last executing test programs: 1m7.979181609s ago: executing program 1 (id=688): mount(&(0x7f0000000180)=@sr0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hpfs\x00', 0x200800, 0x0) 1m7.930561764s ago: executing program 1 (id=689): openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81400003b0001"], 0x14d8}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0105b08, &(0x7f0000000040)) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0x9, 0x2, 0x35315258, 0x5, 0xe, 0xd, 0x4, 0xf5e4, 0x0, 0x0, 0x2, 0x2}}) 1m6.459871747s ago: executing program 1 (id=700): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x0, 0x11, 0x9, 0x40, 0x0, 0x5, 0x10000, 0x8000, 0x7fffffff}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) io_uring_setup(0x10004c2d, &(0x7f00000006c0)={0x0, 0x23ab, 0x10, 0x400000, 0x2ec}) 1m6.387413857s ago: executing program 1 (id=701): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x545880, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRESDEC=r0], 0x5c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000004c0)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0d000000040000000400000094dcda1000000000", @ANYRES32=r5], 0x48) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80100, 0x0) sendmsg$kcm(r6, &(0x7f00000003c0)={&(0x7f0000000180)=@caif=@dbg={0x25, 0x6, 0xff}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="72a300b2bbdf35ff02c92651a111108c0338262471b4352ad9cbd809a9807b3a7c74cefd3d4d094ced9879eb6f64e6844d39ab3cc18af9d0999587099916ee57", 0x40}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000300)="6720f90cfe8b10fe6d290da51357f99375d67a5a3248fa33e72886064fe9cd0b7cd4c364f65a85121f76a40a6eae025a397c7ef9a9942a1b1e9f27034b6a4fa2bb45dd6523a6c7470ebb56603e72484cef4dcf98f234f59daba28a0c3673c084e2f84487d1277157d96b25924d1855d0797b2fc01585516046c5ee090cac5a1e4d", 0x81}, {&(0x7f0000002080)="3447dbe4f4ca109d3b764a6d188b8d2e5a5215b15b65dfcd9a6ff96bddf7d6c0d096968d076d724574da5a056eacb94e24470aa767fb3c272c33146a7992c79570c584c0799feba11e68290cb387cd7c023ba3bec592c4b930a3424778d3b67423f3de9d377e8031e8cceb047ec283b8b0ca47de391ada659b6de676b5271ade2eeac5f2bc56e5ec0ab5e0a5b2e0ce8e5d810f40946238e2f0273875b83171fbff705140eb734947abffcc482f80f6a590a9ca7a761473a43f28c7b30e399cf33443c64d9f30dd56b2621d11cac8551b20c1d1a5e96f36e64406c3dde9c7e46de350c174c6895183f4d1de816dad7167cb6338858db1b0dc6a076be53614705b02a39b7eae8a90f054e8166efc5741acc08183baa93c03e9fc9eee527766056395ffb2764ff64f6cd6f0cb69f45105cfb4a1848bbc880ece901ab24057c59aabf6e6be3f902cbe2ec6ffd18d62b50403cd12d3213db6c953c5958e49fb79c5b3f19217139f9413b5ef725efdc06c2c47aafcf054d61b501b73e908dbb469648366487fd338c0e848314d7095aecc56a588d2ceef2849e4d3a9cd693103ae7ae1361a541737992a49f0cf7863478992085671c717f67c638272479cb482c3250b65ad73f2733ddabd3f7fde80e0ec91d0c0307503accaf5e22a51e38532c3d453a731bf3ecff615493e3d9a39b3632116b5de84a89c4c90a06dc1dd5b55311267c1517558fb31bb1e8b6c61a461b50d1aef2dbeba1ed68edb5aa38ad2b4dabd645288c89275ff9d425c44ebdda047fef8988b9c5e19da0285e09774ae6239d8d7f625f85df7e21b5be6e5eb2bbc8785b030474704047e35cbdb201d1f159836384aa8f6c7eb4e5304ca0f02a6d588a72006074473797e61ae25e8de3bf5962cfcdd4189f8c24860c5f5ceef77876db888ca70efe7cf74e8157c45