x1b\xc7\x06\x00\x00\x00\x00\x00\x00\x00\xcc\xe8\x82\xe4\xf7\xff\xc2\x94/\xfd\x1c3\xec\xd7\xdd\xba\x9a\x93\xb8\xbfa\x1b;\x96\xc1o\xc3-\a\x1c\xf0\xba\x850x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x2b, 0x1, 0x0) r9 = socket(0x11, 0x2, 0x0) setsockopt(r9, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r13 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_MOD(r13, 0x3, r12, &(0x7f00000000c0)={0x80002000}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r11, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$netlink(0x10, 0x3, 0x4) r14 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x445}}, @jmp={0x5, 0x0, 0x1, 0x2, 0x6, 0xfffffffffffffff4, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x958, 0x63, &(0x7f0000000200)=""/99, 0x40f00, 0x4, '\x00', r6, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x5, 0x7, 0x9, 0x4}, 0x10, 0x1e528, r14, 0x4, 0x0, &(0x7f00000003c0)=[{0x4, 0x1, 0x6, 0xa}, {0x0, 0x5, 0x3, 0xa}, {0x5, 0x1, 0x0, 0x6}, {0x3, 0x5, 0x5, 0xc}], 0x10, 0xa97}, 0x94) 1m58.689152871s ago: executing program 7 (id=1775): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e601bae74656e642c6163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000100)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000140)={0x0, 0xfb, 0x7d, 0x5, 0x9, "e7d6976f66356a36e26551b3730dadc2", "ca0cfdf095fd55065a26f3fa47d3fb517daa6c4b344afc21054f390439ca0a08e7439981969047ddcb5ca6a2ebdb8e275dea1d3551748bd8b03851966b38850f4dc4cb72a7e3152105932d455bb42ede7ed5c05305066e8edc9a93ac82f88cc45c71666dab40a029"}, 0x7d, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000000)) read$alg(r0, &(0x7f0000000280)=""/137, 0xfe7a) 1m58.600454021s ago: executing program 7 (id=1778): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x3069e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0xc0240, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1m43.596940873s ago: executing program 36 (id=1778): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x3069e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0xc0240, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1m34.899937634s ago: executing program 0 (id=2072): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0xe8, 0x150, 0x150, 0x0, 0x0, 0x1d8, 0x238, 0x206, 0x1d8, 0x238, 0x7fffffe, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], 'veth0_to_bond\x00', 'xfrm0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x96, 0x8, "478c7b28498b0690ca4c256a8c89381faee2fc6e1724511e33dac4ddb0c1"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x3d}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x88, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x101}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x64}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r2 = socket(0x11, 0x800, 0x100) bind$can_raw(r2, &(0x7f0000000000), 0x10) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r4}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x23939904284bff71, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000280)={@in6={0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, {&(0x7f0000000200)=""/66, 0x42}, &(0x7f0000000180), 0x8}, 0xa0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000140)) 1m34.840404344s ago: executing program 0 (id=2073): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r1, 0x80084522, &(0x7f0000001f40)=""/231) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000009c049c8db2ae5393dbb5ab249b25416956f04c12354f462efd8e3757524a8b53841600f083dd642101228c7ea7994616e643e493df2fed65a204ceba42dcc55106402076cba8af4d5e9be4e4a3d953a21078e0de379739019d834f41457133f3a7c9c70820af5e1b4aee57fcd33dfa57905f05b64ffeb92205a26c9eeaed0bb5af90b1b929829a164f2f00000000000000"], 0x50) r6 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r5, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r6}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000380)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @ldst={0x1, 0x3, 0x4, 0x6, 0x5, 0xc, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40be8100}], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x57, &(0x7f0000000540)=""/87, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000005c0)=[{0x5, 0x3, 0x9, 0x4}, {0x5, 0x5, 0x5}, {0x2, 0x5, 0x8, 0x7}, {0x5, 0x1, 0x1, 0x6}], 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='f2fs_direct_IO_exit\x00', r7, 0x0, 0x8}, 0x18) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r9, @ANYBLOB="050003"], 0x28}}, 0x0) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000007f070000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000014c0)={r10}, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r10, 0x0) sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r2], 0x1000f) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000001800010300ffffc4001000fe55540d534ad23b0d9ef7940e669b456da11f8598dc050986e573a8936c600b5784a494ec7a1672979bd2a79fda330fcd750841e8ec6ba67eb11db9031973f2d3e782606bfcc1202afbcbc5c6623caae48e858564bb38e7b08bbc465500ff5988218ce39db8f22c1b0cb7234daaaf80756025502112f29926b17abff6ff0c433be280a6ae90059fab97092e4d62b5cee59e2debd3c1d45ce008ac92252d698061fc259794af81c94dc63a4520b74ee8e267c8d3341e206f0f7c68df3590aef7d98301c63a19343b6d09acedab76782c00d1e623a48819798db83ad449e198d1f17ddf8a527c701bb3a5447442aabc277b4be5c52cda5ae48cb8e1ced36eaa78914eb7ce2ee49c7e129e8805295d1dfec47fccd6d9dc9eed647e05d872321ede05e854081bca7e3c23"], 0x10a) 1m34.509482827s ago: executing program 0 (id=2081): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, '\x00', @bt={0x7f06f4f1, 0x80, 0x8, 0x7, 0x0, 0x27, 0x5}}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4603240095258000000000000003003e0001010000940200000000000040000000000000004d02000000000000f6ffffff0000380046"], 0x78) close(r0) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x40) r2 = openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x123482, 0x0) dup3(r2, r1, 0x0) name_to_handle_at(r0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000200), 0x1000) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1m34.451044692s ago: executing program 0 (id=2083): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r1, 0x3, 0x0) getdents64(r1, &(0x7f0000003440)=""/99, 0x63) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200880, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x7], [{0x600, 0xffffffff}, {0x2, 0xffffffff}, {0x8, 0xffff}, {0x6}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x2000}, {0x0, 0x200001}], 0x10}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r4, &(0x7f0000000600)="ee5a7af0fa946c4ebc", 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x145}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5378}, [@call={0x85, 0x0, 0x0, 0xb8}, @alu={0x4, 0x0, 0x0, 0x0, 0x2, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}]}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94) 1m34.361066459s ago: executing program 0 (id=2084): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000440)={{0x0, 0x0, 0x80}}) 1m34.360488484s ago: executing program 0 (id=2085): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)='{', 0x1a000}], 0x1}}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sync() 1m19.202508267s ago: executing program 37 (id=2085): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)='{', 0x1a000}], 0x1}}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sync() 1m15.779868742s ago: executing program 9 (id=2220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_POLICE={0xc, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x80}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x800) 1m15.601273058s ago: executing program 9 (id=2221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 64) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) close(r1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) (async, rerun: 64) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async, rerun: 64) r6 = dup3(r5, r4, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) r7 = signalfd4(r1, &(0x7f0000000140)={[0xaf]}, 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 1m15.491112701s ago: executing program 9 (id=2223): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) connect$x25(r1, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="9500"/17], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='pids.current\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={0x0}, 0x1, 0x0, 0x0, 0x200400d0}, 0x40) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'geneve1\x00'}) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x30) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x4) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r7, 0x104, 0x4, &(0x7f0000000080)=0x3, 0x4) r8 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r9 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) write$sndseq(r9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, 0x0, 0x40004) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022dbd7000ffdbdf25140000000800110000040000050018000000000008000e000700000008000f0002000000080015000400000008000200000000000800030004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x8010) 1m15.379532371s ago: executing program 9 (id=2225): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) syz_emit_ethernet(0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaff09dfffffff0800450000370000000000019078ac9078030000004500000000000000002f0000ac14140ae0000f01040065580000ff00000000"], 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="180808000000000000000000000000001811000055f300dc", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000b5090100000001039500000000000000b509000002000000639a04fe00000000b509000000000000c39a04fee1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x110a}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000800)={@flat=@handle={0x73682a85, 0x1100, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) socket(0x2, 0x80805, 0x0) 1m14.80020915s ago: executing program 9 (id=2227): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00000000000000005000128008000100677470004400028008000100", @ANYRES32=0x0, @ANYBLOB="8400000010000d0400"/20, @ANYRES32, @ANYBLOB="0e67eb953255597db5283dedcd0100dae0775f739c30f5e7fc082935c3c813", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYRESOCT=r0, @ANYRES8=r0], 0x84}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fedbdf256c00000008000300", @ANYRES32=0x0, @ANYBLOB="0100000012cc62"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2, 0x0) chdir(&(0x7f0000000300)='./file0\x00') syz_io_uring_setup(0x8007440, &(0x7f00000004c0)={0x0, 0xa6e9, 0x400, 0x2, 0xfffffffb}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000003c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x14, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 1m14.541016714s ago: executing program 9 (id=2232): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a000000080002004c433b0de47a48861acd7fc3e56e30349baf60abb8038321f299b2a4139ebfb5f229ab4a118fbb5caf18a7b0094f99184c58ca9ca341d29e7e79db1c547f8b4a21dcc5b4a2c691322b740cce246791a296c6a57b5488758d61d1d9125cb1f0260452420af1ce6bdd76a7b4556dc4e8103019f9159af9d0f6a1ebdc56a713ab55ebeaef148fb3f90f8e289261d319fc2d517258dd66ff71fdb50b225269e59b11f853c7c2de6694e10bab0c259d4634f9c92d0502", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x60341, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x60341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) pwritev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="096baafd51599fd5094faa89e14b3124a811ffe66454d90a6d53de451cbfb68afd2cb5215d020db3433dad9062a1b94599d39e30d4e5d1639320157ac8535e8c88eec2707aa57234b3bebff758049e610791a88075eaa253ce77e4050df6ae588538092173f6e4dccd959f2fd919ed76f69ea4245d4a9f23d52bd75f191fe57957e83c1f826f3d3d24b0fa4220fb04000000caee020edea23ae46078818ed034ffd1ce73ce1d23e178bf62fdc6426748c73d832d83b45c02652d9f340c17926d4a1bd7a795efca4e5a34f5d7f596c303", 0xffffff18}, {0x0}], 0x2, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xd85fd000) r4 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000646000/0x2000)=nil, 0x2000, 0xb635773f07ebbeee, 0x12, r4, 0x0) (async) mmap(&(0x7f0000646000/0x2000)=nil, 0x2000, 0xb635773f07ebbeee, 0x12, r4, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) (async) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r5, 0x0, 0xc, &(0x7f0000000040)=0x3, 0x2) recvmmsg(r5, &(0x7f0000005100)=[{{0x0, 0x0, 0x0}, 0xa65}], 0x1, 0x45833af92e4b39ff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r7}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@ipv4_getrule={0x1c, 0x22, 0x1, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x7, 0x3}, ["", "", "", ""]}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@ipv4_getrule={0x1c, 0x22, 0x1, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x7, 0x3}, ["", "", "", ""]}, 0x1c}}, 0x0) 59.236767476s ago: executing program 38 (id=2232): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a000000080002004c433b0de47a48861acd7fc3e56e30349baf60abb8038321f299b2a4139ebfb5f229ab4a118fbb5caf18a7b0094f99184c58ca9ca341d29e7e79db1c547f8b4a21dcc5b4a2c691322b740cce246791a296c6a57b5488758d61d1d9125cb1f0260452420af1ce6bdd76a7b4556dc4e8103019f9159af9d0f6a1ebdc56a713ab55ebeaef148fb3f90f8e289261d319fc2d517258dd66ff71fdb50b225269e59b11f853c7c2de6694e10bab0c259d4634f9c92d0502", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x60341, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x60341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) pwritev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="096baafd51599fd5094faa89e14b3124a811ffe66454d90a6d53de451cbfb68afd2cb5215d020db3433dad9062a1b94599d39e30d4e5d1639320157ac8535e8c88eec2707aa57234b3bebff758049e610791a88075eaa253ce77e4050df6ae588538092173f6e4dccd959f2fd919ed76f69ea4245d4a9f23d52bd75f191fe57957e83c1f826f3d3d24b0fa4220fb04000000caee020edea23ae46078818ed034ffd1ce73ce1d23e178bf62fdc6426748c73d832d83b45c02652d9f340c17926d4a1bd7a795efca4e5a34f5d7f596c303", 0xffffff18}, {0x0}], 0x2, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xd85fd000) r4 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000646000/0x2000)=nil, 0x2000, 0xb635773f07ebbeee, 0x12, r4, 0x0) (async) mmap(&(0x7f0000646000/0x2000)=nil, 0x2000, 0xb635773f07ebbeee, 0x12, r4, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) (async) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r5, 0x0, 0xc, &(0x7f0000000040)=0x3, 0x2) recvmmsg(r5, &(0x7f0000005100)=[{{0x0, 0x0, 0x0}, 0xa65}], 0x1, 0x45833af92e4b39ff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r7}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@ipv4_getrule={0x1c, 0x22, 0x1, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x7, 0x3}, ["", "", "", ""]}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@ipv4_getrule={0x1c, 0x22, 0x1, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x7, 0x3}, ["", "", "", ""]}, 0x1c}}, 0x0) 41.255927027s ago: executing program 8 (id=2048): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x0) 34.301304151s ago: executing program 8 (id=2048): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x0) 31.980848347s ago: executing program 2 (id=2508): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x0, 0x5}, {0x1, 0x3}, {0x7, 0x1}, {0x10}, {0x10, 0x3}, {0x0, 0x1}, {0xb, 0x3}, {0x2, 0x5}, {0x8}]}]}, {0x0, [0x2e]}}, &(0x7f0000000a40)=""/4096, 0x6f, 0x1000, 0x0, 0x8, 0x10000, @value=r0}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0xd744, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @value=r1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, r5, 0x180000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001007866726d000000000c00028008000200ea000000140003007866726d30"], 0x50}}, 0x0) 31.980344154s ago: executing program 2 (id=2509): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x437, 0x1, 0x25dfdbb8, {0x0, 0x0, 0x0, r1, 0x40c89}, [@IFLA_NET_NS_FD={0x8, 0x1c, r0}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) fchdir(r3) socket(0x10, 0x803, 0x0) (async) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x437, 0x1, 0x25dfdbb8, {0x0, 0x0, 0x0, r1, 0x40c89}, [@IFLA_NET_NS_FD={0x8, 0x1c, r0}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) (async) socket$inet(0x2, 0x2, 0x0) (async) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) (async) fchdir(r3) (async) 31.880971541s ago: executing program 2 (id=2510): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) (async, rerun: 32) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) (async, rerun: 32) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async, rerun: 32) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xc, 0xf, 0x9, 0x3, 0x9}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) (async, rerun: 32) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) (async) write$tun(r1, &(0x7f0000000100)={@void, @val={0x1, 0x80, 0x3, 0x7, 0xfa47, 0x141}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @remote, @multicast2, @random="09e5cf3a2238", @multicast2}}, 0x26) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) (async, rerun: 32) fcntl$setlease(r0, 0x400, 0x3) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async, rerun: 64) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 64) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) getdents64(r6, 0x0, 0x0) (async, rerun: 64) syz_fuse_handle_req(r4, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)={0x10}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$TCSETA(r0, 0x8924, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) (async, rerun: 64) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8) 31.878771526s ago: executing program 2 (id=2513): ioctl$CDROMSEEK(0xffffffffffffffff, 0x5316, &(0x7f0000000000)={0x5, 0x4, 0x5, 0x5, 0x2, 0x9}) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$CDROMPLAYMSF(r0, 0x5303, &(0x7f0000000080)={0x0, 0x2, 0x1, 0x80, 0x9, 0x81}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x408281, 0x0) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000500)={0x3, 0x0, 0x8, 0x5, 0xe2, &(0x7f0000000100)}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000540)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000580)={0x0, r0, 0x80000}) read$msr(r2, &(0x7f00000005c0)=""/214, 0xd6) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000006c0)=0xf) r3 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000700)='cifs.spnego\x00', &(0x7f0000000740)={'syz', 0x0}, &(0x7f0000000780)="b3981174b0f7baae977512bf2fbdf363ca51b15647d3ca5d50abbe0191238364af7d141f2ff7c6f977e3d297dcd55829d7950786330375e810ae1d2a7bf0042fea18c7fd62fba1ead281d2e48467cf56614217e433ed9a37aa2c00c688c9da1e", 0x60, r3) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000880)) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000008c0)={0x7fff, 0xfffffeff, 0x7, 0x6, 0x10, "b46e0f31d8319bb34fda73273c2f647bc2581d"}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000900)={0x2}) close_range(0xffffffffffffffff, r1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000940)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000980)={r4, 0xe}) socket$inet(0x2, 0x800, 0x80000000) recvmsg$unix(r2, &(0x7f0000000cc0)={&(0x7f00000009c0), 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000a40)=""/63, 0x3f}, {&(0x7f0000000a80)=""/232, 0xe8}, {&(0x7f0000000b80)=""/170, 0xaa}], 0x3, &(0x7f0000000c80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x10122) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000d00)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r5, 0xc0086421, &(0x7f0000000d40)={r7, 0x1}) ioctl$KDENABIO(r5, 0x4b36) ioctl$CDROMREADCOOKED(r5, 0x5315, &(0x7f0000000d80)) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r6, 0x4010ae74, &(0x7f0000001800)={0x100, 0x8, 0x363}) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000001840)={0x800, 0x4, 0x6, 0xff, 0x11, "a9d0d59fdae4140d99e0a05b7e20578020c75f"}) ioctl$CDROM_CLEAR_OPTIONS(r2, 0x5321, 0x9) r8 = add_key$keyring(&(0x7f0000001900), &(0x7f0000001940)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x3}, 0x0, 0x0, r8) write$char_usb(r2, &(0x7f0000001980)="117b7fcb9167c7bb811d7e00b1fe5115d862eb", 0x13) open_tree(r5, &(0x7f00000019c0)='./file0\x00', 0x8800) 31.561031985s ago: executing program 2 (id=2517): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x423800, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000080)=0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x3}, 0x6) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x181702, 0x0) poll(&(0x7f0000000180)=[{r3, 0x20}], 0x1, 0x2) write$ppp(r3, &(0x7f00000004c0)="c2cf7789", 0x4) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) socket$kcm(0x29, 0x2, 0x0) 30.946982599s ago: executing program 2 (id=2520): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_STATUS_MASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r9, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) (async) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r9, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r8, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r8, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @empty}, {0x1}, 0x0, {0x2, 0x4e23, @multicast2}, 'pimreg\x00'}) ioctl$KVM_RUN(r11, 0xae80, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x78, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x307}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x3, 0x9, 0x9, 0x1, 0x9, 0x3, 0x2]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 25.978285932s ago: executing program 8 (id=2048): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x0) 18.471019611s ago: executing program 8 (id=2048): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x0) 14.981402092s ago: executing program 39 (id=2520): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_STATUS_MASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r9, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) (async) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r9, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r8, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r8, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @empty}, {0x1}, 0x0, {0x2, 0x4e23, @multicast2}, 'pimreg\x00'}) ioctl$KVM_RUN(r11, 0xae80, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x78, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x307}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x3, 0x9, 0x9, 0x1, 0x9, 0x3, 0x2]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 10.999642822s ago: executing program 8 (id=2048): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x0) 3.649489288s ago: executing program 1 (id=2706): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) 3.64512081s ago: executing program 1 (id=2708): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "69ae34e5210887d8", "a5d6152f23e3ffbcb7da802ed111a51d", "5a7a178c", "e54f04e2181c110c"}, 0x28) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0xc9, 0x8200, 0x3, 0xa281, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x5dc}, &(0x7f0000000140)=0x8) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) write$cgroup_int(r1, &(0x7f00000001c0)=0xec7, 0x12) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000200)={r3, 0x1c0, 0x10, 0x5, 0x6}, &(0x7f0000000240)=0x18) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/keys\x00', 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x23, 0xba, 0x47, 0x7, 0x0, 0x2, 0x3e, 0x8, 0x219, 0x38, 0x6b, 0xa8, 0x9, 0x20, 0x2, 0x9, 0x6}, [{0x1, 0x0, 0x5, 0x9, 0x101, 0x1, 0x3, 0x9d22}, {0x0, 0x3, 0x9, 0xfffffff7, 0x2, 0x750a, 0x1, 0x4}], "8abf92284d340f57423fc21ce07fc0c34186e9f783ea387eb20ce953a710a3959d4ef026a2cf1b678c036f50f2b78bca42cf466e8f56b34c3997aab4316eaf103da5e2e96fe435efa277a08d6b4b352650ec67ac9a0194dbc0e7a42753128e6092638ce0968bec8b72a0b269fc5231e6959b83b2374834968f063446bf0abff4f82dc791817285f7e9aeb6543c874ea14ba7cd8e46a72a71b3f294fb4436560ffa78a404122b1bcb3e", ['\x00', '\x00', '\x00', '\x00']}, 