b7e9287662c66a0c93488e13ea033cd2d91cb9d12b7d1cd9d91aaafc525aec3217f037fefdb5fb350fff9576ae4b4f5e4b1b77057bd5d6ad8bac0d4ea3752b26f593a7fbcbbfbb8623325a91b6ff980bf69565005131d4b77154a108d8067176b2526a255f2086071e6f1be6933ca0390a0ddb4bd6a3118ccbec6c6ed6fa47521f6fdefea8425eb67a5eebfc2c413d77b5549a09f6dd26232eb202ace5e1481f21d4a484b5e24959ff63e86a5df657be18e15cd3a1a43a2eab850ea7bf866351ca223f2ce38853ccc6f68f946f8ab3f18f1a765645f7bace629f04ef374fa2b8627a0cdbec3c20b87e9469c8eb389ef152d28cfb65e19e61cd4680d016f1e0a70f473c2219af6f89af80138da3ae144dd31a9f2d792fd83e2dd1fe5867b099ca1cd5957e851c0f34ec78aebdb242cd4b30d75d6345a8b2eb89e51ae69122345739ff84db89e11e5681c46df597d5c39bbca460fda1539289764b7b3e655fcc013cfa44e0e2884c29cfa9edcb51c9d5e9dafadbfd2db5924e1e14eb7e6906833ced8cd000573c51847f3f2a462c157925d2005c70cf6973d3ba2728e0de579221fde7186f5c9d0ee562fda817f5231ee358d538c69a6bc1cd019cb0780bcbb7341a6d136f3b63f5b086a6b7cac64af2c4f62cd74d47d3b61286e4cc1d70c92d3ec443f534bb98808261d89ea13294948d9602c20bd384c7bc16976e6b4dcccf129fb50c65d35c0696bfc4299c2cfcd6cbd2cbcec1d249f6b78db4ff49597ecf326de8b3d665c4d8cf05191f525c31c09b70f25d3d9f8b2354a766f7106bd72aab86266d896023e93ce34c2d7bab86f124cec06d3d6454520d3d5038550b131a7b85e51ac3c40c6026d2055f6642a132a61ef5cc6f5dfe61254379a640263efcecda11f9d9b328eba14db38a9acab864cf5764924cd62de9dc318c8dcebc573c6fb87afc272f8aef960514b9dfdf766289b762e86aa13055803a0305811d6699d136c3fa97e72172df3c1c8243b5ab04c242f6b9e9124cefc09df3148dc40d9d1233d52a7f8fa589317172e1f95eae41e2935e4deb11e1bbae35638483837ab3b6623a8677ee1cdec720fe02cb61a58be7f4fc88ad090d8bb21cce6ce8238f4ea1ed12f8b14a2616bdad1d496ed30d705e4ce43ff8cd1f933b6e0a0957a2fee922167ccd4a79bf43a1e8102ee3480ac87d7e1322d36afe84b683641c436d8b2e006b0be386ecd3dd028d51dedb041f61ee95241294f29d4a8df7d15dc616db6b4f7bb374528c6d334e9df1375882f3892dc337753f8166137586689a1bbcff109ecedc401b2ef4846ba09e8224a37ff2f81319779d7ac21366e281531f3fac789e84fc43caf2ed59242a28cf574af25073cc12c1284d796f90f4289beb4a38e8f24e12f7112563d16effc73941a33e3270138f45f9e8037944589a52bf50f1cf3ecaabcda98920c71eacdd7a79a7a25e0c8c9a0121e2afeadf63d0770e9619daa555076bc410febe1158d4983233155444cdc45f3f8400389da2793ab937014b34a24218fb904ea2f4130dac3beb368c7f25d988a1ce417c5a39567c7caf171c68328a79f52f7195447bad014940445601cb39cdb5d0e38b6bb68c9b375ad451ced748fa7858cb6c50a71723b9f7d777dc41d9f113ddafc2dab49502a22fad9e105331c1d5626ba3f7c1b4e445a2ad23df5f3c1aa46f8002c2bbd9f48d37befa77dd2ddc3ba9dae8e66b41e895c072529694516ba0c953129d9dd068f59546de2b85c5eb7550381bbd447ec266a4af083f57e15ecd3e0f4002fb8d95f698dfaeebea0fb77583d8997f5812793136b37a87a1b2156edadea10121b15f97e0407494d08731e842548e27fce6142cb99bdb1c9b0ef17e10ffbf5c056d625d3fd028871af844efe50e32aa0f8372996779e4df93ef2d2adc4cfdd75797912fb69fedeebaac5076bead099c583c22de213aff1164bb378202ba23b212e79624d98ee54413c3eb17dbe7a03888fffb6f44ca339eb21641c898eb06db5ab06ec5b8e1f98e590f236bd32151aaebe3794aadf82a1c2375042bd4e721275cdef851d1d0ae8eea42c306784d82901499b5f9ac98ac909cf0c2cfd9f368e0b7c807ff712cc1ce4a08a3f80efca1af8ed528ebe81e73a263fa046ddb64ada226de9a7f65b44dd71c97fc8cc2c27ae1a07db139758bd8c10561ac3237973f7b01ab31b9deaf52ff84e57d075b3402cb29f109a98a31b440a691af7f61b2e5824f98d25e65a28e2