0x521) ioctl$sock_netdev_private(r1, 0x89f7, &(0x7f0000000800)="fe0f5be35da049f9d3992ba71ead19c1943b3752d3332e041d6df219ff22ad316bcaacb8ce5997f1214704554de55df50ccb7f430e6b2b1ab8f7a79102bc9aa806a415acc6c4d3025632eebf500d95357080e40d9c39f26f5f50cf71e0e10be0535f5a79c61a9ba49a42837d40fb40054f78c72f6899c065d3d1f5cf93e8b0d1eb0e295d4ae17235efdbc3c5") getsockname$packet(r5, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000900)=0x14) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000940)={r5, r6, 0x25, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c) sendmsg$nl_route_sched(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=@getchain={0x3c, 0x66, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x2, 0xa}, {0xf, 0x10}, {0x4, 0x8}}, [{0x8, 0xb, 0xa}, {0x8, 0xb, 0xfffffffd}, {0x8, 0xb, 0x100}]}, 0x3c}}, 0x4000000) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ac0), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r8, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x67}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4040) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x90, 0x3, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e5}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x72}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2a}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xb}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x85}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x4000) syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), r1) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_MSG_GETGEN(r5, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ec0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, r9, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0xa}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x7fff}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x101}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001040)={0x2, &(0x7f0000001000)=[{0x8000, 0x7, 0x7, 0x94}, {0x4, 0x2, 0x3e, 0x2}]}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000001080)={r4, 0x0, 0x2}, 0x8) sendmsg$nl_route(r5, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)=@getaddr={0x14, 0x16, 0x300, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}}, 0x8024) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001200), r5) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000001480)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001440)={&(0x7f0000001240)={0x1fc, r10, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf5c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x190, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xa, @mcast2, 0xefc8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x401, @private1, 0x718b}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1000, @mcast1, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xa5d, @local, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1701}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8a7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @local, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc62}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4040000}, 0x2c000841) ioctl(r7, 0x1000, &(0x7f00000014c0)="1d05d5a76ab2c82c51ee6b0ed6548b1a2de34f29691e0afbb5962dfa052b3af2b56298272d6b8aa5a8552cf6f27cfa3967a19bf9ba0a899b66") write(r7, &(0x7f0000001500)="d2338be175ce94d9e1c0b7539710673e15dac76232c1231e52a4b664139b48bfc0842986026caa6023938f", 0x2b) openat$nullb(0xffffffffffffff9c, &(0x7f0000001540), 0x101000, 0x0) 3.573559139s ago: executing program 1 (id=2709): syz_open_dev$usbmon(0x0, 0x2000000000008, 0x800) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x7df1, 0x101000) ioctl$SG_BLKSECTGET(r3, 0x1267, &(0x7f0000000180)) socket(0x40000000015, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="a800000010000d0428ad70000010000000000000", @ANYRES32=r5, @ANYBLOB="208004003c40000005001000c900000008001e00dfbd00000500100005"], 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x0, 0x1fd, 0x2, 0x7, 0x9, 0x0, 0x5, 0x9, 0x2, 0xca1, 0x8, 0x1, 0x6, 0xff, 0x9, 0x3, 0x7, 0x7, 0xb, 0x64, 0x1000, 0xc}}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0xfffffe28, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a0001e7a2d7587f0000000080"], 0x24}}, 0x8d0) mount(&(0x7f00000000c0)=@filename='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vxfs\x00', 0x208000, 0x0) close(r1) close(0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @empty}, {0x0, @multicast}, 0xa, {0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}}, 'veth0_to_batadv\x00'}) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x4e24, @multicast1}, 0x10) 3.573214278s ago: executing program 3 (id=2710): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.', @ANYBLOB], 0x28}}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async) r2 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x69, "09b00487e993510111f55d4fb2d82a0173aa259a6ae1a8321a3bafc40bd7f019f173434a6db543392450afae6e6c8b9d7817ef7e15bde79864b592f4d77865b9da6e2f654696448bc63f598c656771bf486f6e5c8ef262f592a2043fee31140cc46ef73eb2bac16f30"}, &(0x7f0000000080)=0x71) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x69, "09b00487e993510111f55d4fb2d82a0173aa259a6ae1a8321a3bafc40bd7f019f173434a6db543392450afae6e6c8b9d7817ef7e15bde79864b592f4d77865b9da6e2f654696448bc63f598c656771bf486f6e5c8ef262f592a2043fee31140cc46ef73eb2bac16f30"}, &(0x7f0000000080)=0x71) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010100000000000000000100000008000d00", @ANYRES32, @ANYBLOB="000000008b04f6c7736a8967f0af15a835fafc3f25328df145172444be12f1d2dcca1014339391d9e16fc242f777aa8c5150972d6ed1d2804b2e126f3355ff5e8e0bf97ece18db533c0907b23f8cc02d4ba85a843952c262f8b51b5f6c9b4bf53dad30767f5019b17c76", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180)={0x7fff, 0x200, 0x67, 0x1ff, r4}, 0x10) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) (async) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r7 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0xb1}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) getpriority(0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f00000007c0)=""/129, 0x81}, {0x0, 0x2}], 0x2, 0x0, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f00000007c0)=""/129, 0x81}, {0x0, 0x2}], 0x2, 0x0, 0x0) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) socket$inet_smc(0x2b, 0x1, 0x0) (async) r10 = socket$inet_smc(0x2b, 0x1, 0x0) recvfrom$inet(r10, 0x0, 0x0, 0x40000001, 0x0, 0x0) io_uring_enter(r7, 0x48e9, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r2) 3.476247667s ago: executing program 3 (id=2711): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="64754afcf15d876a991a152c5e679873f9b08e1056ce00b7cdbd0c1213056671f566a911535b33597683c9e85f6e45e111461a0396f31c2267cec05c428bc9db86848711aec91ce3d55567f6bd959e6877c4c75ac2f9077d11a086e0894058976e451e0fa6e15942ec205af8794d3ae6f05c45903deadb38d628fb6a3ffa4395ffbde4f8f019c97f0aeae00bcff1ce7c2522fca70e8873ae9fb8aa907a322caa97e926ea23e74c12e01fb183e33ab787188a1f7caa50a56bd3e9222a6bdbe4f7ac7353b2e2f4ce1750ad1bbc819b1d64412e6be37b928bb9f99f6559d28aa6194b001a5862c3b4", 0xe7}], 0x1) 3.4730574s ago: executing program 3 (id=2712): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = accept4(r1, &(0x7f0000000040)=@can={0x1d, 0x0}, &(0x7f00000000c0)=0x80, 0x800) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000bc0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000340)='.', 0x1}], 0x1}}], 0x1, 0x20000004) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000ec0)={'erspan0\x00', &(0x7f0000000dc0)={'sit0\x00', r3, 0x10, 0x7, 0x8, 0x100, {{0x2d, 0x4, 0x3, 0x6, 0xb4, 0x64, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010101, @loopback, {[@rr={0x7, 0x1f, 0xd7, [@local, @broadcast, @rand_addr=0x64010101, @empty, @local, @rand_addr=0x64010101, @loopback]}, @cipso={0x86, 0x22, 0x2, [{0x0, 0x12, "e0fc5cc4ea837defc461a2b3542fcceb"}, {0x5, 0xa, "bdac55311ebe87b1"}]}, @timestamp_prespec={0x44, 0x14, 0xf3, 0x3, 0x2, [{@local, 0x101}, {@private=0xa010100, 0x5}]}, @rr={0x7, 0x1b, 0x75, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1, @private=0xa010100, @loopback, @multicast1]}, @timestamp={0x44, 0x8, 0xc2, 0x0, 0xd, [0x7]}, @lsrr={0x83, 0x17, 0xc3, [@multicast2, @remote, @multicast2, @multicast1, @empty]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0xc, "65f607a943e7552768f8"}]}}}}}) sendmmsg$inet6(r5, &(0x7f00000032c0)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000380)="aeece25ad8a5d99cf91f348ceaf47a602dbbe98fc977c8b5110e288b311464799a8abcda5dbd3c8f39452383ea420b8106e3f6b36da787c2147bc81756a7c1d54dcb169498944bf46ab988ced1f855e5353560425cc9ac3fbdd6b0d66ca8ee3f2e3e65e394ed9323f7991cbeffd998c62194f1cd65b9349a5f8d035a9f", 0x7d}, {&(0x7f00000004c0)="3717a9689ac0e792509a0455926453939111a85f97bb84816e60a780ed87df7451caef3b9e078f2fd2dc06d375ae6cfd8c2627c39df95e57f447dcb2ac888cf553aefc03134fa3414c614db09725c31b5c6f6c6c26b9ba73a06e9066ac0b43b5cf4353cb70797a06e5c562dcae6c511db2cdac1a88c2c2a0a831dad7a7fb781660a26830ca32742fae", 0x89}, {&(0x7f0000000300)="ba10bf07bfac8d2bfd454f6f2dbdbcc4a16fcb300670852caded72f03e59ba", 0x1f}, {&(0x7f0000000580)="1278ac7760c5b87e07c9ae022107e1d8ee71ea9758a42c7a352e19a35b944ab2e711892048712e04e797e9719690b25dcb5acfa21e43f9621dcc39944664ae4ec415a8ac5a052d1f81dff0e94a086a3fd3a3a1b555f988d600e046f5f50535939a91903b42306819e3b12cd30b5358f88b45e35cedc9c170d6428ee7dc55d0c444cfb8cb567fbbf3243fdd8f8a4a522cf0ffbbe609ba4cdcc468092861ccfb287955641a667c39180dae0fad96c3cbda40dd4e43c0bc16dc0f390707129d1dfd218d4705e518560c21786555214c09252d4308fc7bf68eb63f41191d76157fc34f5279b133fed2d38e9d9f7cfdb5", 0xee}, {&(0x7f0000000400)="fe91af3983699a4963ee75c686561d5ff8230638daf648cd3bcb1d8dfc8326961fbd09ac737a093922b911c64897d81569d29c2fc117d3a9682dc02299b2b03095fd6b7b211608a0e0b61efe81842cbef815b831e7bbc2172fdb6120787913c75e9f6586b8c26aafbb24136d344a76c0d9879869", 0x74}], 0x5, &(0x7f0000000840)=[@dstopts={{0xd0, 0x29, 0x37, {0x87, 0x16, '\x00', [@hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0xfffffffe}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @jumbo={0xc2, 0x4, 0x6248}, @calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0xfffc, [0x8, 0x0, 0x5, 0x8, 0x1]}}, @pad1, @calipso={0x7, 0x38, {0x0, 0xc, 0x8, 0x7fff, [0x4, 0x1ff, 0x1, 0x6, 0xfffffffffffffffd, 0x3]}}]}}}, @hopopts={{0x38, 0x29, 0x36, {0x2e, 0x3, '\x00', [@generic={0x4}, @ra={0x5, 0x2, 0xfffe}, @hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0xfff5}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r3}}}, @flowinfo={{0x14, 0x29, 0xb, 0xf7a6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x5c, 0xe, 0x1, 0x0, 0x0, [@private2, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @rand_addr=' \x01\x00', @mcast1, @private1, @dev={0xfe, 0x80, '\x00', 0x12}]}}}, @rthdrdstopts={{0xf0, 0x29, 0x37, {0x11, 0x1a, '\x00', [@hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic={0x2, 0xb1, "b8b7a257fe9408f208a419fedfac4af7be0244543a1709ad62998798acb03be8285fa36c97c2d4ac1e6822db0aef2e07052202b8c9f88e94c7e9a63d457461bd19eb13b894a5ba42ecb03eeb1b1fd2d73054675c21b264512edbc064c74eddec65770459c468cb2a3daeb7fc7745251983dfb67bc3eb76dea074ea0cf5b555175ceac1cb4b17611cbe67f2ee5f5b24238895b0f86e1b9272142dba323c4c5d15f1e41cf96fb3271935228f28b575eab409"}]}}}, @hoplimit_2292={{0x14}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x67, 0x1, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x40, 0x4}}]}}}], 0x318}}, {{&(0x7f0000000700)={0xa, 0x4e21, 0x95c0, @remote, 0xa90}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000740)="497d8373a5496fecec6f848eb32621a3ba47a0a15469e53d6c72db5155082e29065e83c530067f8c0016bd83c981f8101e669381425bc4df164949d81d7f5f217411a521e545baab531b72574d2f89d1152d31ac474dde89bdcb2637c0affe8c16eabb8a039e296d3d8cd331b30a0072df96cd2553d377e1f62c23c00318c8dbda48eb99244a8e60fd13d169da65b7fe0b8b55e35e8d6cd94b25dfeaccf4fcc8ce2a41682f0f0bb86e378c", 0xab}, {&(0x7f0000000b80)="dced8169b78531ce9acaf7c47ae441f5e1257f5176a6af", 0x17}, {&(0x7f0000000c00)="3e2032b9757a834f837d0582529ff8a907b7ceec4674e93764dedc858914e15d288e003f8b8708f0de48bcdb4b251f999ce61fd68ad38f7f85f79d4bc94d77566aad6e51faccf44798b3a1b8aae3f2513f8058f2d2c31598aff6139a95df6c3deb6851b8fbc8c01e6c", 0x69}, {&(0x7f0000000c80)="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", 0xfb}], 0x4, &(0x7f0000000f00)=[@pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r3}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r6}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}], 0x68}}, {{&(0x7f0000000f80)={0xa, 0x4e21, 0x4, @local, 0xff}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000fc0)="6153d6c18c4683eb504513adca3f38665c314637b3862256eb5fdb50d0d1b24cd167256e97198de0d5c483bcff84772965e899dcebd0f0e8ffe3be8a966c979e216496a54dff", 0x46}, {&(0x7f0000001040)="2c2a731ab5cee85f40e4601e068ed2d5e2505681fe246cf983e38892d8e77edebf146c413643bb523449b984068025f220d703988e0ed3786e7d5cb73b73dc229965b84ebcd3876ada5a5ea08cb9b0f90dd8deb4683a92e9c2d80eeecf33c5a9029e6b2b08fd9593223fc4fddf98d15f28a3fa6fe8acce5ce6b72ece09129457", 0x80}, {&(0x7f00000010c0)="9eff4c5aefda0a854cc51f10225569dc849e62007dcec8ab340252f88fdbee6a36ab3eaed0627183ca66b711ee1c46d7b128d569e30ea00460d47addc7f741e644a7aa1ddc7a7673dcc55141d4f23c21892b24c9f4c86460fb", 0x59}, {&(0x7f0000001140)="731b867648a95f42cb0f1ba7abec6ddf5cbea7b1849ae9ff178cd3816216a16ccc96a1ef59f16499bde7281c0accbebeab0160eb5d569f06d222db8dc5fa38a23bcf4213ed6423cdbf2871f2407a3a6e1d420f20cb0003f594ca9902752810f91d939ab70af53b03ece867c5dab5009c4c2b0431660adb42445e2c4d3f9ce87e9a7d8ac8a2160beee6188fc47f736a8713702f5b1881391b541bd352f95cdc85163aee43df502ae2b4392c45", 0xac}], 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="14000000000000002900000034000000ff0f000000000000240000000000000000000000000000000000ffffac1414bb0000000000000000", @ANYRES32=r3, @ANYBLOB="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"], 0x1c0}}, {{&(0x7f0000001240)={0xa, 0x4e23, 0x400, @remote, 0x130}, 0x1c, &(0x7f00000017c0)=[{&(0x7f0000001280)="527c2e9f486cf3222149ef283e084cde2393b701e3944f077b13c8213a386ce637f7fefa257564f7b1ffa5be4304f26e5c368e14c14649a5c746befdb2", 0x3d}, {&(0x7f00000012c0)="d542c8", 0x3}, {&(0x7f0000001580)="0295a70658dd7ffde556f85eb75f3c3007e7378415406307857bb5d08b013fe038554e5fb1c49c7955a5f894c43f878d68bd44e27c04508c42f579adb7cdda5284a88e4141f4b1b0089b73d2dca67ecb7822883a514591a098828308f5822962fd76873bc65d5e", 0x67}, {&(0x7f0000001600)="8c6faa8da3fec170ea94422ce3bde29cd7d50f8c5548a7719651d155e9a04a8068739f623fa5477c0df1108bb9f7719981721efbe164ab84da5f08708f740b2d8f482bd89b", 0x45}, {&(0x7f0000001680)="9ab85f1bada47075108c7097801d61be0475c8d080d2d65919d792688e8b4b434d03fe2954846b428c6660442c26dd8bae03e0351255484d483ac4b1844b044b100c0588d119d789eba9596b2684a328c65187d6fd", 0x55}, {&(0x7f0000001700)="d14de73a1454db7d28e98e335c540ee4b6ced9f310435fc1bf7eb4c86184206c575a8c24e1982f367d3eda0b83078293a431689f528216ffaadf23184dedaa73cfed81471e4723211d5d203a79322e898bdccd276abe58de5b4e27e4ee4704263a920bb431538c93338372dfb8edca6c96b171c1acb7e36121dec828c3ebcab0f8e708b08b63edea9bfe2f00fc6e73b19178507b8170c9e8106a5993196fbcbbe3023b959a014ce07715e2312fdac8d89d4da916aca734fad89f2a2abccf", 0xbe}], 0x6, &(0x7f0000001840)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0x5e, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x8000}, @pad1]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x2c, 0xa, 0x0, 0xa, 0x0, [@dev={0xfe, 0x80, '\x00', 0xc}, @private1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0x627}}, @dstopts={{0x20, 0x29, 0x37, {0x3c, 0x0, '\x00', [@ra={0x5, 0x2, 0x7}]}}}], 0xf8}}, {{&(0x7f0000001300)={0xa, 0x4e24, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10001}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000001940)="de4668ddd53960f080b6987e9caf21ddcb28763ba0385f8827e7433b095872a69063708f8aec73", 0x27}, {&(0x7f0000001980)="c6944b9569a8daf3e4480f580d93c2005af1f94f147427449de319b506e1435eb0b5e3020f0c7b2bddf2e0b0050ae7836e1ecf47f993522262afeb34b1f13fc3d88464f79777d31b3d7240e7b31f544847db4d156d171e8e1bcc0ee79e6c19ad78e528e11c63460ecde5ae06f05993c57b4abd26ec926a2a777c0d2731d186b4325624f8362aff595730f47c0cd18c5b0a7ce6d776187588242ed889ea49d06a57a97a3816235373654b7fd98a546804cc687bbbf14bc400c5416751a7ebbf99d8b2fce266ecf9ddb5bdb343491cb3922807d8fc9e90a0ed3cacce37e7ff6188239d6dae89c5ee2fcd3edae6131ec2cd9dd293f08b9e05", 0xf7}, {&(0x7f0000001a80)}, {&(0x7f0000001ac0)="433ff6c0374c4db833650e1738f00f0cdf191383ea75e3c5a02619cdefcb17daa137f368fa447b66141e0668b530076079b031dff7d42a263129d94c186c13de8e96c35095898e", 0x47}, {&(0x7f0000001b40)="a04a479d3238d82bd2cf8db6b8842baa578e1d2b2eb11fb606b9098804f8ce38fd56438ffab14e6401b628718cce06fe443ecde11d79a1ea0b15f7cb2ef0d5a3d5830b957ce3edb489f0c7f1264416a1143b885fcf44e56eda0521288d0b70f014b34eeaa7cbc2b1293df01d6be8d41fe238caf05804db3050824d0d91182ab2b555f501a056e8ff1bdc6c3da207603bb943bcbf56405cfb57dd914a9bd76d55b3182126a1f6c4e674823e52d2fe8662692ed5f1d4354158c2bacd789b6787661dc883e4402879bbadc67cbfad989208edaf0639bf7a64446f673484bb73a6d74915eaff418dba6a693a92e0e1a344", 0xef}, {&(0x7f0000001c40)="3eef91f8e03048b07ba7f507f15a9f14ec50cb9c0675d9ff5aeefb34303b5f30d43311f4f1cff2671b221f615f1e8f9f9d7538c1741f11f7b3599d782013d5e070f896dbf5ad14b7992b81984a32dc361e7de6286125582ae53fc5c242f805846e3f476e23b08d0d55bf899e1732df877c7013ee982db6b5523796a429fe0be0c1368914e570290f66d239ce2fe3edc8e7d1e0b197a0ac9b4074fa2482542a32621c3371dc9d3172016473cc07b992ea3839cb27ccb805d3c369c1b34cf679e1f1aa10eac72f3e1dfc7668f551f9c7b4adaf7c289d46252a36886ae72c882b5f2fd48b2b", 0xe4}], 0x6, &(0x7f0000001dc0)=[@tclass={{0x14, 0x29, 0x43, 0x80000001}}, @dstopts={{0x30, 0x29, 0x37, {0x29, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}}}, @dstopts={{0x78, 0x29, 0x37, {0x33, 0xb, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x4, 0xfffe, [0x1ff, 0x3, 0x401]}}, @generic={0x3, 0x35, "114ba7a62e9a3f539820e43ff10d0552dcddfee7c08778eb7e6bb550d9f968880b3b2fbfb197277b8b117759108b268c0c8bc452b2"}]}}}, @rthdrdstopts={{0x110, 0x29, 0x37, {0x0, 0x1f, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @private1}, @generic={0x0, 0xc3, "0e44b4486fc1fcb2aa2233a59fe7bf3d572f64dd27554e70bbe8d878e6265281f2a040cd7321bba9054b829ca3b6a4676e64cfc857d836c8df002026658ef96327a8896e1cf51b4a077db096a6bd27fc507432a460a9c8cb9975d39cf16c2e3b685f3c15343292a406b35759eec87238c8a0959ae2dd2160cf2a742b03ef009d656686d44cb47a6ab889dfd685d4fec1dc0790a1c6ac341c8518ac2763c5cc597a3ef008fba2feb6925944087d679b94dfd4b9fa2b6f942dec0911cb89c3b2d0f83f39"}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x6}}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x1}]}}}], 0x1d0}}, {{&(0x7f0000001fc0)={0xa, 0x4e24, 0xd, @remote, 0x8}, 0x1c, &(0x7f00000031c0)=[{&(0x7f0000002000)="0d61376b456ecd63e99823d0ddaea810da1113177f339569ef8c5d9b3de36fa3d2d80e5f71eb6c9653b6969a18dbd04f77b307c6470696de858d9ec07e028aea72a9aa3f", 0x44}, {&(0x7f0000002080)="aca7f5cd9ce32d30a7c7cedc47760f4e24d0b473e4b9ecc5c0bc4da4728b5df616de4c5b0f5e92f59e31af416a", 0x2d}, {&(0x7f00000020c0)="5a43c601d20074378e1f02fc1a6385b74bf8058908e732ed23e9c414403e934107125c75f06410316e3f6736ecb336e05697dc589767839054861ba89ede2c70e0db6580c243c26f90ead0af50ad33bbf78a2da89e24ffc60041268a9e69b918f1245fe98511f592d1a9f33351a354ba8d9aa1f3adb883e48622aac771f765ed314dd26a4a5a55c3647836e3c9de7e522ae60fef1a74e515d8eb1daae34cdc7ea9601fa96e7784dd42502da934", 0xad}, {&(0x7f0000002180)="a26f42683a9a25a4f61bbe567914c2c565fedbc1d2c9d78d6777f33f183da01622041199", 0x24}, {&(0x7f00000021c0)="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", 0x1000}], 0x5, &(0x7f0000003240)=[@rthdr={{0x28, 0x29, 0x39, {0x2c, 0x2, 0x1, 0x7, 0x0, [@remote]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x0, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @ra={0x5, 0x2, 0x8000}]}}}], 0x50}}], 0x6, 0x40020) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff0000}}, 0x7}, &(0x7f0000000200)=0x90) r7 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) ioctl$I2C_PEC(r7, 0x708, 0x3) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000001380)={0x0, 0x49, 0x5, &(0x7f0000001340)={0xd, "c8660972daadf38033035d21dcc910b0dbf5be74076dc31c515ac04ef9ed965b13"}}) ioctl$USBDEVFS_SUBMITURB(r4, 0x802c550a, &(0x7f0000000280)=@urb_type_bulk={0x3, {0x1, 0x1}, 0xef94, 0x44, &(0x7f0000000300), 0x0, 0x0, 0x200, 0xe, 0x8, 0x7, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="200000001d0021002bbd70000300000007"], 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) accept4(r1, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x800) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r5, &(0x7f0000000bc0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000340)='.', 0x1}], 0x1}}], 0x1, 0x20000004) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000ec0)={'erspan0\x00', &(0x7f0000000dc0)={'sit0\x00', r3, 0x10, 0x7, 0x8, 0x100, {{0x2d, 0x4, 0x3, 0x6, 0xb4, 0x64, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010101, @loopback, {[@rr={0x7, 0x1f, 0xd7, [@local, @broadcast, @rand_addr=0x64010101, @empty, @local, @rand_addr=0x64010101, @loopback]}, @cipso={0x86, 0x22, 0x2, [{0x0, 0x12, "e0fc5cc4ea837defc461a2b3542fcceb"}, {0x5, 0xa, "bdac55311ebe87b1"}]}, @timestamp_prespec={0x44, 0x14, 0xf3, 0x3, 0x2, [{@local, 0x101}, {@private=0xa010100, 0x5}]}, @rr={0x7, 0x1b, 0x75, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1, @private=0xa010100, @loopback, @multicast1]}, @timestamp={0x44, 0x8, 0xc2, 0x0, 0xd, [0x7]}, @lsrr={0x83, 0x17, 0xc3, [@multicast2, @remote, @multicast2, @multicast1, @empty]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0xc, "65f607a943e7552768f8"}]}}}}}) (async) sendmmsg$inet6(r5, &(0x7f00000032c0)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000380)="aeece25ad8a5d99cf91f348ceaf47a602dbbe98fc977c8b5110e288b311464799a8abcda5dbd3c8f39452383ea420b8106e3f6b36da787c2147bc81756a7c1d54dcb169498944bf46ab988ced1f855e5353560425cc9ac3fbdd6b0d66ca8ee3f2e3e65e394ed9323f7991cbeffd998c62194f1cd65b9349a5f8d035a9f", 0x7d}, {&(0x7f00000004c0)="3717a9689ac0e792509a0455926453939111a85f97bb84816e60a780ed87df7451caef3b9e078f2fd2dc06d375ae6cfd8c2627c39df95e57f447dcb2ac888cf553aefc03134fa3414c614db09725c31b5c6f6c6c26b9ba73a06e9066ac0b43b5cf4353cb70797a06e5c562dcae6c511db2cdac1a88c2c2a0a831dad7a7fb781660a26830ca32742fae", 0x89}, {&(0x7f0000000300)="ba10bf07bfac8d2bfd454f6f2dbdbcc4a16fcb300670852caded72f03e59ba", 0x1f}, {&(0x7f0000000580)="1278ac7760c5b87e07c9ae022107e1d8ee71ea9758a42c7a352e19a35b944ab2e711892048712e04e797e9719690b25dcb5acfa21e43f9621dcc39944664ae4ec415a8ac5a052d1f81dff0e94a086a3fd3a3a1b555f988d600e046f5f50535939a91903b42306819e3b12cd30b5358f88b45e35cedc9c170d6428ee7dc55d0c444cfb8cb567fbbf3243fdd8f8a4a522cf0ffbbe609ba4cdcc468092861ccfb287955641a667c39180dae0fad96c3cbda40dd4e43c0bc16dc0f390707129d1dfd218d4705e518560c21786555214c09252d4308fc7bf68eb63f41191d76157fc34f5279b133fed2d38e9d9f7cfdb5", 0xee}, {&(0x7f0000000400)="fe91af3983699a4963ee75c686561d5ff8230638daf648cd3bcb1d8dfc8326961fbd09ac737a093922b911c64897d81569d29c2fc117d3a9682dc02299b2b03095fd6b7b211608a0e0b61efe81842cbef815b831e7bbc2172fdb6120787913c75e9f6586b8c26aafbb24136d344a76c0d9879869", 0x74}], 0x5, &(0x7f0000000840)=[@dstopts={{0xd0, 0x29, 0x37, {0x87, 0x16, '\x00', [@hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0xfffffffe}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @jumbo={0xc2, 0x4, 0x6248}, @calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0xfffc, [0x8, 0x0, 0x5, 0x8, 0x1]}}, @pad1, @calipso={0x7, 0x38, {0x0, 0xc, 0x8, 0x7fff, [0x4, 0x1ff, 0x1, 0x6, 0xfffffffffffffffd, 0x3]}}]}}}, @hopopts={{0x38, 0x29, 0x36, {0x2e, 