a2e921f16e2e16ebf233eae059b72403c175ff22df25e538a446143c38a37b8ae8b6099b74aa46ba9b5d21038d114ab7988bbcd3325a88c6c6cd04ab9f7fbe05419cf7f4881c1cc7b86aa19c93a2dd3b30873037018148443b1c3b8327090ffd5e0ca11d2163be019e807ec5afc44611f67e1b0f2ac4f7b8b01675f2962c9605da69c6a349d692b9dd45d27389527d179c8b8f894ea03b8391dafd00fcdfe6783d896681a9b454310f7da82ffd6e80802a73b1c81a8d0d7564591785899862ec7d324d067d87f5b6e560a243c2d8894ac13363b6c0dc58535bb940ae9f77003b5efe29d550c207eaabce941f22b3045e650ef85465b6dd1a09c92e69ef0695c39069206ffb77d702a0112fe760d6de1e50b8d605e2623e3694cb93546e54a5d2a4bced476058cdeab9dbd93797704be5961a1cf7395eca68d5b156af17846a97c00baa31088b4cf895381fc0455d3177b630a4e8f47401dd1e8e807599963b5edab4d63e97f4abe94c6245c20ac546f92c50ef5ee1f131337b07937a2f9e9321ccbb8586f9fb5ecd4c72446816462dbc418de1f6deec01b3d856a8201c77b6ce53db4cfd37b8a3b4039181f15da009c199a1a5f0006a1209dc166a03ae1d0776112cba6efa2f97bc239bfdc2550c4a3523dd74fa44efaa6b84c4e5cf50ddb177fefd63cb4ba905599cf708db782a4009fa5b1b2764975003573c4e8b31eecfe90eff4e89443fd1d6075c47ecfbc640bbf340bffe263651f96089b92632b5b44fe7d081a2321a00483e6fef3abd1bd0b638cf8010c0d4508df57ce767128c904423edea92ba898b8d07e64bef4222d86500daf3905c26e371f2225df61a6e3fd460e83213071b600411097eea3cbda9fcd4d9e7a5647d2d502f609e8e6576403fbf35fc53f928abdc80ac1b109b7a562bad898eb7d172c2259a411de3d7d44b7f4949726a02fbb3ca2e79e34bc2e9b2e75584024e7e800ceed03f14b8fa5dad67de4acec763be7ba09a5adc09c7e42efde43c3be533f1e847d2a99e83eefb0224aefa70bec0d79977a157487f11dde55df37e76b27b772c97248a0805bb5e927d9360dcc4dbc8c86f80ff5c3bf9b27efa6cc0c7690651a5363f1ee1d1856eb2bdfe30472d761bfd475a12dd8c0ecc0085834b97527e8a6d6c018f1e8ea1bd472fb45294e0e2d8befc5c999c1a2a26eb05532c4250499793954636502af5d7f668ce214aef18233983832209cedcf88c909d36ee24753551f4dfb45ddd4ed2905eb9c221480e2267e72c089835feb16be649cc3d35b2c391718dd74b32a4f602163757ba97432e7b676daa115331195c01affe2276ee14d8d258beef8cd1fe389dac2bb2aa432a79494125f11f7e4156c9c8cd99a0b8a4e1e6b82dc50b985b15fba969b325e092cf34ca2701a4ca1ca743a280e15faad29b71ce597754e6c89c4929306bbe6b2f2b3028b67b55b5c5203c2f4950ed2eedc2a475eb030a58f1389017172fc198ae0dd8d22cd136dddf93d68b633a8c0d1077721c4fd22e59b033ff72f716d2fb83e3fa631a6a86a8e1c7418acf7a097832ec16389b14cdf8ea0fea04a1b596902b7daaf19e134bf13693e9b97e1f61256a1c9a1d4c484c84914864612ed9203e858d9064beef0af91f98c91e49d2f22c5ea05d64137fbab28ef59fc4346ef7bf3e409957d9c68d557d5b12e12ae816ce26907d89cba03bb160fdbce9e20129924e18e9dbc7991c4a8bfb1d6783d11717607aa8a9efa46695be71060fb51192d954717292c34e5075ee86b375382194a8b2b85975d80ae979058bf09d24eaf44b6e9cb9ebb1954a4e99bfe1cd3b8eea3e680e0b6f4d6f75b3532d0e86ee00b4abaa9e6cff41e4caee87ff1ccc430c63b370f5e08260b0c021dff432c10c220b63a69828d954bee3fc4f1e376de9a9824a182b18846b2015e53b6f6aa2679445c240a26d1594d71e8077d47caacc0abbe83551bcb9d36fa8aaa3f48229f0ab958d22b176bcead847189516cbaff87157baabe18f1f733d80c8404f4d2bb32ab5cadb5b0ce6f02d99d1ad9458cc1694b88f52c386cfa7f4cc654be629343c19f039f7aa239f938a8d244e018af3d806865ee442e89e3994d7fedadaa4df98cbdf498f47a6b142159317f194cad23cead4566ac60f59ddf5e34687f4be0b2fcf74b3141a1603872b4c02c5073bfebfabd9091430f568db3e774887375c0d8fd5c214b7b14f21606cedb70a2cf5cc109ec9699d81468ac45d8d26047398868f78ecf682a5b00784157adcd92396c3b25bdcddff18668250b9a5bc88884777d99804a1754853cf0fc0e5db05778ea3f344c33394e51858189f200fb907fb93da8d9359e61e33e99b0a3d784e7a8ff5548ca8a60494cdb68f0932075c8489b2c6cb7cdb9ea644a98a09e6729f81ca1c95bca2e8a6f183980bbe2683e19798fa71ad24d40cfdc514e2e3f60309359fa7539d4f6a5691b77fe7e01f1e7ca262a9dd08450bec74a7a78d349df787a3e8eea28ae83df9dcbbba20fcd8221d8168ff4124aa02a7042dd9205b5b60a19ae5e8f3469d9b5391a3e1a3c2ecbcf081f11dffd93e17120", 