0x3, '\x00', [@generic={0x4}, @ra={0x5, 0x2, 0xfffe}, @hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0xfff5}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r3}}}, @flowinfo={{0x14, 0x29, 0xb, 0xf7a6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x5c, 0xe, 0x1, 0x0, 0x0, [@private2, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @rand_addr=' \x01\x00', @mcast1, @private1, @dev={0xfe, 0x80, '\x00', 0x12}]}}}, @rthdrdstopts={{0xf0, 0x29, 0x37, {0x11, 0x1a, '\x00', [@hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic={0x2, 0xb1, "b8b7a257fe9408f208a419fedfac4af7be0244543a1709ad62998798acb03be8285fa36c97c2d4ac1e6822db0aef2e07052202b8c9f88e94c7e9a63d457461bd19eb13b894a5ba42ecb03eeb1b1fd2d73054675c21b264512edbc064c74eddec65770459c468cb2a3daeb7fc7745251983dfb67bc3eb76dea074ea0cf5b555175ceac1cb4b17611cbe67f2ee5f5b24238895b0f86e1b9272142dba323c4c5d15f1e41cf96fb3271935228f28b575eab409"}]}}}, @hoplimit_2292={{0x14}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x67, 0x1, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x40, 0x4}}]}}}], 0x318}}, {{&(0x7f0000000700)={0xa, 0x4e21, 0x95c0, @remote, 0xa90}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000740)="497d8373a5496fecec6f848eb32621a3ba47a0a15469e53d6c72db5155082e29065e83c530067f8c0016bd83c981f8101e669381425bc4df164949d81d7f5f217411a521e545baab531b72574d2f89d1152d31ac474dde89bdcb2637c0affe8c16eabb8a039e296d3d8cd331b30a0072df96cd2553d377e1f62c23c00318c8dbda48eb99244a8e60fd13d169da65b7fe0b8b55e35e8d6cd94b25dfeaccf4fcc8ce2a41682f0f0bb86e378c", 0xab}, {&(0x7f0000000b80)="dced8169b78531ce9acaf7c47ae441f5e1257f5176a6af", 0x17}, {&(0x7f0000000c00)="3e2032b9757a834f837d0582529ff8a907b7ceec4674e93764dedc858914e15d288e003f8b8708f0de48bcdb4b251f999ce61fd68ad38f7f85f79d4bc94d77566aad6e51faccf44798b3a1b8aae3f2513f8058f2d2c31598aff6139a95df6c3deb6851b8fbc8c01e6c", 0x69}, {&(0x7f0000000c80)="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", 0xfb}], 0x4, &(0x7f0000000f00)=[@pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r3}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r6}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}], 0x68}}, {{&(0x7f0000000f80)={0xa, 0x4e21, 0x4, @local, 0xff}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000fc0)="6153d6c18c4683eb504513adca3f38665c314637b3862256eb5fdb50d0d1b24cd167256e97198de0d5c483bcff84772965e899dcebd0f0e8ffe3be8a966c979e216496a54dff", 0x46}, {&(0x7f0000001040)="2c2a731ab5cee85f40e4601e068ed2d5e2505681fe246cf983e38892d8e77edebf146c413643bb523449b984068025f220d703988e0ed3786e7d5cb73b73dc229965b84ebcd3876ada5a5ea08cb9b0f90dd8deb4683a92e9c2d80eeecf33c5a9029e6b2b08fd9593223fc4fddf98d15f28a3fa6fe8acce5ce6b72ece09129457", 0x80}, {&(0x7f00000010c0)="9eff4c5aefda0a854cc51f10225569dc849e62007dcec8ab340252f88fdbee6a36ab3eaed0627183ca66b711ee1c46d7b128d569e30ea00460d47addc7f741e644a7aa1ddc7a7673dcc55141d4f23c21892b24c9f4c86460fb", 0x59}, {&(0x7f0000001140)="731b867648a95f42cb0f1ba7abec6ddf5cbea7b1849ae9ff178cd3816216a16ccc96a1ef59f16499bde7281c0accbebeab0160eb5d569f06d222db8dc5fa38a23bcf4213ed6423cdbf2871f2407a3a6e1d420f20cb0003f594ca9902752810f91d939ab70af53b03ece867c5dab5009c4c2b0431660adb42445e2c4d3f9ce87e9a7d8ac8a2160beee6188fc47f736a8713702f5b1881391b541bd352f95cdc85163aee43df502ae2b4392c45", 0xac}], 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="14000000000000002900000034000000ff0f000000000000240000000000000000000000000000000000ffffac1414bb0000000000000000", @ANYRES32=r3, @ANYBLOB="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"], 0x1c0}}, {{&(0x7f0000001240)={0xa, 0x4e23, 0x400, @remote, 0x130}, 0x1c, &(0x7f00000017c0)=[{&(0x7f0000001280)="527c2e9f486cf3222149ef283e084cde2393b701e3944f077b13c8213a386ce637f7fefa257564f7b1ffa5be4304f26e5c368e14c14649a5c746befdb2", 0x3d}, {&(0x7f00000012c0)="d542c8", 0x3}, {&(0x7f0000001580)="0295a70658dd7ffde556f85eb75f3c3007e7378415406307857bb5d08b013fe038554e5fb1c49c7955a5f894c43f878d68bd44e27c04508c42f579adb7cdda5284a88e4141f4b1b0089b73d2dca67ecb7822883a514591a098828308f5822962fd76873bc65d5e", 0x67}, {&(0x7f0000001600)="8c6faa8da3fec170ea94422ce3bde29cd7d50f8c5548a7719651d155e9a04a8068739f623fa5477c0df1108bb9f7719981721efbe164ab84da5f08708f740b2d8f482bd89b", 0x45}, {&(0x7f0000001680)="9ab85f1bada47075108c7097801d61be0475c8d080d2d65919d792688e8b4b434d03fe2954846b428c6660442c26dd8bae03e0351255484d483ac4b1844b044b100c0588d119d789eba9596b2684a328c65187d6fd", 0x55}, {&(0x7f0000001700)="d14de73a1454db7d28e98e335c540ee4b6ced9f310435fc1bf7eb4c86184206c575a8c24e1982f367d3eda0b83078293a431689f528216ffaadf23184dedaa73cfed81471e4723211d5d203a79322e898bdccd276abe58de5b4e27e4ee4704263a920bb431538c93338372dfb8edca6c96b171c1acb7e36121dec828c3ebcab0f8e708b08b63edea9bfe2f00fc6e73b19178507b8170c9e8106a5993196fbcbbe3023b959a014ce07715e2312fdac8d89d4da916aca734fad89f2a2abccf", 0xbe}], 0x6, &(0x7f0000001840)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0x5e, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x8000}, @pad1]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x2c, 0xa, 0x0, 0xa, 0x0, [@dev={0xfe, 0x80, '\x00', 0xc}, @private1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0x627}}, @dstopts={{0x20, 0x29, 0x37, {0x3c, 0x0, '\x00', [@ra={0x5, 0x2, 0x7}]}}}], 0xf8}}, {{&(0x7f0000001300)={0xa, 0x4e24, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10001}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000001940)="de4668ddd53960f080b6987e9caf21ddcb28763ba0385f8827e7433b095872a69063708f8aec73", 0x27}, {&(0x7f0000001980)="c6944b9569a8daf3e4480f580d93c2005af1f94f147427449de319b506e1435eb0b5e3020f0c7b2bddf2e0b0050ae7836e1ecf47f993522262afeb34b1f13fc3d88464f79777d31b3d7240e7b31f544847db4d156d171e8e1bcc0ee79e6c19ad78e528e11c63460ecde5ae06f05993c57b4abd26ec926a2a777c0d2731d186b4325624f8362aff595730f47c0cd18c5b0a7ce6d776187588242ed889ea49d06a57a97a3816235373654b7fd98a546804cc687bbbf14bc400c5416751a7ebbf99d8b2fce266ecf9ddb5bdb343491cb3922807d8fc9e90a0ed3cacce37e7ff6188239d6dae89c5ee2fcd3edae6131ec2cd9dd293f08b9e05", 0xf7}, {&(0x7f0000001a80)}, {&(0x7f0000001ac0)="433ff6c0374c4db833650e1738f00f0cdf191383ea75e3c5a02619cdefcb17daa137f368fa447b66141e0668b530076079b031dff7d42a263129d94c186c13de8e96c35095898e", 0x47}, {&(0x7f0000001b40)="a04a479d3238d82bd2cf8db6b8842baa578e1d2b2eb11fb606b9098804f8ce38fd56438ffab14e6401b628718cce06fe443ecde11d79a1ea0b15f7cb2ef0d5a3d5830b957ce3edb489f0c7f1264416a1143b885fcf44e56eda0521288d0b70f014b34eeaa7cbc2b1293df01d6be8d41fe238caf05804db3050824d0d91182ab2b555f501a056e8ff1bdc6c3da207603bb943bcbf56405cfb57dd914a9bd76d55b3182126a1f6c4e674823e52d2fe8662692ed5f1d4354158c2bacd789b6787661dc883e4402879bbadc67cbfad989208edaf0639bf7a64446f673484bb73a6d74915eaff418dba6a693a92e0e1a344", 0xef}, {&(0x7f0000001c40)="3eef91f8e03048b07ba7f507f15a9f14ec50cb9c0675d9ff5aeefb34303b5f30d43311f4f1cff2671b221f615f1e8f9f9d7538c1741f11f7b3599d782013d5e070f896dbf5ad14b7992b81984a32dc361e7de6286125582ae53fc5c242f805846e3f476e23b08d0d55bf899e1732df877c7013ee982db6b5523796a429fe0be0c1368914e570290f66d239ce2fe3edc8e7d1e0b197a0ac9b4074fa2482542a32621c3371dc9d3172016473cc07b992ea3839cb27ccb805d3c369c1b34cf679e1f1aa10eac72f3e1dfc7668f551f9c7b4adaf7c289d46252a36886ae72c882b5f2fd48b2b", 0xe4}], 0x6, &(0x7f0000001dc0)=[@tclass={{0x14, 0x29, 0x43, 0x80000001}}, @dstopts={{0x30, 0x29, 0x37, {0x29, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}}}, @dstopts={{0x78, 0x29, 0x37, {0x33, 0xb, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x4, 0xfffe, [0x1ff, 0x3, 0x401]}}, @generic={0x3, 0x35, "114ba7a62e9a3f539820e43ff10d0552dcddfee7c08778eb7e6bb550d9f968880b3b2fbfb197277b8b117759108b268c0c8bc452b2"}]}}}, @rthdrdstopts={{0x110, 0x29, 0x37, {0x0, 0x1f, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @private1}, @generic={0x0, 0xc3, "0e44b4486fc1fcb2aa2233a59fe7bf3d572f64dd27554e70bbe8d878e6265281f2a040cd7321bba9054b829ca3b6a4676e64cfc857d836c8df002026658ef96327a8896e1cf51b4a077db096a6bd27fc507432a460a9c8cb9975d39cf16c2e3b685f3c15343292a406b35759eec87238c8a0959ae2dd2160cf2a742b03ef009d656686d44cb47a6ab889dfd685d4fec1dc0790a1c6ac341c8518ac2763c5cc597a3ef008fba2feb6925944087d679b94dfd4b9fa2b6f942dec0911cb89c3b2d0f83f39"}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x6}}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x1}]}}}], 0x1d0}}, {{&(0x7f0000001fc0)={0xa, 0x4e24, 0xd, @remote, 0x8}, 0x1c, &(0x7f00000031c0)=[{&(0x7f0000002000)="0d61376b456ecd63e99823d0ddaea810da1113177f339569ef8c5d9b3de36fa3d2d80e5f71eb6c9653b6969a18dbd04f77b307c6470696de858d9ec07e028aea72a9aa3f", 0x44}, {&(0x7f0000002080)="aca7f5cd9ce32d30a7c7cedc47760f4e24d0b473e4b9ecc5c0bc4da4728b5df616de4c5b0f5e92f59e31af416a", 0x2d}, {&(0x7f00000020c0)="5a43c601d20074378e1f02fc1a6385b74bf8058908e732ed23e9c414403e934107125c75f06410316e3f6736ecb336e05697dc589767839054861ba89ede2c70e0db6580c243c26f90ead0af50ad33bbf78a2da89e24ffc60041268a9e69b918f1245fe98511f592d1a9f33351a354ba8d9aa1f3adb883e48622aac771f765ed314dd26a4a5a55c3647836e3c9de7e522ae60fef1a74e515d8eb1daae34cdc7ea9601fa96e7784dd42502da934", 0xad}, {&(0x7f0000002180)="a26f42683a9a25a4f61bbe567914c2c565fedbc1d2c9d78d6777f33f183da01622041199", 0x24}, {&(0x7f00000021c0)="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", 0x1000}], 0x5, &(0x7f0000003240)=[@rthdr={{0x28, 0x29, 0x39, {0x2c, 0x2, 0x1, 0x7, 0x0, [@remote]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x0, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @ra={0x5, 0x2, 0x8000}]}}}], 0x50}}], 0x6, 0x40020) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff0000}}, 0x7}, &(0x7f0000000200)=0x90) (async) syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$I2C_PEC(r7, 0x708, 0x3) (async) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000001380)={0x0, 0x49, 0x5, &(0x7f0000001340)={0xd, "c8660972daadf38033035d21dcc910b0dbf5be74076dc31c515ac04ef9ed965b13"}}) (async) ioctl$USBDEVFS_SUBMITURB(r4, 0x802c550a, &(0x7f0000000280)=@urb_type_bulk={0x3, {0x1, 0x1}, 0xef94, 0x44, &(0x7f0000000300), 0x0, 0x0, 0x200, 0xe, 0x8, 0x7, 0x0}) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="200000001d0021002bbd70000300000007"], 0x20}}, 0x0) (async) 2.128694648s ago: executing program 3 (id=2716): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40a02, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000140)=@in6={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x6}}], 0x18}}], 0x1, 0x4000000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='source', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') pread64(r3, &(0x7f0000000ac0)=""/27, 0x1b, 0x200) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) syz_open_dev$dri(0x0, 0x200, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.127661825s ago: executing program 1 (id=2717): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_pidfd_open(r0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) setns(r1, 0x6000000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x25, &(0x7f00000000c0)=0x101, 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x2010000, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './bus'}}]}) 1.954105716s ago: executing program 3 (id=2720): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x14, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863, "5aa772f37902"}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r2) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c81, 0xffffffffffffffb6) poll(&(0x7f0000000040)=[{r0, 0xf0bba22614030167}, {r0, 0x408}, {r0, 0x2000}, {r0, 0x1002}, {r0, 0x10}, {r0, 0x2033}, {r0, 0xc0}, {r0, 0x240}], 0x8, 0x98) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_emit_ethernet(0x14, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863, "5aa772f37902"}}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) pipe(&(0x7f0000000180)) (async) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r2) (async) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c81, 0xffffffffffffffb6) (async) poll(&(0x7f0000000040)=[{r0, 0xf0bba22614030167}, {r0, 0x408}, {r0, 0x2000}, {r0, 0x1002}, {r0, 0x10}, {r0, 0x2033}, {r0, 0xc0}, {r0, 0x240}], 0x8, 0x98) (async) 1.86391482s ago: executing program 6 (id=2721): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {0x8000, 0x7f, 0x3, 0x3}, 0x3a, [0x5, 0x1, 0x7, 0x83e, 0x5, 0xd, 0x6, 0x0, 0x7, 0x9, 0x4, 0x7, 0x1, 0x3ff, 0x3, 0xfffffff9, 0x27e8, 0xf93, 0x6, 0x3, 0x2, 0x1, 0x47dc, 0x10000, 0x4, 0x3, 0xfffffffc, 0x1, 0x0, 0x18, 0x8, 0x9, 0x190a, 0x1000, 0x23, 0x0, 0x4, 0x1, 0x1, 0x5, 0x2, 0xfd84, 0x200, 0x3, 0x6, 0x9, 0xffffffc0, 0x8, 0xe0000000, 0x5, 0x77, 0xb, 0x7, 0x5, 0x7, 0x22, 0x1, 0x7fffffff, 0x4, 0x80000000, 0xdc6, 0xfffffffc, 0x0, 0x7], [0x9, 0x1, 0x0, 0xffffc5b3, 0x2, 0x5, 0x2, 0xdc0, 0x0, 0x3, 0x2, 0x8, 0x6, 0x661b, 0x7, 0x5f, 0x7d, 0x10001, 0x2, 0x2, 0x8, 0x7, 0xbda, 0x80000000, 0x20, 0x4, 0x8, 0xfffffffc, 0x2, 0x9, 0x7fff, 0x4, 0x8, 0x6, 0x60, 0x6, 0x5, 0xfff, 0xfffffff9, 0x8, 0x6, 0xfffffffc, 0x7fffffff, 0x8, 0x8, 0x3, 0x2, 0xe14, 0x200, 0x7, 0x63, 0x8, 0x9, 0x7f, 0x3, 0xcbf, 0x200, 0x2, 0x2, 0x8, 0x3, 0x0, 0x400, 0x7], [0x9, 0x4, 0x0, 0x0, 0x6, 0x8, 0xffffff81, 0x4, 0x401, 0xb, 0x200, 0x9, 0xfe0, 0x5, 0x4, 0x40, 0xfffffff9, 0x956, 0x63, 0xb72, 0xf816, 0x57d, 0x0, 0x7, 0x1, 0x6, 0x1, 0xe9, 0x0, 0x3, 0x1, 0xfffffffb, 0x3, 0x3, 0x81, 0xf, 0x9, 0x3, 0x3cc, 0x9, 0xc, 0x800, 0x9e86, 0x31, 0x2, 0x0, 0x3, 0x7, 0x3, 0x6, 0x9, 0xe0, 0x7, 0x7f, 0x1ff, 0x6d, 0x7, 0xfffffffb, 0x1175, 0x8000, 0x11d, 0x8f9b, 0x3, 0x6], [0x9, 0x5, 0xfffffbff, 0x5, 0x6, 0x5, 0x80000001, 0x7fff, 0xff, 0x0, 0x2, 0x1, 0x6, 0xffffd529, 0x408, 0x0, 0x2f5, 0x1ff, 0x8000, 0x3, 0x7f, 0x7fffffff, 0x40000000, 0x4b1, 0x6, 0xc, 0x5, 0x5, 0x508f, 0xc6, 0x81, 0x9, 0x7ea692d0, 0x2, 0x8, 0x1d59, 0xfff, 0xe10d, 0xc, 0x40, 0x4, 0x3, 0xfff, 0xfe, 0x1, 0x3, 0x366e, 0x7, 0xfffffffc, 0x8001, 0x3, 0x3, 0x4, 0x0, 0x8, 0x0, 0x3ff, 0x6, 0x0, 0x1, 0x9, 0xffffffff, 0x7, 0x5]}, 0x45c) 1.862408985s ago: executing program 6 (id=2722): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[], 0x52) 1.799957346s ago: executing program 3 (id=2723): r0 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='\x00', 0xfffffffffffffff9) r1 = add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="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", 0x1000, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000001200)=@keyring={'key_or_keyring:', r1}) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='exfat\x00', 0x200000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1.799094219s ago: executing program 6 (id=2724): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x2c2581, 0x34) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[{}, {}, {}]}) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffbd) ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x0) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) (async) open(&(0x7f0000000100)='./file0\x00', 0x2c2581, 0x34) (async) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[{}, {}, {}]}) (async) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffbd) (async) ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000100)) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x0) (async) unshare(0x6a040000) (async) 1.775136062s ago: executing program 8 (id=2048): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x0) 175.855018ms ago: executing program 6 (id=2725): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x4}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4, 0xfff2}, {0xe, 0x9}, {0x10, 0xfff2}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000280)={'TPROXY\x00'}, &(0x7f00000002c0)=0x1e) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) r4 = gettid() prlimit64(r4, 0xd, &(0x7f0000000300)={0x40, 0x5}, &(0x7f0000000340)) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000380)) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f0000000800)={0x8d, 0x0, &(0x7f0000000400)="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"}) ioctl$TIOCSIG(r5, 0x40045436, 0x7) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000840)) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x12) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f0000000880)={0xe, 0x1, 0x6, 0x66, 0x18, "9321a976ca7ed9ca6eb964fceb67d8f3910c6b"}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, &(0x7f00000008c0), &(0x7f0000000900)=0x4) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000019c0), 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x1, &(0x7f0000001a80)=@raw=[@exit], &(0x7f0000001ac0)='syzkaller\x00', 0x7, 0x0, &(0x7f0000001b00), 0x40f00, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001b80)={0x0, 0x2, 0x6, 0x40}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001bc0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001c00)=[{0x3, 0x3, 0xb, 0x6}], 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001d00), &(0x7f0000001d40)}, 0x20) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000001dc0), 0x101000, 0x0) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10000, '\x00', r2, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001e80)={0x1b, 0x0, 0x0, 0x1a, 0x0, r3, 0x7b876af6, '\x00', r2, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001f80)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000980)='syzkaller\x00', 0x5, 0x1000, &(0x7f00000009c0)=""/4096, 0x40f00, 0x51, '\x00', r2, 0x1c, r6, 0x8, &(0x7f0000001a00)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001a40)={0x3, 0x1, 0x2, 0x4}, 0x10, 0x7501, r7, 0x4, &(0x7f0000001f00)=[r1, r8, r9, r10, r11], &(0x7f0000001f40)=[{0x0, 0x3, 0xe, 0x5}, {0x5, 0x5, 0x2, 0xc}, {0x2, 0x5, 0x5}, {0x2, 0x3, 0xc, 0x3}], 0x10, 0x8}, 0x94) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000002040)=""/178) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 175.467714ms ago: executing program 1 (id=2726): mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000280), 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=virtio,directio,debug=0xffffffffffffffff,cache=loose,afid=0x000']) socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe88"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e601bae74656e642c6163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000001080)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="fcffffffa341000000e9ff00080000000000000033d6fed34405bd19643ffa0fdc2c6883fb47", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="020000000100"/28], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) write$cgroup_devices(r1, 0x0, 0xffdd) sendto$packet(r1, &(0x7f0000001580)="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", 0x1000, 0x7905fc0c37711a58, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{0x0}], 0x1, 0xffff, 0x186f) (async) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{0x0}], 0x1, 0xffff, 0x186f) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x3, 0x4, 0x1000, &(0x7f0000617000/0x1000)=nil}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) landlock_create_ruleset(&(0x7f0000006f80)={0x0, 0x3}, 0x10, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0x3, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0xfffffffa, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x5f, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9600, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0x3, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0xfffffffa, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x5f, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9600, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x10) (async) ftruncate(r1, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000002e00)={0x2020}, 0x16e7) (async) read$FUSE(r5, &(0x7f0000002e00)={0x2020}, 0x16e7) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 67.690174ms ago: executing program 6 (id=2727): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 568.979µs ago: executing program 6 (id=2728): fsopen(&(0x7f0000000000)='qnx4\x00', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x64, 0x0, 0x3, 0x1}, {0x6, 0x0, 0x0, 0x7ffffffd}]}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0xb01242, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) pread64(r1, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) (async) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d", 0x5, 0x805, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x521000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x15) 0s ago: executing program 1 (id=2729): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f0000001fc0)={0x0, 0x0}) futex_waitv(&(0x7f0000001840)=[{0xc, &(0x7f0000000240)=0x60e, 0x2}, {0x8, &(0x7f0000000280)=0x1, 0x2}, {0x4, &(0x7f00000002c0)=0x9, 0x2}, {0xc, &(0x7f0000000300)=0x2, 0x82}, {0x2, &(0x7f0000000480)=0x1, 0x82}, {0x9, &(0x7f0000000540)=0x50a800000000, 0x2}, {0x9, &(0x7f0000000580)=0x6, 0x82}, {0x0, &(0x7f00000005c0)=0x200, 0x82}, {0x4, &(0x7f0000000600)=0xbf0b, 0x86}, {0x6, &(0x7f0000000640)=0x1, 0x82}, {0x7, &(0x7f0000000680)=0x7, 0x82}, {0x6, &(0x7f00000006c0), 0x82}, {0x3, &(0x7f0000000700)=0x101, 0x2}, {0x2, &(0x7f0000000740)=0x2, 0x82}, {0x7, &(0x7f0000000780)=0x8, 0x82}, {0x2, &(0x7f00000007c0)=0xfffffffffffffffe, 0x82}, {0x1c0000000, &(0x7f0000000800)=0x7, 0x82}, {0x51, &(0x7f0000000840)=0x4, 0x2}, {0x4, &(0x7f0000000880)=0x3, 0x2}, {0x2, &(0x7f00000008c0)=0x7, 0x1}, {0x4, &(0x7f0000000900), 0x2}, {0x1ff, &(0x7f0000000940)=0x8, 0x2}, {0x9, &(0x7f0000000980)=0x2, 0x2}, {0x3, &(0x7f00000009c0)=0x100000001, 0x82}, {0x7ff, &(0x7f0000000a00)=0x5, 0x2}, {0x79, &(0x7f0000000a40)=0xa, 0x82}, {0x2, &(0x7f0000000a80)=0xd, 0x82}, {0x482, &(0x7f0000000ac0)=0x9, 0x82}, {0x6, &(0x7f0000000b00)=0x7a1, 0x82}, {0xe, &(0x7f0000000b40)=0x6, 0x2}, {0x6, &(0x7f0000000b80)=0x9, 0x82}, {0xc6, &(0x7f0000000bc0)=0x7f, 0x2}, {0x6, &(0x7f0000000c00)=0x7fff, 0x80}, {0x5, &(0x7f0000000c40)=0x7f, 0x82}, {0x9, &(0x7f0000000c80)=0x4, 0x82}, {0x6f, &(0x7f0000000cc0)=0xf7f, 0x2}, {0x6, &(0x7f0000000d00)=0x9, 0x2}, {0x1, &(0x7f0000000d40)=0x8, 0x2}, {0x56, &(0x7f0000000d80), 0x2}, {0x2d, &(0x7f0000000dc0)=0xd273, 0x82}, {0x2, &(0x7f0000000e00)=0xe, 0x82}, {0x0, &(0x7f0000000e40)=0x79ef, 0x82}, {0x0, &(0x7f0000000e80)=0xc5, 0x82}, {0x4, &(0x7f0000000f00)=0x4, 0x82}, {0x1, &(0x7f0000000f40)=0x6, 0x2}, {0x80000000, &(0x7f0000000f80)=0xffffffffffffffff, 0x2}, {0x45, &(0x7f0000000fc0)=0xff, 0x82}, {0x7, &(0x7f0000001000)=0x1, 0x2}, {0x8, &(0x7f0000001040)=0x3ff, 0x82}, {0x10001, &(0x7f0000001080)=0x7, 0x82}, {0x0, &(0x7f00000010c0)=0x9, 0x82}, {0x3, &(0x7f0000001100)=0x7f, 0x82}, {0x8, &(0x7f0000001140)=0x2, 0x82}, {0xe, &(0x7f0000001180)=0x2, 0x2}, {0xe, &(0x7f00000011c0)=0x1, 0x2}, {0x683a, &(0x7f0000001200)=0x6, 0x2}, {0x2, &(0x7f0000001240)=0x4, 0x82}, {0x9, &(0x7f0000001280)=0xffffffffffffff81, 0x2}, {0x8, &(0x7f00000012c0)=0x1ff, 0x2}, {0x5, &(0x7f0000001300)=0x7fff, 0x2}, {0x6, &(0x7f0000001340)=0x8, 0x82}, {0x9, &(0x7f0000001380)=0x3ff, 0x2}, {0x3b61, &(0x7f00000013c0)=0x9, 0x2}, {0xed8c, &(0x7f0000001400)=0x8, 0x82}, {0x7, &(0x7f0000001440)=0x8, 0x2}, {0x3, &(0x7f0000001480)=0x1, 0x82}, {0x2, &(0x7f00000014c0)=0x3, 0x2}, {0x100000001, &(0x7f0000001500), 0x82}, {0x9, &(0x7f0000001540)=0x4, 0x2}, {0x0, &(0x7f0000001580)=0x6e, 0x82}, {0x7e, &(0x7f00000015c0)=0x7f3}, {0x5, &(0x7f0000001600)=0x7, 0x82}, {0x200, &(0x7f0000001640)=0x5, 0x2}, {0x2, &(0x7f0000001680)=0x8, 0x82}, {0x2415, &(0x7f00000016c0)=0xd0, 0x82}, {0x5, &(0x7f0000001700), 0x2}, {0x7, &(0x7f0000001740)=0x4, 0x80}, {0x4dc, &(0x7f0000001780)=0x4, 0x82}, {0x1, &(0x7f00000017c0)=0x7, 0x2}, {0x7, &(0x7f0000001800)=0x3ff, 0x82}], 0x50, 0x0, &(0x7f0000002000)={r4, r5+60000000}, 0x87a2137378a26f8a) ppoll(&(0x7f00000000c0)=[{r1, 0x8000}], 0x1, &(0x7f00000001c0)={r2, r3+10000000}, &(0x7f0000000200)={[0x4]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r7, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d6500000000000065070000021c0000070700004c0000001f750000000000006154000000000000070400000400f9ffad4301000000000095000000000000000500000000000020950000000000000096669e8e4da2f09183bb"], &(0x7f0000000100)='GPL\x00'}, 