0x1000}], 0x4}, 0x40000) 1m6.386983492s ago: executing program 1 (id=702): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000001a80)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mincore(&(0x7f0000894000/0x3000)=nil, 0x3000, &(0x7f0000000040)=""/197) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x5, 0x4, 0x7, 0xbfcd, 0x5e, 0xffffefb4, 0x3, 0x200, r2}, 0x20) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r4, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000180)='./file1\x00', 0x2) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r6, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r6, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r5, 0x1e, &(0x7f0000000140)={r4}, 0x1) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000000)={&(0x7f00000b9000/0x2000)=nil}) 1m6.089179868s ago: executing program 1 (id=704): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "5a080039084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac06}]}]}, 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) unlink(&(0x7f0000000300)='./file0/file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 1m6.035086154s ago: executing program 32 (id=704): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "5a080039084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac06}]}]}, 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) unlink(&(0x7f0000000300)='./file0/file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 32.360319044s ago: executing program 4 (id=1126): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0xffffffffffffffff, 0x0, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x78) dup3(r1, r0, 0x80000) 32.359654573s ago: executing program 4 (id=1127): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}}, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/psched\x00') preadv(r1, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/168, 0xa8}], 0x1, 0x180, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r1, 0x4008af75, &(0x7f0000000040)={0x0, 0x5}) 32.299900349s ago: executing program 4 (id=1129): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="081c40660033465316000000fbffffff000000000a09453871f54db346efc9ca6e8a57eff5d82fcfd5ca432b2f5f62cb2200143c73276b490a9a887120beedd699b233e8cc80ca98a6f59305ac71d62ec521abcad981a85b5173df4ba4c219e59845fd8041af51001669e774", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) setresuid(0x0, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r3, &(0x7f0000000b40)=[{{0x0, 0x38, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2001, 0x0) ppoll(&(0x7f0000000080)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}, 0x1, 0x0, 0x0, 0x20024080}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000400)={'gretap0\x00', r5, 