0x48) setrlimit(0x6, &(0x7f0000000000)={0xd374dee, 0x2}) (async) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x108) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) (async) read$FUSE(r9, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000040)={0x50, 0x0, r10, {0x7, 0x1f, 0x80000001, 0xc18da8, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r9, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, 0x0) (async) syz_fuse_handle_req(r8, &(0x7f0000008380)="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", 0x2000, &(0x7f0000004980)={&(0x7f0000002040)={0x50, 0x0, 0x2, {0x7, 0x2b, 0x6, 0x32104862, 0x3, 0x9, 0x2, 0x10000, 0x0, 0x0, 0x8, 0xff}}, &(0x7f0000002140)={0x18}, &(0x7f0000002180)={0x18, 0x0, 0x4}, &(0x7f00000041c0)={0x18, 0xfffffffffffffff5, 0xffff, {0x6}}, &(0x7f0000004200)={0x18, 0x0, 0x9, {0x1}}, &(0x7f0000004240)={0x28, 0x0, 0x4, {{0x9, 0x7fff, 0x1, r13}}}, &(0x7f0000004280)={0x60, 0x0, 0x7, {{0x1, 0xfff, 0x2, 0x13d72f68, 0x4, 0x80000000, 0x3, 0x1}}}, &(0x7f0000004300)={0x18, 0x0, 0x8001, {0x3}}, &(0x7f0000004340)={0x18, 0xfffffffffffffff5, 0x1, {'batadv0\x00'}}, &(0x7f0000004380)={0x20, 0x0, 0x7, {0x0, 0x8}}, &(0x7f00000043c0)={0x78, 0xffffffffffffffda, 0x3ff, {0x0, 0x7ff, 0x0, {0x2, 0x4, 0x6, 0x6, 0x5, 0x1, 0x3ff, 0xeda, 0x664f5917, 0x2000, 0x16f, r11, 0xffffffffffffffff, 0x2, 0x4}}}, &(0x7f0000004440)={0x90, 0x0, 0x6, {0x3, 0x2, 0x9, 0x400, 0x8, 0x2, {0x3, 0x8000000000000000, 0x8, 0x9, 0x0, 0x401, 0xf, 0x7, 0x5, 0xc000, 0x10, 0xee01, r12, 0x1000, 0x9}}}, &(0x7f0000004500)={0xb8, 0xfffffffffffffff5, 0x7, [{0x5, 0xa3e, 0xa, 0x49ce926, '/dev/fuse\x00'}, {0x0, 0x8001, 0x5, 0x320, '@}+{$'}, {0x0, 0x8, 0x1, 0x703, '{'}, {0x3, 0x8, 0x0, 0xf}, {0x4, 0x2, 0xb, 0x3, '/dev/loop#\x00'}]}, &(0x7f00000045c0)={0xb8, 0x0, 0x2, [{{0x1, 0x2, 0x8, 0xa9, 0x8, 0x0, {0x5, 0x6, 0x3, 0x40000000000000, 0x0, 0x7, 0x2, 0x8, 0x670, 0xa3b0ffc8be95f0a5, 0x68d, r11, r12, 0x8, 0x5}}, {0x4, 0x4, 0xb, 0x3141, '/dev/loop#\x00'}}]}, &(0x7f0000004680)={0xa0, 0x0, 0xffffffffffffffb6, {{0x6, 0x0, 0x8, 0x3fea, 0xf, 0x9, {0x1, 0xc, 0x10001, 0x6, 0x7, 0x5, 0xfd, 0x0, 0x1, 0x6000, 0x99, r11, r12, 0x0, 0x4}}, {0x0, 0x3}}}, &(0x7f0000004740)={0x20, 0xfffffffffffffffe, 0xfffffffffffffffa, {0xb, 0x0, 0x5, 0x6}}, &(0x7f0000004840)={0x130, 0x1f, 0xd, {0x8, 0x40, 0x0, '\x00', {0x2000, 0x80, 0x0, 0xfffffff7, 0x0, r12, 0x2000, '\x00', 0x2a8701aa, 0x5, 0x7ff, 0xfffffffffffffbff, {0x100000000, 0x1}, {0x6, 0x5}, {0xfffffffffffff2a2, 0x7}, {0x7ff, 0x4}, 0x0, 0x6, 0x9, 0x1}}}}) r14 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) (async) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r14, 0x4c0a, &(0x7f00000002c0)={r15, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) (async) io_uring_setup(0x3e86, &(0x7f0000000780)={0x0, 0x1d08, 0x8000, 0x1, 0x1a3}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f000001e000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001d000/0x4000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) (async) setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) (async) setitimer(0x1, 0x0, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r14) kernel console output (not intermixed with test programs): : device descriptor read/8, error -71 [ 260.581345][ T40] audit: type=1400 audit(2000000336.072:27673): avc: denied { getattr } for pid=14645 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.591992][ T40] audit: type=1400 audit(2000000336.082:27674): avc: denied { add_name } for pid=14644 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.603322][ T40] audit: type=1400 audit(2000000336.132:27675): avc: denied { remove_name } for pid=14647 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=9259 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.626292][T14517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.634221][T14517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.641580][T14517] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.644324][T14517] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.647515][T14517] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.650234][T14517] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.673498][ T40] audit: type=1400 audit(2000000336.202:27676): avc: denied { create } for pid=14517 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 260.702506][ T184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.706383][ T184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.745947][T10524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.748317][T10524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.757212][T14556] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 260.762347][T14556] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 260.766797][T14556] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 260.774541][T14556] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 260.825797][ T1330] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 260.846230][ T1330] usb 11-1: device descriptor read/8, error -71 [ 260.851348][T14556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.860394][T14556] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.870243][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.873259][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.885987][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.888952][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.955168][ T1330] usb usb11-port1: unable to enumerate USB device [ 261.067036][T14556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.122506][T14556] veth0_vlan: entered promiscuous mode [ 261.127449][T14556] veth1_vlan: entered promiscuous mode [ 261.143568][T14556] veth0_macvtap: entered promiscuous mode [ 261.148843][T14556] veth1_macvtap: entered promiscuous mode [ 261.159621][T14556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.167787][T14556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.173050][T14556] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.176534][T14556] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.179301][T14556] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.182041][T14556] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.238860][T10524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.241353][T10524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.258557][ T184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.261033][ T184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.302980][T14689] 9pnet_virtio: no channels available for device syz [ 261.349062][T14692] netlink: 'syz.3.2308': attribute type 4 has an invalid length. [ 261.349921][T14691] netlink: 'syz.3.2308': attribute type 4 has an invalid length. [ 261.690621][ T1142] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.945475][ T5964] Bluetooth: hci6: command tx timeout [ 262.328189][ T1142] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.510113][T14756] /dev/sg0: Can't lookup blockdev [ 262.511269][T14755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.628561][T14763] [ 262.646664][ T5959] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 262.652548][ T5959] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 262.657536][ T5959] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 262.661129][ T5959] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 262.663688][ T5959] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 262.694747][T14769] lo speed is unknown, defaulting to 1000 [ 262.704670][T14774] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2332'. [ 262.741076][T14779] bio_check_eod: 11 callbacks suppressed [ 262.741091][T14779] syz.6.2333: attempt to access beyond end of device [ 262.741091][T14779] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 262.748575][T14779] efs: cannot read volume header [ 262.787921][T14769] chnl_net:caif_netlink_parms(): no params data found [ 262.793250][T14779] lo speed is unknown, defaulting to 1000 [ 262.889560][T14769] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.891786][T14769] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.894111][T14769] bridge_slave_0: entered allmulticast mode [ 262.897095][T14769] bridge_slave_0: entered promiscuous mode [ 262.902475][T14769] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.904740][T14769] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.909554][T14769] bridge_slave_1: entered allmulticast mode [ 262.912201][T14769] bridge_slave_1: entered promiscuous mode [ 262.956826][T14794] No such timeout policy "syz1" [ 262.987730][T14769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.992332][T14769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.052200][T14769] team0: Port device team_slave_0 added [ 263.056981][T14769] team0: Port device team_slave_1 added [ 263.074792][ T1142] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.128584][T14769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.130734][T14769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.139552][T14769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.143944][T14769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.146626][T14769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.156981][T14769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.219156][T14769] hsr_slave_0: entered promiscuous mode [ 263.221548][T14769] hsr_slave_1: entered promiscuous mode [ 263.223690][T14769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.227600][T14769] Cannot create hsr debugfs directory [ 263.236150][T14810] xt_hashlimit: size too large, truncated to 1048576 [ 263.285912][ T1142] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.468746][T14825] xt_hashlimit: size too large, truncated to 1048576 [ 263.521235][ T1142] bridge_slave_1: left allmulticast mode [ 263.523093][ T1142] bridge_slave_1: left promiscuous mode [ 263.525114][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.529049][ T1142] bridge_slave_0: left allmulticast mode [ 263.530876][ T1142] bridge_slave_0: left promiscuous mode [ 263.532789][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.683102][T14830] erofs (device sr0): cannot find valid erofs superblock [ 263.896574][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.901111][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.904839][ T1142] bond0 (unregistering): Released all slaves [ 263.954205][T14841] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 263.956676][T14841] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 263.965311][T14841] vhci_hcd vhci_hcd.0: Device attached [ 264.020626][T14842] vhci_hcd: connection closed [ 264.022089][ T1150] vhci_hcd: stop threads [ 264.024878][ T1150] vhci_hcd: release socket [ 264.025048][ T5964] Bluetooth: hci6: command tx timeout [ 264.028519][ T1150] vhci_hcd: disconnect device [ 264.332566][ T1142] hsr_slave_0: left promiscuous mode [ 264.335826][ T1142] hsr_slave_1: left promiscuous mode [ 264.337961][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.340360][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.343422][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.346586][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.403285][ T1142] veth1_macvtap: left promiscuous mode [ 264.405748][ T1142] veth0_macvtap: left promiscuous mode [ 264.408156][ T1142] veth1_vlan: left promiscuous mode [ 264.411822][ T1142] veth0_vlan: left promiscuous mode [ 264.453012][T14862] syz.2.2341: attempt to access beyond end of device [ 264.453012][T14862] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 264.458661][T14862] gfs2: error -5 reading superblock [ 264.601293][T14869] overlayfs: upper fs does not support tmpfile. [ 264.637531][T14873] 9pnet_fd: Insufficient options for proto=fd [ 264.674178][T14880] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2347'. [ 264.747121][ T5964] Bluetooth: hci4: command tx timeout [ 264.830247][T14894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2351'. [ 265.103989][T14899] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 265.208461][T14902] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=14902 comm=syz.2.2354 [ 265.336632][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 265.442039][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 266.099658][ T40] kauditd_printk_skb: 384 callbacks suppressed [ 266.099668][ T40] audit: type=1400 audit(2000000341.632:28061): avc: denied { read write } for pid=5951 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 266.105250][ T5964] Bluetooth: hci6: command tx timeout [ 266.117225][ T40] audit: type=1400 audit(2000000341.632:28062): avc: denied { open } for pid=5951 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 266.124558][ T40] audit: type=1400 audit(2000000341.632:28063): avc: denied { ioctl } for pid=5951 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 266.135309][ T40] audit: type=1400 audit(2000000341.662:28064): avc: denied { allowed } for pid=14905 comm="syz.2.2356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 266.152453][ T40] audit: type=1400 audit(2000000341.672:28065): avc: denied { map } for pid=14905 comm="syz.2.2356" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=71531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 266.161503][T14769] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 266.163012][ T40] audit: type=1400 audit(2000000341.672:28066): avc: denied { read write } for pid=14905 comm="syz.2.2356" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=71531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 266.174760][ T40] audit: type=1400 audit(2000000341.702:28067): avc: denied { mount } for pid=14905 comm="syz.2.2356" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 266.193831][T14769] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 266.199870][T14769] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 266.204030][ T40] audit: type=1400 audit(2000000341.722:28068): avc: denied { unmount } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 266.211543][ T40] audit: type=1400 audit(2000000341.732:28069): avc: denied { execute } for pid=14909 comm="syz.3.2358" dev="tmpfs" ino=3116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 266.213249][T14769] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 266.220781][ T40] audit: type=1400 audit(2000000341.732:28070): avc: denied { execute_no_trans } for pid=14909 comm="syz.3.2358" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=3116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 266.309027][T14769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.322021][T14769] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.335958][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.338804][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.356215][T10519] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.358889][T10519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.437045][T14940] can: request_module (can-proto-3) failed. [ 266.457144][T14927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2362'. [ 266.484767][T14954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2367'. [ 266.524349][T14769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.744960][T14769] veth0_vlan: entered promiscuous mode [ 266.756674][T14769] veth1_vlan: entered promiscuous mode [ 266.780178][T14769] veth0_macvtap: entered promiscuous mode [ 266.790110][T14769] veth1_macvtap: entered promiscuous mode [ 266.809934][T14769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.812517][T14980] netlink: 'syz.6.2374': attribute type 2 has an invalid length. [ 266.814792][T14769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.816157][T14980] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2374'. [ 266.825035][ T5964] Bluetooth: hci4: command tx timeout [ 266.825443][T14980] netlink: 'syz.6.2374': attribute type 2 has an invalid length. [ 266.827427][T14769] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.829826][T14980] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2374'. [ 266.832868][T14769] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.839223][T14769] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.841944][T14769] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.935502][T10519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.938073][T10519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.958140][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.961185][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.024521][T14989] block device autoloading is deprecated and will be removed. [ 267.560609][T15002] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 267.599524][T15006] tmpfs: Bad value for 'mpol' [ 267.736239][T15016] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 5, id = 0 [ 267.875883][T15025] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2389'. [ 267.878818][T15025] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 267.896382][T15025] hpfs: hpfs_map_sector(): read error [ 267.926646][T15030] binder: BINDER_SET_CONTEXT_MGR already set [ 267.926698][T15031] binder: 15028:15031 ioctl c0306201 200000002800 returned -14 [ 267.929228][T15030] binder: 15028:15030 ioctl 4018620d 200000000240 returned -16 [ 267.981137][T15035] vivid-002: ================= START STATUS ================= [ 267.984263][T15035] vivid-002: Radio HW Seek Mode: Bounded [ 267.987632][T15035] vivid-002: Radio Programmable HW Seek: false [ 267.990188][T15035] vivid-002: RDS Rx I/O Mode: Block I/O [ 267.993913][T15035] vivid-002: Generate RBDS Instead of RDS: false [ 267.996985][T15035] vivid-002: RDS Reception: true [ 267.999170][T15035] vivid-002: RDS Program Type: 0 inactive [ 268.001553][T15035] vivid-002: RDS PS Name: inactive [ 268.003752][T15035] vivid-002: RDS Radio Text: inactive [ 268.008509][T15035] vivid-002: RDS Traffic Announcement: false inactive [ 268.011023][T15035] vivid-002: RDS Traffic Program: false inactive [ 268.013447][T15035] vivid-002: RDS Music: false inactive [ 268.015194][T15035] vivid-002: ================== END STATUS ================== [ 268.049187][T15037] 9pnet_virtio: no channels available for device syz [ 268.446889][T15041] lo speed is unknown, defaulting to 1000 [ 268.760325][T15056] vlan2: entered allmulticast mode [ 268.761962][T15056] veth1: entered allmulticast mode [ 268.804901][ T1150] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.781523][ T5959] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.789045][ T5959] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.792015][ T5959] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.796422][ T5959] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.805611][ T5959] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 269.830739][T15066] lo speed is unknown, defaulting to 1000 [ 269.906545][T15066] chnl_net:caif_netlink_parms(): no params data found [ 269.939679][T15075] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2401'. [ 270.001128][T15066] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.003359][T15066] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.006124][T15066] bridge_slave_0: entered allmulticast mode [ 270.008757][T15066] bridge_slave_0: entered promiscuous mode [ 270.011916][T15066] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.014191][T15066] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.016529][T15066] bridge_slave_1: entered allmulticast mode [ 270.019273][T15066] bridge_slave_1: entered promiscuous mode [ 270.060554][T15066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.065758][T15066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.130126][T15066] team0: Port device team_slave_0 added [ 270.149809][T15087] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2404'. [ 270.150892][T15066] team0: Port device team_slave_1 added [ 270.186603][T15066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.188847][T15066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.197816][T15066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.202599][T15066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.204663][T15066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.213175][T15066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.261051][T15066] hsr_slave_0: entered promiscuous mode [ 270.263556][T15066] hsr_slave_1: entered promiscuous mode [ 270.266382][T15066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.268875][T15066] Cannot create hsr debugfs directory [ 270.319394][ T1150] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.366937][T15097] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2407'. [ 270.408374][ T1150] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.504248][ T1150] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.509212][ T24] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 270.658325][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 270.662050][ T24] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 270.676223][ T24] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 1096, setting to 1024 [ 270.680019][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 270.688683][ T24] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 270.691585][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.694064][ T24] usb 8-1: Product: syz [ 270.696004][ T24] usb 8-1: Manufacturer: syz [ 270.697545][ T24] usb 8-1: SerialNumber: syz [ 270.706174][ T24] usb 8-1: config 0 descriptor?? [ 270.721860][ T1150] bridge_slave_1: left allmulticast mode [ 270.724392][ T1150] bridge_slave_1: left promiscuous mode [ 270.727071][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.732312][ T1150] bridge_slave_0: left allmulticast mode [ 270.734051][ T1150] bridge_slave_0: left promiscuous mode [ 270.745944][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.827598][T15116] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 270.871344][T15120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.912933][ T24] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input23 [ 271.080999][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.085086][ T1330] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 271.087914][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.091866][ T1150] bond0 (unregistering): Released all slaves [ 271.111382][ T40] kauditd_printk_skb: 320 callbacks suppressed [ 271.111397][ T40] audit: type=1400 audit(2000000346.642:28391): avc: denied { read } for pid=5665 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 271.122225][ T40] audit: type=1400 audit(2000000346.652:28392): avc: denied { read } for pid=15094 comm="syz.3.2406" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 271.130523][ T40] audit: type=1400 audit(2000000346.652:28393): avc: denied { open } for pid=15094 comm="syz.3.2406" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 271.167798][ T40] audit: type=1400 audit(2000000346.712:28394): avc: denied { search } for pid=5665 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.174270][ T40] audit: type=1400 audit(2000000346.712:28395): avc: denied { search } for pid=5665 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.197074][ T40] audit: type=1400 audit(2000000346.712:28396): avc: denied { search } for pid=5665 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.207496][ T40] audit: type=1400 audit(2000000346.712:28397): avc: denied { prog_load } for pid=15094 comm="syz.3.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 271.219834][T10062] usb 8-1: USB disconnect, device number 13 [ 271.236227][ T1330] usb 11-1: Using ep0 maxpacket: 16 [ 271.240301][ T40] audit: type=1400 audit(2000000346.772:28398): avc: denied { read open } for pid=15128 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.257515][ T40] audit: type=1400 audit(2000000346.772:28399): avc: denied { getattr } for pid=15128 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.265940][ T1330] usb 11-1: config 0 has no interfaces? [ 271.267683][ T1330] usb 11-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 271.270425][ T1330] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.275159][ T40] audit: type=1400 audit(2000000346.792:28400): avc: denied { ioctl } for pid=15115 comm="syz.6.2411" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 271.282771][ T1330] usb 11-1: config 0 descriptor?? [ 271.407905][ T1150] hsr_slave_0: left promiscuous mode [ 271.410261][ T1150] hsr_slave_1: left promiscuous mode [ 271.412220][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.414454][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.418296][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.420756][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.456308][ T1150] veth1_macvtap: left promiscuous mode [ 271.458049][ T1150] veth0_macvtap: left promiscuous mode [ 271.460062][ T1150] veth1_vlan: left promiscuous mode [ 271.462313][ T1150] veth0_vlan: left promiscuous mode [ 271.492523][ T6188] usb 11-1: USB disconnect, device number 18 [ 271.764148][T15133] /dev/sg0: Can't lookup blockdev [ 271.832518][T15137] input: syz1 as /devices/virtual/input/input24 [ 271.867635][ T5959] Bluetooth: hci4: command tx timeout [ 271.949809][T15141] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 271.951870][T15141] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 271.955650][T15141] vhci_hcd vhci_hcd.0: Device attached [ 271.958731][T15142] vhci_hcd: unknown pdu 2 [ 271.960484][ T1141] vhci_hcd: stop threads [ 271.961932][ T1141] vhci_hcd: release socket [ 271.963349][ T1141] vhci_hcd: disconnect device [ 272.313383][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 272.394860][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 273.094304][T10519] Bluetooth: hci7: Frame reassembly failed (-84) [ 273.123527][T15066] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 273.130020][T15066] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 273.135588][T15066] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 273.146701][T15066] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 273.192320][T15066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.202365][T15066] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.213874][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.216794][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.233007][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.235966][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.305766][ T836] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 273.412345][T15066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.467094][ T836] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.470490][ T836] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 273.479280][ T836] usb 11-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 273.482456][ T836] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 273.485534][ T836] usb 11-1: Product: syz [ 273.486861][ T836] usb 11-1: Manufacturer: syz [ 273.488326][ T836] usb 11-1: SerialNumber: syz [ 273.492300][ T836] usb 11-1: config 0 descriptor?? [ 273.561422][T15066] veth0_vlan: entered promiscuous mode [ 273.566894][T15066] veth1_vlan: entered promiscuous mode [ 273.580609][T15066] veth0_macvtap: entered promiscuous mode [ 273.584803][T15066] veth1_macvtap: entered promiscuous mode [ 273.594255][T15066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.600897][T15066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.606525][T15066] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.609210][T15066] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.612116][T15066] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.614771][T15066] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.656017][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.658371][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.675319][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.678213][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.861119][ T836] usb 11-1: USB disconnect, device number 19 [ 273.868908][ T8447] udevd[8447]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.626671][T15201] lo speed is unknown, defaulting to 1000 [ 274.951451][T15209] sctp: [Deprecated]: syz.6.2426 (pid 15209) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.951451][T15209] Use struct sctp_sack_info instead [ 275.114535][T15216] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 275.155439][ T5959] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 275.210720][T15221] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2429'. [ 275.219604][T15221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2429'. [ 275.322346][T15221] hsr_slave_1 (unregistering): left promiscuous mode [ 275.478678][T15226] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 275.631367][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.604669][ T40] kauditd_printk_skb: 179 callbacks suppressed [ 276.604686][ T40] audit: type=1400 audit(2000000352.132:28580): avc: denied { execute } for pid=15233 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 276.617496][ T40] audit: type=1400 audit(2000000352.132:28581): avc: denied { execute_no_trans } for pid=15233 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 276.626916][ T40] audit: type=1400 audit(2000000352.162:28582): avc: denied { read } for pid=15234 comm="syz.6.2434" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 276.634026][ T40] audit: type=1400 audit(2000000352.162:28583): avc: denied { open } for pid=15234 comm="syz.6.2434" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 276.642436][ T40] audit: type=1400 audit(2000000352.162:28584): avc: denied { ioctl } for pid=15234 comm="syz.6.2434" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 276.651248][ T40] audit: type=1400 audit(2000000352.172:28585): avc: denied { append } for pid=15234 comm="syz.6.2434" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 276.659848][ T40] audit: type=1400 audit(2000000352.172:28586): avc: denied { create } for pid=15238 comm="syz.3.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 276.671960][ T40] audit: type=1400 audit(2000000352.172:28587): avc: denied { ioctl } for pid=15238 comm="syz.3.2433" path="socket:[73508]" dev="sockfs" ino=73508 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 276.683210][ T40] audit: type=1400 audit(2000000352.192:28588): avc: denied { create } for pid=15243 comm="syz.6.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 276.688088][T15247] overlayfs: failed to resolve './file1': -2 [ 276.691037][ T40] audit: type=1400 audit(2000000352.192:28589): avc: denied { connect } for pid=15243 comm="syz.6.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 276.700514][T15248] binder_alloc: 15246: binder_alloc_buf, no vma [ 276.703624][T15248] binder_alloc: 15246: binder_alloc_buf size 16408 failed, no address space [ 276.708335][T15248] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 276.802278][T15253] netlink: 'syz.3.2442': attribute type 2 has an invalid length. [ 276.823409][ T5964] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.832643][T15262] 8021q: adding VLAN 0 to HW filter on device bond8 [ 276.835123][ T5964] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.838206][ T5964] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.845269][ T5964] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.847842][ T5964] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.882746][T15271] syzkaller1: entered promiscuous mode [ 276.886325][T15271] syzkaller1: entered allmulticast mode [ 276.893030][T15265] lo speed is unknown, defaulting to 1000 [ 276.922654][T15277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2447'. [ 276.936178][T15277] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 276.975068][T15282] overlayfs: failed to resolve './file0': -2 [ 277.061394][T15265] chnl_net:caif_netlink_parms(): no params data found [ 277.153249][T15302] usb usb8: usbfs: process 15302 (syz.6.2452) did not claim interface 0 before use [ 277.179791][T15265] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.182207][T15265] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.184381][T15265] bridge_slave_0: entered allmulticast mode [ 277.187762][T15265] bridge_slave_0: entered promiscuous mode [ 277.190695][T15265] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.192855][T15265] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.195412][T15265] bridge_slave_1: entered allmulticast mode [ 277.197982][T15265] bridge_slave_1: entered promiscuous mode [ 277.236987][T15265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.241392][T15265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.280927][T15265] team0: Port device team_slave_0 added [ 277.292317][T15265] team0: Port device team_slave_1 added [ 277.347912][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.353955][T15265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.359219][T15265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.369484][T15265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.373603][T15265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.375778][T15265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.383300][T15265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.395647][ T59] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 277.413877][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.434216][T15265] hsr_slave_0: entered promiscuous mode [ 277.436670][T15265] hsr_slave_1: entered promiscuous mode [ 277.438862][T15265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.441254][T15265] Cannot create hsr debugfs directory [ 277.484624][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.545140][ T59] usb 8-1: Using ep0 maxpacket: 8 [ 277.548081][ T59] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 277.550415][ T59] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 277.553815][ T59] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 277.559772][ T59] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 277.568818][ T59] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 277.572244][ T59] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 277.575761][ T59] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 277.579635][ T59] usb 8-1: config 168 interface 0 has no altsetting 0 [ 277.582500][ T59] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 277.584818][ T59] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 277.588421][ T59] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 277.591823][ T59] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 277.595335][ T59] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 277.598628][ T59] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 277.602000][ T59] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 277.607144][ T59] usb 8-1: config 168 interface 0 has no altsetting 0 [ 277.611909][ T59] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 277.614106][ T59] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 277.618964][ T59] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 277.622342][ T59] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 277.625942][ T59] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 277.629338][ T59] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 277.634751][ T12] bridge_slave_1: left allmulticast mode [ 277.634791][ T59] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 277.637018][ T12] bridge_slave_1: left promiscuous mode [ 277.642575][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.643050][ T59] usb 8-1: config 168 interface 0 has no altsetting 0 [ 277.648284][ T12] bridge_slave_0: left allmulticast mode [ 277.650255][ T12] bridge_slave_0: left promiscuous mode [ 277.651339][ T59] usb 8-1: string descriptor 0 read error: -22 [ 277.652042][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.653918][ T59] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 277.658910][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.665057][ T836] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 277.675752][ T59] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 277.805036][ T836] usb 11-1: device descriptor read/64, error -71 [ 277.822937][T15324] ntfs3(sr0): Primary boot signature is not NTFS. [ 277.826106][T15324] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 277.967712][T15330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2461'. [ 277.972373][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.979076][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.983122][ T12] bond0 (unregistering): Released all slaves [ 278.065377][ T836] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 278.102715][T15334] tipc: Trying to set illegal importance in message [ 278.147551][T15338] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2463'. [ 278.205002][ T836] usb 11-1: device descriptor read/64, error -71 [ 278.236950][T15350] overlayfs: failed to resolve './file0': -2 [ 278.280030][T15352] ieee802154 phy1 wpan1: encryption failed: -22 [ 278.289261][T15352] (syz.2.2466,15352,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 278.318432][T15352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2466'. [ 278.325439][ T836] usb usb11-port1: attempt power cycle [ 278.361776][ T12] hsr_slave_0: left promiscuous mode [ 278.364022][ T12] hsr_slave_1: left promiscuous mode [ 278.366426][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.368813][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.371987][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.374368][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.392586][ T59] usb 8-1: USB disconnect, device number 14 [ 278.428792][ T12] veth1_macvtap: left promiscuous mode [ 278.430742][ T12] veth0_macvtap: left promiscuous mode [ 278.432465][ T12] veth1_vlan: left promiscuous mode [ 278.434191][ T12] veth0_vlan: left promiscuous mode [ 278.447268][T15363] 9pnet_virtio: no channels available for device syz [ 278.453900][T15363] 9pnet_virtio: no channels available for device syz [ 278.463967][T15363] 9pnet_virtio: no channels available for device syz [ 278.467532][T15363] 9pnet_virtio: no channels available for device syz [ 278.470601][T15363] 9pnet_virtio: no channels available for device syz [ 278.473545][T15363] 9pnet_virtio: no channels available for device syz [ 278.695253][ T836] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 278.715548][ T836] usb 11-1: device descriptor read/8, error -71 [ 278.908165][ T5959] Bluetooth: hci4: command tx timeout [ 278.965049][ T836] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 278.995938][ T836] usb 11-1: device descriptor read/8, error -71 [ 279.110411][ T836] usb usb11-port1: unable to enumerate USB device [ 279.324817][ T12] team0 (unregistering): Port device team_slave_1 removed [ 279.411658][ T12] team0 (unregistering): Port device team_slave_0 removed [ 280.106069][T15265] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 280.113933][T15265] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 280.120682][T15265] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 280.128056][T15265] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 280.191971][T15398] bond7: (slave geneve4): Releasing active interface [ 280.248193][T15265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.268460][T15265] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.282285][T10519] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.285205][T10519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.302716][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.305739][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.452776][T15407] netlink: 'syz.3.2475': attribute type 21 has an invalid length. [ 280.455767][T15407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2475'. [ 280.517506][T15412] zonefs (nbd6) ERROR: Not a zoned block device [ 280.544768][T15265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.746589][ T836] IPVS: starting estimator thread 0... [ 280.823151][T15265] veth0_vlan: entered promiscuous mode [ 280.835215][T15427] IPVS: using max 27 ests per chain, 64800 per kthread [ 280.835582][ T1459] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 280.842993][T15265] veth1_vlan: entered promiscuous mode [ 280.887877][T15265] veth0_macvtap: entered promiscuous mode [ 280.893175][T15265] veth1_macvtap: entered promiscuous mode [ 280.919383][T15265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.939585][T15265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.956913][T15265] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.960130][T15265] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.963011][T15265] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.966544][T15265] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.985062][ T5959] Bluetooth: hci4: command tx timeout [ 280.985749][ T1459] usb 8-1: Using ep0 maxpacket: 32 [ 280.990340][ T1459] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 280.995632][ T1459] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 280.998410][ T1459] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 281.001221][ T1459] usb 8-1: Product: syz [ 281.012024][ T1459] usb 8-1: Manufacturer: syz [ 281.013566][ T1459] usb 8-1: SerialNumber: syz [ 281.032795][ T1459] usb 8-1: config 0 descriptor?? [ 281.035758][T15416] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 281.090187][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.104551][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.136123][T10524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.138981][T10524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.318468][T15416] lo speed is unknown, defaulting to 1000 [ 281.609276][ T40] kauditd_printk_skb: 18656 callbacks suppressed [ 281.609287][ T40] audit: type=1326 audit(281.520:47240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15397 comm="syz.2.2474" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d91f8e929 code=0x50000 [ 281.612495][T15452] audit: audit_backlog=65 > audit_backlog_limit=64 [ 281.618132][ T40] audit: type=1326 audit(281.530:47241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15397 comm="syz.2.2474" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d91f8e929 code=0x50000 [ 281.618159][ T40] audit: type=1326 audit(281.530:47242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15397 comm="syz.2.2474" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d91f8e929 code=0x50000 [ 281.618181][ T40] audit: type=1326 audit(281.530:47243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15397 comm="syz.2.2474" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d91f8e929 code=0x50000 [ 281.618202][ T40] audit: type=1326 audit(281.530:47244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15397 comm="syz.2.2474" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d91f8e929 code=0x50000 [ 281.618224][ T40] audit: type=1326 audit(281.530:47245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15397 comm="syz.2.2474" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d91f8e929 code=0x50000 [ 281.620489][T15452] audit: audit_lost=16 audit_rate_limit=0 audit_backlog_limit=64 [ 281.629178][ T40] audit: type=1326 audit(281.530:47246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15397 comm="syz.2.2474" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d91f8e929 code=0x50000 [ 281.636372][T15452] audit: backlog limit exceeded [ 281.881245][T15457] syz.6.2487 (15457) used greatest stack depth: 17640 bytes left [ 282.184994][ T1459] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 282.355020][ T1459] usb 11-1: Using ep0 maxpacket: 32 [ 282.358218][ T1459] usb 11-1: config 9 has an invalid interface number: 91 but max is 0 [ 282.360762][ T1459] usb 11-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 282.363875][ T1459] usb 11-1: config 9 has no interface number 0 [ 282.375173][ T1459] usb 11-1: config 9 interface 91 altsetting 3 bulk endpoint 0x6 has invalid maxpacket 112 [ 282.378313][ T1459] usb 11-1: config 9 interface 91 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 282.382296][ T1459] usb 11-1: config 9 interface 91 has no altsetting 0 [ 282.396415][ T1459] usb 11-1: New USB device found, idVendor=0499, idProduct=1045, bcdDevice= 8.57 [ 282.399297][ T1459] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.401805][ T1459] usb 11-1: Product: é„–ì¾â”®é½» [ 282.403383][ T1459] usb 11-1: Manufacturer: 易ᑉ몓ꠕã™æ ¶ïŒŽè°¶ê³­ê‚™â·á’¹ç”ƒë˜µå«“쨄嬥徻犯뎘싩தá­æ§„䃄䄳ឞ螿ᅠ仳è³ê°ìŽ“ྲ亷摧穆䚼濯㬞⥣팷僘撳术똂髞穷▼ᒮ柬Ḁ竬烯⒉⒣í¯å£†ëº€ [ 282.414944][ T1459] usb 11-1: SerialNumber: æ…Ÿì•Žë›èœ«éª†ï¨¥Æ™à£šæ·ê¸±èœ€ç£€äŠ³îŠïƒ—䚪犯뢀ëªá—¥ã¹ˆæ°é¨à¨€ê¿®ç€ˆèŸµæ¸‹ç†£î°“ì‘ ê§é¤¦ì¾“ê“퇤냀ãŸæ»…핱㽼錳쥗譳è‚ä¿ê†ã·ƒæ«¿á ¢é½€á­¾ã³³í™±Í¤è®´ï±ÃïŽÜ’똦鈂풑웙䓬ऊä”ã¼ç”Šï®î“¡ì‹”岮탊럺ï¢ç£‡è›¿ä²¤â˜á¬²ì„¢î·¾Ú봈鵧Ꞅᄼé¥é›”꟟襫âè—¯ì†ã¾„驈믷 [ 282.435438][ T1459] usb 11-1: rejected 1 configuration due to insufficient available bus power [ 282.438187][ T1459] usb 11-1: no configuration chosen from 1 choice [ 282.614289][T10524] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.585183][ T1459] usb 8-1: USB disconnect, device number 15 [ 283.691945][T10524] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.768320][T15466] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2490'. [ 283.922967][T15473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2493'. [ 283.942304][ T5964] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 283.951943][ T5964] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 283.957215][ T5964] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 283.963795][ T5964] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 283.969971][ T5964] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 283.989867][T10524] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.998337][T15478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2494'. [ 284.039443][T15475] lo speed is unknown, defaulting to 1000 [ 284.081331][T10524] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.239997][T15475] chnl_net:caif_netlink_parms(): no params data found [ 284.306159][T10524] bridge_slave_1: left allmulticast mode [ 284.308024][T10524] bridge_slave_1: left promiscuous mode [ 284.309957][T10524] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.313646][T10524] bridge_slave_0: left allmulticast mode [ 284.315796][T10524] bridge_slave_0: left promiscuous mode [ 284.317714][T10524] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.400516][T15509] 9pnet_virtio: no channels available for device syz [ 284.604799][T10524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.610970][T10524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.614673][T10524] bond0 (unregistering): Released all slaves [ 284.715156][T15475] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.721292][T15475] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.723608][T15475] bridge_slave_0: entered allmulticast mode [ 284.727030][T15475] bridge_slave_0: entered promiscuous mode [ 284.729092][T15518] kernel read not supported for file /policy (pid: 15518 comm: syz.2.2506) [ 284.730178][T15475] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.734030][T15475] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.737055][T15475] bridge_slave_1: entered allmulticast mode [ 284.739818][T15475] bridge_slave_1: entered promiscuous mode [ 284.803457][T15523] pim6reg: entered allmulticast mode [ 284.805802][T15522] bridge0: entered allmulticast mode [ 284.810435][T15475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.815378][T15475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.903265][T15475] team0: Port device team_slave_0 added [ 284.909096][T15475] team0: Port device team_slave_1 added [ 284.942025][T15538] Falling back ldisc for ttyprintk. [ 284.947044][ T1330] usb 11-1: USB disconnect, device number 24 [ 284.972240][T15545] openvswitch: netlink: IPv6 tunnel dst address is zero [ 285.037448][T15475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.039742][T15475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.051430][T15475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.056410][T15475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.058592][T15475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.070066][T15475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.909848][T10524] hsr_slave_0: left promiscuous mode [ 285.922689][T10524] hsr_slave_1: left promiscuous mode [ 285.930380][T10524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.933559][T10524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.939033][T10524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.941720][T10524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.980365][T15578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2520'. [ 285.980388][T15577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2520'. [ 285.994505][T10524] veth1_macvtap: left promiscuous mode [ 285.998635][T10524] veth0_macvtap: left promiscuous mode [ 286.002809][T10524] veth1_vlan: left promiscuous mode [ 286.004825][T10524] veth0_vlan: left promiscuous mode [ 286.012782][ T5964] Bluetooth: Unexpected continuation frame (len 4) [ 286.025811][ T5964] Bluetooth: hci4: command tx timeout [ 286.226965][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803ed4c400: rx timeout, send abort [ 286.726104][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803ed4c800: rx timeout, send abort [ 286.731311][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803ed4c400: abort rx timeout. Force session deactivation [ 286.760237][T10524] team0 (unregistering): Port device team_slave_1 removed [ 286.841545][T10524] team0 (unregistering): Port device team_slave_0 removed [ 287.057844][ T40] kauditd_printk_skb: 24745 callbacks suppressed [ 287.057857][ T40] audit: type=1400 audit(286.980:71992): avc: denied { allowed } for pid=15589 comm="syz.6.2524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 287.068286][ T40] audit: type=1400 audit(286.990:71993): avc: denied { create } for pid=15589 comm="syz.6.2524" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 287.228775][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803ed4c800: abort rx timeout. Force session deactivation [ 287.299310][ T40] audit: type=1400 audit(287.220:71994): avc: denied { write } for pid=15594 comm="syz.6.2526" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 287.300123][T15595] usb usb8: usbfs: process 15595 (syz.6.2526) did not claim interface 0 before use [ 287.316156][T15595] overlay: Unknown parameter 'appraise' [ 287.318588][ T40] audit: type=1400 audit(287.230:71995): avc: denied { mounton } for pid=15594 comm="syz.6.2526" path="/499/file0" dev="tmpfs" ino=2920 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 287.416480][ T40] audit: type=1400 audit(287.340:71996): avc: denied { map } for pid=15596 comm="syz.6.2527" path="socket:[78236]" dev="sockfs" ino=78236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 287.427271][ T40] audit: type=1400 audit(287.350:71997): avc: denied { create } for pid=15596 comm="syz.6.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 287.435531][ T40] audit: type=1400 audit(287.350:71998): avc: denied { ioctl } for pid=15596 comm="syz.6.2527" path="socket:[78238]" dev="sockfs" ino=78238 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 287.625071][T15475] hsr_slave_0: entered promiscuous mode [ 287.627932][T15475] hsr_slave_1: entered promiscuous mode [ 287.630158][T15475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.632577][T15475] Cannot create hsr debugfs directory [ 287.650768][ T40] audit: type=1400 audit(287.570:71999): avc: denied { allowed } for pid=15601 comm="syz.6.2528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 287.673221][T15607] Trying to write to read-only block-device nullb0 [ 287.681094][ T40] audit: type=1400 audit(287.570:72000): avc: denied { map } for pid=15601 comm="syz.6.2528" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=78244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 287.694020][ T40] audit: type=1400 audit(287.570:72001): avc: denied { read write } for pid=15601 comm="syz.6.2528" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=78244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 287.739374][T15612] pmem0: [POWERTEC] [ 287.757012][T15609] usb 2-1: USB disconnect, device number 2 [ 288.027463][T15618] overlay: Unknown parameter 'obj_role' [ 288.105114][ T5964] Bluetooth: hci4: command tx timeout [ 288.267478][T15638] tmpfs: Unknown parameter 'nos˜ap' [ 288.286350][ T61] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 288.369426][T15641] netlink: 'syz.3.2534': attribute type 1 has an invalid length. [ 288.383235][T15641] 8021q: adding VLAN 0 to HW filter on device bond1 [ 288.391254][T15641] vlan2: entered allmulticast mode [ 288.394794][T15641] veth1: entered allmulticast mode [ 288.399510][T15641] bond1: (slave vlan2): making interface the new active one [ 288.402650][T15641] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 288.429547][T15475] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 288.445017][ T61] usb 11-1: Using ep0 maxpacket: 32 [ 288.448844][T15475] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 288.454894][ T61] usb 11-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 288.457654][T15475] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 288.463193][ T61] usb 11-1: config 1 interface 0 has no altsetting 0 [ 288.466540][ T61] usb 11-1: New USB device found, idVendor=0b05, idProduct=1837, bcdDevice= 0.40 [ 288.471793][ T61] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.485146][ T61] usb 11-1: Product: syz [ 288.486244][T15475] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 288.486707][ T61] usb 11-1: Manufacturer: syz [ 288.502258][ T61] usb 11-1: SerialNumber: syz [ 288.513668][T15662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14887 sclass=netlink_route_socket pid=15662 comm=syz.3.2536 [ 288.590177][T15475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.609336][T15475] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.614862][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.617168][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.623482][ T184] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.625800][ T184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.768227][T15475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.905882][ T6048] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 288.909815][T15475] veth0_vlan: entered promiscuous mode [ 288.915009][T15475] veth1_vlan: entered promiscuous mode [ 288.931300][T15475] veth0_macvtap: entered promiscuous mode [ 288.935481][T15475] veth1_macvtap: entered promiscuous mode [ 288.948396][T15475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.956016][T15475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.961033][T15475] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.963848][T15475] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.968103][T15475] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.971181][T15475] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.014185][T10519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.016898][T10519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.030672][T10524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.033265][T10524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.076303][ T6048] usb 8-1: Using ep0 maxpacket: 8 [ 289.094320][ T6048] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 289.097514][ T61] usbhid 11-1:1.0: can't add hid device: -71 [ 289.098807][ T6048] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 289.099589][ T61] usbhid 11-1:1.0: probe with driver usbhid failed with error -71 [ 289.103240][ T61] usb 11-1: USB disconnect, device number 25 [ 289.106462][ T6048] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 289.111040][ T6048] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 289.114577][ T6048] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 289.125657][ T6048] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.129899][ T6048] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 289.132725][ T6048] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.346950][ T6048] usb 8-1: GET_CAPABILITIES returned 0 [ 289.348824][ T6048] usbtmc 8-1:16.0: can't read capabilities [ 289.548412][ C0] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 289.553610][T15675] usbtmc 8-1:16.0: Unable to send data, error -71 [ 289.564562][ T6048] usb 8-1: USB disconnect, device number 17 [ 290.103562][T15707] lo speed is unknown, defaulting to 1000 [ 290.113311][T15706] lo speed is unknown, defaulting to 1000 [ 290.506187][T15717] netlink: 'syz.3.2546': attribute type 29 has an invalid length. [ 290.560933][T15717] netlink: 'syz.3.2546': attribute type 29 has an invalid length. [ 290.596816][T15723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2548'. [ 290.720124][T15732] netlink: 'syz.3.2551': attribute type 1 has an invalid length. [ 290.750774][T15737] netlink: 'syz.3.2552': attribute type 1 has an invalid length. [ 290.774633][T15737] 8021q: adding VLAN 0 to HW filter on device bond2 [ 290.875034][ T61] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 290.918302][ T1150] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.025956][ T61] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 291.030227][ T61] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.033084][ T61] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.037244][ T61] usb 11-1: config 0 interface 0 has no altsetting 0 [ 291.040371][ T61] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.043190][ T61] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.046894][ T61] usb 11-1: config 0 interface 0 has no altsetting 0 [ 291.049795][ T61] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.052588][ T61] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.056542][ T61] usb 11-1: config 0 interface 0 has no altsetting 0 [ 291.059513][ T61] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.062354][ T61] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.067408][ T61] usb 11-1: config 0 interface 0 has no altsetting 0 [ 291.070451][ T61] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.073249][ T61] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.077063][ T61] usb 11-1: config 0 interface 0 has no altsetting 0 [ 291.080051][ T61] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.082867][ T61] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.086885][ T61] usb 11-1: config 0 interface 0 has no altsetting 0 [ 291.089874][ T61] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.092732][ T61] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.096317][ T61] usb 11-1: config 0 interface 0 has no altsetting 0 [ 291.099283][ T61] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.102156][ T61] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.105777][ T61] usb 11-1: config 0 interface 0 has no altsetting 0 [ 291.110572][ T61] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 291.114043][ T61] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 291.116871][ T61] usb 11-1: Product: syz [ 291.118263][ T61] usb 11-1: Manufacturer: syz [ 291.120176][ T61] usb 11-1: SerialNumber: syz [ 291.124039][ T61] usb 11-1: config 0 descriptor?? [ 291.128862][ T61] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 291.329341][ T61] usb 11-1: USB disconnect, device number 26 [ 291.334770][ T61] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 292.065950][ T40] kauditd_printk_skb: 224 callbacks suppressed [ 292.065963][ T40] audit: type=1400 audit(291.990:72226): avc: denied { execute } for pid=15742 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 292.076039][ T40] audit: type=1400 audit(291.990:72227): avc: denied { execute_no_trans } for pid=15742 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 292.079187][T15744] bond0: (slave caif0): Error: Device type is different from other slaves [ 292.083177][ T40] audit: type=1400 audit(291.990:72228): avc: denied { execmem } for pid=15742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 292.090948][T15746] Bluetooth: MGMT ver 1.23 [ 292.096012][ T40] audit: type=1400 audit(292.010:72229): avc: denied { read } for pid=15745 comm="syz.6.2555" dev="nsfs" ino=4026533355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 292.102621][ T40] audit: type=1400 audit(292.010:72230): avc: denied { open } for pid=15745 comm="syz.6.2555" path="net:[4026533355]" dev="nsfs" ino=4026533355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 292.116904][ T40] audit: type=1400 audit(292.010:72231): avc: denied { create } for pid=15745 comm="syz.6.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 292.123151][ T40] audit: type=1400 audit(292.010:72232): avc: denied { create } for pid=15745 comm="syz.6.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 292.129351][ T40] audit: type=1400 audit(292.010:72233): avc: denied { getopt } for pid=15745 comm="syz.6.2555" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 292.137560][ T40] audit: type=1400 audit(292.010:72234): avc: denied { create } for pid=15745 comm="syz.6.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 292.143538][ T40] audit: type=1400 audit(292.010:72235): avc: denied { connect } for pid=15745 comm="syz.6.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 292.172035][T15752] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 292.189055][T15752] openvswitch: netlink: Message has 3 unknown bytes. [ 292.191259][T15752] openvswitch: netlink: Actions may not be safe on all matching packets [ 292.201547][T15751] pim6reg: entered allmulticast mode [ 292.204035][T15751] pim6reg: left allmulticast mode [ 292.239862][ T5959] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 292.244118][ T5959] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 292.248055][ T5959] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 292.253915][ T5959] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 292.258584][ T5959] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 292.280396][T15755] lo speed is unknown, defaulting to 1000 [ 292.327310][T15764] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2559'. [ 292.379663][T15770] 9pnet_virtio: no channels available for device syz [ 292.436815][T15755] chnl_net:caif_netlink_parms(): no params data found [ 292.471893][T15779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2566'. [ 292.498702][ T1150] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.580065][T15791] futex_wake_op: syz.3.2568 tries to shift op by -1; fix this program [ 292.587902][ T1150] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.598798][T15775] tipc: Enabled bearer , priority 0 [ 292.601827][T15755] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.605496][T15755] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.608378][T15755] bridge_slave_0: entered allmulticast mode [ 292.612335][T15755] bridge_slave_0: entered promiscuous mode [ 292.618299][T15775] syzkaller0: entered promiscuous mode [ 292.620487][T15775] syzkaller0: entered allmulticast mode [ 292.624723][T15755] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.629626][T15755] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.632494][T15755] bridge_slave_1: entered allmulticast mode [ 292.639177][T15755] bridge_slave_1: entered promiscuous mode [ 292.696398][ T1150] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.717046][T15755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.722824][T15755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.770464][T15755] team0: Port device team_slave_0 added [ 292.773992][T15755] team0: Port device team_slave_1 added [ 292.813742][T15755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.817996][T15755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.826150][T15755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.832297][T15755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.834503][T15755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.843573][T15755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.891016][T15755] hsr_slave_0: entered promiscuous mode [ 292.893284][T15755] hsr_slave_1: entered promiscuous mode [ 292.895542][T15755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.897914][T15755] Cannot create hsr debugfs directory [ 292.978160][ T1150] bridge_slave_1: left allmulticast mode [ 292.980023][ T1150] bridge_slave_1: left promiscuous mode [ 292.981863][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.987525][ T1150] bridge_slave_0: left allmulticast mode [ 292.990024][ T1150] bridge_slave_0: left promiscuous mode [ 292.992537][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.245165][ T53] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 293.289495][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.293957][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.298340][ T1150] bond0 (unregistering): Released all slaves [ 293.396548][ T53] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 293.398921][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 293.402550][ T53] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 293.409427][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 293.413102][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 293.418503][ T53] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 293.420865][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 293.424156][ T53] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 293.428246][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 293.431724][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 293.441134][ T53] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 293.443489][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 293.447063][ T53] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 293.450729][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 293.455063][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 293.460876][ T53] usb 8-1: string descriptor 0 read error: -22 [ 293.462890][ T53] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 293.475048][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.491162][ T53] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 293.541072][T15825] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2575'. [ 293.672141][ T1150] hsr_slave_0: left promiscuous mode [ 293.675359][ T1150] hsr_slave_1: left promiscuous mode [ 293.678187][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.680931][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.684283][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.690407][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.715086][ T6048] tipc: Node number set to 4269801488 [ 293.749107][ T1150] veth1_macvtap: left promiscuous mode [ 293.751582][ T1150] veth0_macvtap: left promiscuous mode [ 293.754834][ T1150] veth1_vlan: left promiscuous mode [ 293.757647][ T1150] veth0_vlan: left promiscuous mode [ 294.345439][ T5959] Bluetooth: hci4: command tx timeout [ 294.609261][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 294.700425][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 295.426129][T15844] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 295.430673][T15844] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 295.434337][T15844] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 295.438024][T15844] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 295.444433][T15844] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 295.448152][T15844] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 295.451483][T15844] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 295.454510][T15844] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 295.457448][T15844] geneve4: entered promiscuous mode [ 295.459112][T15844] geneve4: entered allmulticast mode [ 295.551220][T15755] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 295.555258][T15755] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 295.560791][T15755] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 295.575673][T15755] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 295.615435][T15755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.624891][T15755] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.630372][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.633241][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.652574][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.654748][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.664691][T15855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.799636][T15755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.943111][T15755] veth0_vlan: entered promiscuous mode [ 295.948125][T15755] veth1_vlan: entered promiscuous mode [ 295.967552][T15755] veth0_macvtap: entered promiscuous mode [ 295.971548][T15755] veth1_macvtap: entered promiscuous mode [ 295.980057][T15755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.990134][T15755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.996763][T15755] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.999540][T15755] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.002344][T15755] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.005147][T15755] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.044119][T10524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.046903][T10524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.065816][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.068650][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.801886][T15874] ufs: You didn't specify the type of your ufs filesystem [ 296.801886][T15874] [ 296.801886][T15874] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 296.801886][T15874] [ 296.801886][T15874] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 296.807871][T15873] nbd6: detected capacity change from 0 to 12 [ 296.812210][T15874] ufs: ufstype=old is supported read-only [ 296.819538][ T8447] block nbd6: Send control failed (result -89) [ 296.822545][ T8447] block nbd6: Request send failed, requeueing [ 296.827338][ T5959] block nbd6: Receive control failed (result -32) [ 296.827849][ T1169] block nbd6: Dead connection, failed to find a fallback [ 296.833038][ T1169] block nbd6: shutting down sockets [ 296.836852][ T1169] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.841015][ T1169] buffer_io_error: 22 callbacks suppressed [ 296.841032][ T1169] Buffer I/O error on dev nbd6, logical block 0, async page read [ 296.848056][ T8447] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.852894][ T8447] Buffer I/O error on dev nbd6, logical block 0, async page read [ 296.856127][ T8447] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.859051][ T8447] Buffer I/O error on dev nbd6, logical block 1, async page read [ 296.862083][ T8447] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.865018][ T8447] Buffer I/O error on dev nbd6, logical block 2, async page read [ 296.867804][ T8447] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.871494][ T8447] Buffer I/O error on dev nbd6, logical block 3, async page read [ 296.874144][ T8447] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.877434][ T8447] Buffer I/O error on dev nbd6, logical block 0, async page read [ 296.880044][ T8447] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.883329][ T8447] Buffer I/O error on dev nbd6, logical block 1, async page read [ 296.885886][ T8447] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.889092][ T8447] Buffer I/O error on dev nbd6, logical block 2, async page read [ 296.891670][ T8447] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.895070][ T8447] Buffer I/O error on dev nbd6, logical block 3, async page read [ 296.897709][ T8447] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.900579][ T8447] Buffer I/O error on dev nbd6, logical block 0, async page read [ 296.904620][ T8447] ldm_validate_partition_table(): Disk read failed. [ 296.909447][ T8447] Dev nbd6: unable to read RDB block 0 [ 296.912857][ T8447] nbd6: unable to read partition table [ 296.915266][ T8447] nbd6: partition table beyond EOD, truncated [ 296.925466][ T8447] ldm_validate_partition_table(): Disk read failed. [ 296.928344][ T8447] Dev nbd6: unable to read RDB block 0 [ 296.930662][ T8447] nbd6: unable to read partition table [ 296.932496][ T8447] nbd6: partition table beyond EOD, truncated [ 298.212221][T10062] usb 8-1: USB disconnect, device number 18 [ 298.235193][ T40] kauditd_printk_skb: 196 callbacks suppressed [ 298.235204][ T40] audit: type=1400 audit(297.977:72432): avc: denied { create } for pid=15886 comm="syz.3.2585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 298.243821][ T40] audit: type=1400 audit(297.977:72433): avc: denied { write } for pid=15886 comm="syz.3.2585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 298.251059][ T40] audit: type=1400 audit(297.977:72434): avc: denied { read } for pid=15886 comm="syz.3.2585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 298.257104][ T40] audit: type=1400 audit(297.977:72435): avc: denied { ioctl } for pid=15886 comm="syz.3.2585" path="socket:[81929]" dev="sockfs" ino=81929 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 298.287743][ T40] audit: type=1400 audit(298.024:72436): avc: denied { mounton } for pid=15890 comm="syz.3.2587" path="/96/file0" dev="tmpfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 298.296034][ T40] audit: type=1400 audit(298.024:72437): avc: denied { mount } for pid=15890 comm="syz.3.2587" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 298.303138][ T40] audit: type=1400 audit(298.033:72438): avc: denied { create } for pid=15890 comm="syz.3.2587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 298.311702][ T40] audit: type=1400 audit(298.033:72439): avc: denied { read write } for pid=15890 comm="syz.3.2587" name="video37" dev="devtmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 298.319019][ T40] audit: type=1400 audit(298.033:72440): avc: denied { open } for pid=15890 comm="syz.3.2587" path="/dev/video37" dev="devtmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 298.326984][ T40] audit: type=1400 audit(298.052:72441): avc: denied { unmount } for pid=14556 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 298.374878][T15893] lo speed is unknown, defaulting to 1000 [ 298.425951][T10524] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.840662][T15902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2589'. [ 299.944081][ T5964] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.945248][T15915] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2594'. [ 299.948490][ T5964] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.955407][ T5964] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.957954][T15915] 9pnet_virtio: no channels available for device syz [ 299.966453][ T5964] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.970754][ T5964] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.008094][T15912] lo speed is unknown, defaulting to 1000 [ 300.119543][T15912] chnl_net:caif_netlink_parms(): no params data found [ 300.157558][ T1330] libceph: connect (1)[c::]:6789 error -101 [ 300.161465][ T1330] libceph: mon0 (1)[c::]:6789 connect error [ 300.214207][T15912] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.216585][T15912] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.219251][T15912] bridge_slave_0: entered allmulticast mode [ 300.222135][T15912] bridge_slave_0: entered promiscuous mode [ 300.225580][T15912] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.228223][T15912] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.230711][T15912] bridge_slave_1: entered allmulticast mode [ 300.233466][T15912] bridge_slave_1: entered promiscuous mode [ 300.270598][T15912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.275646][T15912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.320059][T15912] team0: Port device team_slave_0 added [ 300.331932][T10524] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.338549][T15912] team0: Port device team_slave_1 added [ 300.368673][T15912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.370896][T15912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.379149][T15912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.383416][T15912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.385609][T15912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.396460][T15912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.414922][T10524] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.443073][ T59] libceph: connect (1)[c::]:6789 error -101 [ 300.445058][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 300.457363][T15912] hsr_slave_0: entered promiscuous mode [ 300.459870][T15912] hsr_slave_1: entered promiscuous mode [ 300.462069][T15912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.466762][T15912] Cannot create hsr debugfs directory [ 300.478649][T10524] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.646014][T10524] bridge_slave_1: left allmulticast mode [ 300.648542][T10524] bridge_slave_1: left promiscuous mode [ 300.650914][T10524] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.656205][T10524] bridge_slave_0: left allmulticast mode [ 300.658686][T10524] bridge_slave_0: left promiscuous mode [ 300.661288][T10524] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.991592][ T59] libceph: connect (1)[c::]:6789 error -101 [ 300.994072][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 301.008582][T10524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.014307][T10524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.015821][T15924] ceph: No mds server is up or the cluster is laggy [ 301.023515][T10524] bond0 (unregistering): Released all slaves [ 301.424725][T15945] usb usb8: usbfs: process 15945 (syz.3.2599) did not claim interface 0 before use [ 301.482974][T10524] hsr_slave_0: left promiscuous mode [ 301.486046][T10524] hsr_slave_1: left promiscuous mode [ 301.488829][T10524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.495548][T10524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.499343][T10524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.507492][T10524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.561022][T10524] veth1_macvtap: left promiscuous mode [ 301.563316][T10524] veth0_macvtap: left promiscuous mode [ 301.566359][T10524] veth1_vlan: left promiscuous mode [ 301.568409][T10524] veth0_vlan: left promiscuous mode [ 302.033788][ T5964] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 302.039427][ T5964] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 302.059026][ T5964] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 302.079755][ T5964] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 302.083491][ T5964] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.142661][ T5959] Bluetooth: hci4: command tx timeout [ 302.446809][T10524] team0 (unregistering): Port device team_slave_1 removed [ 302.557427][T10524] team0 (unregistering): Port device team_slave_0 removed [ 303.253692][T15951] lo speed is unknown, defaulting to 1000 [ 303.348307][T15912] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 303.356745][T15912] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 303.366824][T15968] No source specified [ 303.370412][T15912] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 303.383849][T15912] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 303.491685][T15951] chnl_net:caif_netlink_parms(): no params data found [ 303.510043][T15985] netlink: 'syz.3.2606': attribute type 4 has an invalid length. [ 303.532017][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888060ee0000: rx timeout, send abort [ 303.611030][T15951] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.613306][T15951] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.615527][T15951] bridge_slave_0: entered allmulticast mode [ 303.619843][T15951] bridge_slave_0: entered promiscuous mode [ 303.623343][ T40] kauditd_printk_skb: 184 callbacks suppressed [ 303.623352][ T40] audit: type=1400 audit(303.019:72626): avc: denied { read write } for pid=15995 comm="syz.3.2608" name="vbi3" dev="devtmpfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 303.630656][T15912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.632670][ T40] audit: type=1400 audit(303.019:72627): avc: denied { open } for pid=15995 comm="syz.3.2608" path="/dev/vbi3" dev="devtmpfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 303.642209][T15951] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.644422][T15951] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.646696][T15951] bridge_slave_1: entered allmulticast mode [ 303.649633][T15951] bridge_slave_1: entered promiscuous mode [ 303.651821][ T40] audit: type=1400 audit(303.028:72628): avc: denied { ioctl } for pid=15995 comm="syz.3.2608" path="/dev/vbi3" dev="devtmpfs" ino=991 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 303.690232][T15951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.695111][T15951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.736621][T15951] team0: Port device team_slave_0 added [ 303.755821][T15912] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.759559][T15951] team0: Port device team_slave_1 added [ 303.786589][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.789080][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.792462][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.794998][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.861787][T15951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.865604][T15951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.875752][T15951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.880726][T15951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.882923][T15951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.892826][T15951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.950575][T15951] hsr_slave_0: entered promiscuous mode [ 303.952948][T15951] hsr_slave_1: entered promiscuous mode [ 303.955100][T15951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.957389][T15951] Cannot create hsr debugfs directory [ 304.018521][ T40] audit: type=1400 audit(303.383:72629): avc: denied { module_request } for pid=15912 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 304.049619][ T40] audit: type=1400 audit(303.412:72630): avc: denied { sys_module } for pid=15912 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 304.066612][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888060ee3400: rx timeout, send abort [ 304.070087][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888060ee0000: abort rx timeout. Force session deactivation [ 304.085532][ T40] audit: type=1400 audit(303.440:72631): avc: denied { search } for pid=5345 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.122660][ T40] audit: type=1400 audit(303.486:72632): avc: denied { search } for pid=16010 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.132797][ T40] audit: type=1400 audit(303.486:72633): avc: denied { search } for pid=16010 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1905 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.142392][ T40] audit: type=1400 audit(303.486:72634): avc: denied { search } for pid=16010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1909 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.151013][ T40] audit: type=1400 audit(303.486:72635): avc: denied { search } for pid=16010 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.220369][T15912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.290817][ T5959] Bluetooth: hci7: command tx timeout [ 304.365129][ T5959] Bluetooth: hci4: command tx timeout [ 304.419735][T16022] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2609'. [ 304.475984][T15912] veth0_vlan: entered promiscuous mode [ 304.483537][T15912] veth1_vlan: entered promiscuous mode [ 304.604577][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888060ee3400: abort rx timeout. Force session deactivation [ 304.609946][T15912] veth0_macvtap: entered promiscuous mode [ 304.624208][T15912] veth1_macvtap: entered promiscuous mode [ 304.640639][T15912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.665024][T15912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.670069][T15912] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.672712][T15912] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.686793][T15912] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.689678][T15912] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.825397][T15951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 304.839151][T15951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 304.845518][T15951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 304.849230][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.852212][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.885028][T15951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 304.918445][T10524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.920783][T10524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.014249][T15951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.066953][T15951] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.073626][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.076142][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.082192][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.084437][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.139099][T16102] lo speed is unknown, defaulting to 1000 [ 305.228243][T15951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.256462][T15951] veth0_vlan: entered promiscuous mode [ 305.261611][T15951] veth1_vlan: entered promiscuous mode [ 305.273793][ T34] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 305.275503][T15951] veth0_macvtap: entered promiscuous mode [ 305.280204][T15951] veth1_macvtap: entered promiscuous mode [ 305.293152][T15951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.299671][T15951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.304165][T15951] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.307182][T15951] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.309685][T15951] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.312134][T15951] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.395811][T10524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.398897][T10524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.429743][T10524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.432043][T10524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.444822][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 305.447707][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 305.451002][ T34] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 305.453655][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.463575][ T34] usb 8-1: config 0 descriptor?? [ 305.547890][T16132] kAFS: unable to lookup cell '/,c¾ûL' [ 305.633996][T16139] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2627'. [ 305.683296][ T34] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 305.897360][T10519] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.108501][ T34] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 306.113446][ T61] usb 8-1: USB disconnect, device number 19 [ 306.269557][ T34] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x21, changing to 0x1 [ 306.273808][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 306.276850][ T34] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 306.280430][ T34] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.286345][ T34] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 306.289743][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.292400][ T34] usb 6-1: Product: syz [ 306.293712][ T34] usb 6-1: Manufacturer: syz [ 306.295124][ T34] usb 6-1: SerialNumber: syz [ 306.302323][ T34] hub 6-1:1.0: bad descriptor, ignoring hub [ 306.304183][ T34] hub 6-1:1.0: probe with driver hub failed with error -5 [ 306.503378][ T5959] Bluetooth: hci7: command tx timeout [ 306.516353][ T34] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 306.583299][T10519] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.847173][ T29] usb 6-1: USB disconnect, device number 7 [ 306.852761][ T29] usblp0: removed [ 307.292278][T10519] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.503741][T16227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2631'. [ 307.538452][T16249] netlink: 'syz.1.2635': attribute type 10 has an invalid length. [ 307.538513][ T5964] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.554256][ T5964] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.560094][ T5964] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.565714][T10519] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.569104][ T5964] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.569502][ T5964] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.575858][T16249] hsr0: entered promiscuous mode [ 307.580793][T16249] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 307.585803][T16249] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 307.590252][T16249] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 307.621930][T16244] lo speed is unknown, defaulting to 1000 [ 307.723240][T16278] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2640'. [ 307.747888][T10519] bridge_slave_1: left allmulticast mode [ 307.750931][T10519] bridge_slave_1: left promiscuous mode [ 307.752933][T10519] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.760378][T10519] bridge_slave_0: left allmulticast mode [ 307.762767][T10519] bridge_slave_0: left promiscuous mode [ 307.767525][T10519] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.062079][T10519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.069120][T10519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.073781][T10519] bond0 (unregistering): Released all slaves [ 308.083204][T16280] batman_adv: batadv0: Adding interface: dummy0 [ 308.085363][T16280] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.093156][T16280] batman_adv: batadv0: Interface activated: dummy0 [ 308.096217][T16284] macsec0: entered promiscuous mode [ 308.098577][T16284] macsec0: entered allmulticast mode [ 308.100323][T16284] veth1_macvtap: entered allmulticast mode [ 308.164349][T16292] netlink: 'syz.1.2646': attribute type 4 has an invalid length. [ 308.166878][T16292] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2646'. [ 308.299798][T16303] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2649'. [ 308.309670][T16244] chnl_net:caif_netlink_parms(): no params data found [ 308.515514][T10519] hsr_slave_0: left promiscuous mode [ 308.518839][T10519] hsr_slave_1: left promiscuous mode [ 308.521321][T10519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.525883][T10519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.534890][T10519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.537254][T10519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.551552][T16325] openvswitch: netlink: Flow key attribute not present in set flow. [ 308.554227][T16325] openvswitch: netlink: Flow key attribute not present in set flow. [ 308.561563][T16325] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2652'. [ 308.564403][T16335] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2652'. [ 308.590562][T10519] veth1_macvtap: left promiscuous mode [ 308.592299][T10519] veth0_macvtap: left promiscuous mode [ 308.594495][T10519] veth1_vlan: left promiscuous mode [ 308.596200][T10519] veth0_vlan: left promiscuous mode [ 308.737541][ T5959] Bluetooth: hci7: command tx timeout [ 308.844332][T10062] usb 11-1: new high-speed USB device number 27 using dummy_hcd [ 309.015761][T10062] usb 11-1: Using ep0 maxpacket: 32 [ 309.078201][T16340] ALSA: mixer_oss: invalid index 100000 [ 309.086292][ T40] kauditd_printk_skb: 444 callbacks suppressed [ 309.086308][ T40] audit: type=1400 audit(308.126:73080): avc: denied { ioctl } for pid=16336 comm="syz.6.2655" path="socket:[80859]" dev="sockfs" ino=80859 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 309.139337][T16340] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 309.360177][T10519] team0 (unregistering): Port device team_slave_1 removed [ 309.445636][T10519] team0 (unregistering): Port device team_slave_0 removed [ 309.754879][ T5959] Bluetooth: hci4: command tx timeout [ 310.109334][T16244] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.111623][T16244] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.113901][T16244] bridge_slave_0: entered allmulticast mode [ 310.117892][T16244] bridge_slave_0: entered promiscuous mode [ 310.235576][T16325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.240659][T16325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.244905][T16325] bond0 (unregistering): Released all slaves [ 310.278697][T10062] usb 11-1: unable to get BOS descriptor or descriptor too short [ 310.286323][T10062] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 310.288973][T10062] usb 11-1: can't read configurations, error -71 [ 310.296367][T16244] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.298946][T16244] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.301875][T16244] bridge_slave_1: entered allmulticast mode [ 310.302032][ T40] audit: type=1400 audit(309.258:73081): avc: denied { append } for pid=16343 comm="syz.3.2656" name="cec3" dev="devtmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.304597][T16244] bridge_slave_1: entered promiscuous mode [ 310.316228][ T40] audit: type=1400 audit(309.258:73082): avc: denied { read } for pid=5665 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 310.324491][ T40] audit: type=1400 audit(309.267:73083): avc: denied { search } for pid=5665 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.331104][ T40] audit: type=1400 audit(309.267:73084): avc: denied { search } for pid=5665 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.337659][ T40] audit: type=1400 audit(309.267:73085): avc: denied { search } for pid=5665 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.346029][ T40] audit: type=1400 audit(309.267:73086): avc: denied { read } for pid=5665 comm="dhcpcd" name="n228" dev="tmpfs" ino=10382 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 310.356554][ T40] audit: type=1400 audit(309.267:73087): avc: denied { open } for pid=5665 comm="dhcpcd" path="/run/udev/data/n228" dev="tmpfs" ino=10382 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 310.367553][ T40] audit: type=1400 audit(309.267:73088): avc: denied { getattr } for pid=5665 comm="dhcpcd" path="/run/udev/data/n228" dev="tmpfs" ino=10382 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 310.377184][ T40] audit: type=1400 audit(309.267:73089): avc: denied { watch } for pid=16345 comm="syz.6.2657" path="/559" dev="tmpfs" ino=3238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 310.381037][T16347] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2656'. [ 310.388265][T16244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.397843][T16244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.403106][T16349] sch_fq: defrate 4 ignored. [ 310.422679][T16349] ip6t_srh: unknown srh match flags 4000 [ 310.463181][T16244] team0: Port device team_slave_0 added [ 310.470008][T16244] team0: Port device team_slave_1 added [ 310.531471][T16244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.536269][T16244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.544761][T16244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.548987][T16244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.551075][T16244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.563955][T16244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.632534][T16374] usb usb8: usbfs: process 16374 (syz.6.2663) did not claim interface 0 before use [ 310.653499][T16244] hsr_slave_0: entered promiscuous mode [ 310.655761][T16244] hsr_slave_1: entered promiscuous mode [ 310.657825][T16244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.660253][T16244] Cannot create hsr debugfs directory [ 310.665648][ T836] IPVS: starting estimator thread 0... [ 310.670125][T16377] xt_socket: unknown flags 0x50 [ 310.769375][T16378] IPVS: using max 47 ests per chain, 112800 per kthread [ 310.783285][T16382] netlink: 'syz.1.2666': attribute type 10 has an invalid length. [ 310.786247][T16382] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2666'. [ 310.805475][T16382] team0: Port device geneve0 added [ 310.954226][ T5959] Bluetooth: hci7: command tx timeout [ 310.976667][T16393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.192488][T16414] input: syz1 as /devices/virtual/input/input26 [ 311.375287][T16424] netlink: 'syz.1.2675': attribute type 10 has an invalid length. [ 311.389075][T16424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=16424 comm=syz.1.2675 [ 311.415051][T16430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=16430 comm=syz.6.2677 [ 311.510752][T16439] SELinux: failed to load policy [ 311.529848][T16244] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 311.536232][T16244] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 311.567776][T16244] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 311.595715][T16244] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 311.715143][T16474] team0: No ports can be present during mode change [ 311.736715][T16244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.779603][T16244] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.788876][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.791913][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.814378][T10519] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.816905][T10519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.890051][T16490] netlink: 'syz.6.2690': attribute type 2 has an invalid length. [ 311.893535][T16490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.941775][T16508] rtc_cmos 00:05: Alarms can be up to one day in the future [ 311.963332][T16502] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2691'. [ 311.972744][ T6018] hid-generic 09DE:7E564807:0003.0006: unknown main item tag 0x7 [ 311.973025][T16244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.983187][ T6018] hid-generic 09DE:7E564807:0003.0006: unknown main item tag 0x2 [ 311.987428][ T5959] Bluetooth: hci4: command tx timeout [ 311.992068][ T6018] hid-generic 09DE:7E564807:0003.0006: collection stack underflow [ 311.997797][ T6018] hid-generic 09DE:7E564807:0003.0006: item 0 2 0 12 parsing failed [ 312.002942][ T6018] hid-generic 09DE:7E564807:0003.0006: probe with driver hid-generic failed with error -22 [ 312.162731][T16244] veth0_vlan: entered promiscuous mode [ 312.167609][T16244] veth1_vlan: entered promiscuous mode [ 312.182974][T16244] veth0_macvtap: entered promiscuous mode [ 312.188344][T16244] veth1_macvtap: entered promiscuous mode [ 312.200733][T16244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.206732][T16244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.211275][T16244] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.211844][ T1459] usb 11-1: new high-speed USB device number 29 using dummy_hcd [ 312.216171][T16244] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.218671][T16244] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.221149][T16244] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.271240][T10519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.273971][T10519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.300705][ T184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.303740][ T184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.325327][T16529] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 312.327463][T16529] UDF-fs: Scanning with blocksize 2048 failed [ 312.330733][T16529] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 312.333295][T16529] UDF-fs: Scanning with blocksize 4096 failed [ 312.405838][ T1459] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 312.408971][ T1459] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 312.412106][ T1459] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 312.418512][ T1459] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 312.421490][ T1459] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.424072][ T1459] usb 11-1: Product: syz [ 312.425482][ T1459] usb 11-1: Manufacturer: syz [ 312.427467][ T1459] usb 11-1: SerialNumber: syz [ 312.698948][T16538] loop6: detected capacity change from 0 to 524287999 [ 312.701887][T16538] buffer_io_error: 127 callbacks suppressed [ 312.701896][T16538] Buffer I/O error on dev loop6, logical block 0, async page read [ 312.707768][T16538] Buffer I/O error on dev loop6, logical block 0, async page read [ 312.710306][T16538] Buffer I/O error on dev loop6, logical block 0, async page read [ 312.712792][T16538] Buffer I/O error on dev loop6, logical block 0, async page read [ 312.716029][T16538] Buffer I/O error on dev loop6, logical block 0, async page read [ 312.718710][T16538] Buffer I/O error on dev loop6, logical block 0, async page read [ 312.722507][T16538] Buffer I/O error on dev loop6, logical block 0, async page read [ 312.726476][T16538] Buffer I/O error on dev loop6, logical block 0, async page read [ 312.729804][T16538] ldm_validate_partition_table(): Disk read failed. [ 312.732559][T16538] Buffer I/O error on dev loop6, logical block 0, async page read [ 312.736935][T16538] Buffer I/O error on dev loop6, logical block 0, async page read [ 312.740648][T16538] Dev loop6: unable to read RDB block 0 [ 312.743384][T16538] loop6: unable to read partition table [ 312.745996][T16538] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 312.859790][T16538] ldm_validate_partition_table(): Disk read failed. [ 312.862892][T16538] Dev loop6: unable to read RDB block 0 [ 312.866362][T16538] loop6: unable to read partition table [ 312.874883][T16538] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 312.880624][ T1459] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 312.996750][T16580] tmpfs: Cannot enable quota on remount [ 313.039853][T16599] Cannot find del_set index 4 as target [ 313.057433][T16603] xt_hashlimit: size too large, truncated to 1048576 [ 313.261304][T16621] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2709'. [ 313.296141][T16621] syzkaller0: create flow: hash 3809965728 index 1 [ 313.300880][T16621] ./cgroup: Can't lookup blockdev [ 313.302617][T16626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.303106][T16626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.344585][T16628] [U]  [ 313.363764][ T5959] Bluetooth: hci7: Unable to find connection for big 0x6f [ 313.382409][T16620] syzkaller0: delete flow: hash 3809965728 index 1 [ 313.477309][T16634] usblp0:failed reading printer status (-32) [ 313.485184][ T6250] usb 11-1: USB disconnect, device number 29 [ 313.491976][ T6250] usblp0: removed [ 314.431732][T16643] openvswitch: netlink: Missing key (keys=100040, expected=80) [ 314.651250][T16633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2712'. [ 314.655122][T16642] netlink: 'syz.6.2714': attribute type 3 has an invalid length. [ 314.685633][ T40] kauditd_printk_skb: 437 callbacks suppressed [ 314.685649][ T40] audit: type=1400 audit(313.364:73527): avc: denied { read write } for pid=16644 comm="syz.3.2716" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 314.695794][ T40] audit: type=1400 audit(313.364:73528): avc: denied { open } for pid=16644 comm="syz.3.2716" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 314.702976][ T40] audit: type=1400 audit(313.364:73529): avc: denied { ioctl } for pid=16644 comm="syz.3.2716" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 314.710771][ T40] audit: type=1400 audit(313.364:73530): avc: denied { map_create } for pid=16646 comm="syz.6.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 314.719021][ T40] audit: type=1400 audit(313.364:73531): avc: denied { map_read map_write } for pid=16646 comm="syz.6.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 314.725380][ T40] audit: type=1400 audit(313.374:73532): avc: denied { create } for pid=16646 comm="syz.6.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 314.731669][ T40] audit: type=1400 audit(313.374:73533): avc: denied { ioctl } for pid=16646 comm="syz.6.2715" path="socket:[86244]" dev="sockfs" ino=86244 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 314.740300][ T40] audit: type=1400 audit(313.374:73534): avc: denied { bind } for pid=16646 comm="syz.6.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 314.752823][ T40] audit: type=1400 audit(313.402:73535): avc: denied { create } for pid=16644 comm="syz.3.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 314.787444][ T40] audit: type=1400 audit(313.458:73536): avc: denied { create } for pid=16652 comm="syz.6.2718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 314.913889][T16662] deleting an unspecified loop device is not supported. [ 314.944294][T16668] input: syz0 as /devices/virtual/input/input27 [ 314.956628][T16649] TCP: TCP_TX_DELAY enabled [ 314.964476][T16649] overlay: filesystem on ./bus not supported as upperdir [ 315.052121][T16678] SELinux: ebitmap: empty map [ 315.053689][T16678] SELinux: failed to load policy [ 315.069139][T16678] lo speed is unknown, defaulting to 1000 [ 315.129689][T16590] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.157925][T16676] /dev/sr0: Can't open blockdev [ 316.371320][T16590] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.458422][T16590] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.541848][T16590] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.693386][T16686] 9pnet_virtio: no channels available for device syz [ 316.699269][T16688] 9pnet_virtio: no channels available for device syz [ 316.706758][T16590] bridge_slave_1: left allmulticast mode [ 316.709307][T16590] bridge_slave_1: left promiscuous mode [ 316.712005][T16590] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.719303][T16590] bridge_slave_0: left allmulticast mode [ 316.721701][T16590] bridge_slave_0: left promiscuous mode [ 316.730909][T16590] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.868788][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2729'. [ 316.876463][T16702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2729'. [ 317.108410][T10062] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 317.115409][T10062] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 317.118835][ C1] ------------[ cut here ]------------ [ 317.123337][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci3 [ 317.125618][ C1] WARNING: CPU: 1 PID: 0 at kernel/workqueue.c:2257 __queue_work+0xc9c/0x10f0 [ 317.128518][ C1] Modules linked in: [ 317.130262][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 317.134872][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 317.138385][ C1] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 317.140167][ C1] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 20 ff ab 8b e8 f5 16 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 86 1d 38 00 90 0f 0b 90 e9 1b f6 ff [ 317.146489][ C1] RSP: 0018:ffffc900006a0be8 EFLAGS: 00010082 [ 317.148503][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae1a8 [ 317.151168][ C1] RDX: ffff88801e29a440 RSI: ffffffff817ae1b5 RDI: 0000000000000001 [ 317.154426][ C1] RBP: ffff888040b64970 R08: 0000000000000001 R09: 0000000000000000 [ 317.157732][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920000d418f [ 317.161129][ C1] R13: 0000000080000101 R14: ffff88802337e978 R15: 0000000000000001 [ 317.164347][ C1] FS: 0000000000000000(0000) GS:ffff8880d6818000(0000) knlGS:0000000000000000 [ 317.167752][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.169852][ C1] CR2: 00007f45d61dff98 CR3: 0000000013010000 CR4: 0000000000352ef0 [ 317.172722][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000400000000000 [ 317.175979][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 317.179156][ C1] Call Trace: [ 317.180226][ C1] [ 317.181391][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 317.183874][ C1] call_timer_fn+0x197/0x620 [ 317.185566][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 317.187158][ C1] ? __run_timers+0x559/0x960 [ 317.188651][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 317.190652][ C1] __run_timers+0x569/0x960 [ 317.192562][ C1] ? __pfx___run_timers+0x10/0x10 [ 317.194683][ C1] run_timer_base+0x114/0x190 [ 317.196445][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 317.198078][ C1] ? rcu_is_watching+0x12/0xc0 [ 317.199637][ C1] run_timer_softirq+0x1a/0x40 [ 317.201368][ C1] handle_softirqs+0x219/0x8e0 [ 317.202992][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 317.204714][ C1] __irq_exit_rcu+0x109/0x170 [ 317.206204][ C1] irq_exit_rcu+0x9/0x30 [ 317.207509][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 317.209369][ C1] [ 317.210388][ C1] [ 317.211422][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 317.213421][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 317.215306][ C1] Code: eb 6b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 93 f0 21 00 fb f4 0c fb 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 317.221500][ C1] RSP: 0018:ffffc90000177df8 EFLAGS: 00000286 [ 317.223458][ C1] RAX: 000000000026a5f3 RBX: 0000000000000001 RCX: ffffffff8b881c69 [ 317.226268][ C1] RDX: 0000000000000000 RSI: ffffffff8de31064 RDI: ffffffff8c158660 [ 317.229006][ C1] RBP: ffffed1003c53488 R08: 0000000000000001 R09: ffffed100d4a6645 [ 317.231406][ C1] R10: ffff88806a53322b R11: 0000000000000001 R12: 0000000000000001 [ 317.233899][ C1] R13: ffff88801e29a440 R14: ffffffff90a97350 R15: 0000000000000000 [ 317.236388][ C1] ? ct_kernel_exit+0x139/0x190 [ 317.238116][ C1] default_idle+0x13/0x20 [ 317.239751][ C1] default_idle_call+0x6d/0xb0 [ 317.241328][ C1] do_idle+0x391/0x510 [ 317.242700][ C1] ? __pfx_do_idle+0x10/0x10 [ 317.244315][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 317.246077][ C1] cpu_startup_entry+0x4f/0x60 [ 317.247886][ C1] start_secondary+0x21d/0x2b0 [ 317.249575][ C1] ? __pfx_start_secondary+0x10/0x10 [ 317.251272][ C1] common_startup_64+0x13e/0x148 [ 317.252935][ C1] [ 317.253988][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 317.256333][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 317.260145][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 317.263700][ C1] Call Trace: [ 317.264809][ C1] [ 317.265733][ C1] dump_stack_lvl+0x3d/0x1f0 [ 317.267306][ C1] panic+0x71c/0x800 [ 317.268601][ C1] ? __pfx_panic+0x10/0x10 [ 317.270082][ C1] ? show_trace_log_lvl+0x29b/0x3e0 [ 317.271788][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 317.273482][ C1] ? __queue_work+0xc9c/0x10f0 [ 317.275063][ C1] check_panic_on_warn+0xab/0xb0 [ 317.277100][ C1] __warn+0xf6/0x3c0 [ 317.278464][ C1] ? __queue_work+0xc9c/0x10f0 [ 317.279986][ C1] report_bug+0x3c3/0x580 [ 317.281364][ C1] ? __queue_work+0xc9c/0x10f0 [ 317.282917][ C1] handle_bug+0x184/0x210 [ 317.284283][ C1] exc_invalid_op+0x17/0x50 [ 317.285987][ C1] asm_exc_invalid_op+0x1a/0x20 [ 317.287677][ C1] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 317.289364][ C1] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 20 ff ab 8b e8 f5 16 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 86 1d 38 00 90 0f 0b 90 e9 1b f6 ff [ 317.295346][ C1] RSP: 0018:ffffc900006a0be8 EFLAGS: 00010082 [ 317.297267][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae1a8 [ 317.299719][ C1] RDX: ffff88801e29a440 RSI: ffffffff817ae1b5 RDI: 0000000000000001 [ 317.302235][ C1] RBP: ffff888040b64970 R08: 0000000000000001 R09: 0000000000000000 [ 317.305021][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920000d418f [ 317.307528][ C1] R13: 0000000080000101 R14: ffff88802337e978 R15: 0000000000000001 [ 317.310050][ C1] ? __warn_printk+0x198/0x350 [ 317.311628][ C1] ? __warn_printk+0x1a5/0x350 [ 317.313253][ C1] ? __queue_work+0xc9b/0x10f0 [ 317.315157][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 317.316985][ C1] call_timer_fn+0x197/0x620 [ 317.318443][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 317.320076][ C1] ? __run_timers+0x559/0x960 [ 317.321630][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 317.323618][ C1] __run_timers+0x569/0x960 [ 317.325137][ C1] ? __pfx___run_timers+0x10/0x10 [ 317.326738][ C1] run_timer_base+0x114/0x190 [ 317.328233][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 317.329896][ C1] ? rcu_is_watching+0x12/0xc0 [ 317.331491][ C1] run_timer_softirq+0x1a/0x40 [ 317.333049][ C1] handle_softirqs+0x219/0x8e0 [ 317.334611][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 317.336272][ C1] __irq_exit_rcu+0x109/0x170 [ 317.337771][ C1] irq_exit_rcu+0x9/0x30 [ 317.339115][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 317.340826][ C1] [ 317.341771][ C1] [ 317.342785][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 317.344709][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 317.346499][ C1] Code: eb 6b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 93 f0 21 00 fb f4 0c fb 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 317.352866][ C1] RSP: 0018:ffffc90000177df8 EFLAGS: 00000286 [ 317.354828][ C1] RAX: 000000000026a5f3 RBX: 0000000000000001 RCX: ffffffff8b881c69 [ 317.357393][ C1] RDX: 0000000000000000 RSI: ffffffff8de31064 RDI: ffffffff8c158660 [ 317.360021][ C1] RBP: ffffed1003c53488 R08: 0000000000000001 R09: ffffed100d4a6645 [ 317.362637][ C1] R10: ffff88806a53322b R11: 0000000000000001 R12: 0000000000000001 [ 317.365192][ C1] R13: ffff88801e29a440 R14: ffffffff90a97350 R15: 0000000000000000 [ 317.367884][ C1] ? ct_kernel_exit+0x139/0x190 [ 317.369472][ C1] default_idle+0x13/0x20 [ 317.370960][ C1] default_idle_call+0x6d/0xb0 [ 317.372662][ C1] do_idle+0x391/0x510 [ 317.374009][ C1] ? __pfx_do_idle+0x10/0x10 [ 317.375498][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 317.377197][ C1] cpu_startup_entry+0x4f/0x60 [ 317.378796][ C1] start_secondary+0x21d/0x2b0 [ 317.380463][ C1] ? __pfx_start_secondary+0x10/0x10 [ 317.382475][ C1] common_startup_64+0x13e/0x148 [ 317.384201][ C1] [ 317.385848][ C1] Kernel Offset: disabled [ 317.387251][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:00:38 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000000 RBX=0000000000000000 RCX=ffffffff8183e8d3 RDX=0000000000000000 RSI=ffffffff8df23ffc RDI=ffffffff8c158660 RBP=ffff888022663000 RSP=ffffc900060378f0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff8183e75d R13=0000000000000006 R14=ffff88802d950000 R15=ffff888040b65168 RIP=ffffffff8b88241d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6718000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=00000000009bb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff28ea4e70 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45d5411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45d5411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45d5411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45d5411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45d5411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45d5411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bb315 RDI=ffffffff9b0c22a0 RBP=ffffffff9b0c2260 RSP=ffffc900006a0550 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9b0c2260 R15=ffffffff855bb2b0 RIP=ffffffff855bb33f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6818000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f45d61dff98 CR3=0000000013010000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000400000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f722b011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f722b011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f722b011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f722b011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f722b011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f722b011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f722b185488 00007f722b185480 00007f722b185478 00007f722b185450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f722bced100 00007f722b185440 00007f722b185458 00007f722b1854a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f722b185498 00007f722b185490 00007f722b185488 00007f722b185480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000000 RBX=0000000000000002 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8df23ffc RDI=ffffffff8c158660 RBP=0000000000000002 RSP=ffffc900000f7a38 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000400 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b88241d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6918000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f45b9f5fa10 CR3=0000000064063000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000030003 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe06558990 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f722b011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f722b011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f722b011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f722b011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f722b011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f722b011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000025bad5 RBX=0000000000000003 RCX=ffffffff8b881c69 RDX=0000000000000000 RSI=ffffffff8de31064 RDI=ffffffff8c158660 RBP=ffffed1003c56000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801e2b0000 R14=ffffffff90a97350 R15=0000000000000000 RIP=ffffffff8b8807cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a18000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055675eb27da8 CR3=000000010d450000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000032e7 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffedd8f9bb0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbc7d611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbc7d611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbc7d611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbc7d611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbc7d611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbc7d611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000f4 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000f4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000