0x700, 0x8, 0xfb8, 0x8, {{0x26, 0x4, 0x2, 0x6, 0x98, 0x64, 0x0, 0x2, 0x5b962f254e9cd800, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0xb, 0x76, [@remote, @private=0xa010101]}, @rr={0x7, 0x7, 0x36, [@multicast2]}, @timestamp_addr={0x44, 0x14, 0xc3, 0x1, 0x4, [{@multicast2}, {@multicast2, 0x4}]}, @cipso={0x86, 0x16, 0x2, [{0x6, 0x10, "4a913e17f758ca624c9faac2c513"}]}, @timestamp_prespec={0x44, 0xc, 0x30, 0x3, 0xa, [{@local, 0x9}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0x9f, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@broadcast, 0x9}, {@empty, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@multicast2}]}, @noop]}}}}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r8, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r0, 0x0) r9 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x480, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000b40)=ANY=[@ANYBLOB="01000000000000dec401"]) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000008, 0x4c831, 0xffffffffffffffff, 0x0) 29.280107145s ago: executing program 4 (id=1174): r0 = syz_io_uring_setup(0x24ee, &(0x7f00000000c0)={0x0, 0x896c, 0x8, 0x0, 0x25d}, &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f00000001c0)={0xc, 0x0, 0x4}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000040)={0x5d, 0x9, 0x140, 0x5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 29.079865574s ago: executing program 4 (id=1179): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 29.078906089s ago: executing program 4 (id=1180): mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0420eb00000000000100090000007fe708000000bdc8a0930136388520a54a95a0a1094ada47f103d4dda5db7d9eddd63c0d1832120bb29b66c45420de69818b4a042d06"]) pipe2$9p(&(0x7f0000000100), 0x80080) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x141341) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffe, 0x1, 0x0, 0x0, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x7}}]}}]}, 0x45c}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f0000000400000004000000120000000000000065ce9e29f4e5b03c9b842f920cb68cae676181ae3556db853999c2d04f513a052b43b913fcf5e18384995256b8e2e4714979e546657b9e9918e945fdf2231fc7478023f100ac465a1d5134abda07105c1bd8bee8ec8e985777c80000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)=r2}, 0x20) close(r2) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000040)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) kcmp(r9, r10, 0x2, r8, r2) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f00000005c0)="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", 0xfffffffffffffda6, r0) 21.50840448s ago: executing program 3 (id=1254): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x95d3, 0x0, 0x2}, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r1, 0x0, 0xe38e, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/191, 0xbf}], &(0x7f0000002480)=[0x0, 0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r0}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x8a, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "e0f502", 0x54, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@hopopts={0x5e, 0x1, '\x00', [@generic={0x1}, @jumbo={0xc2, 0x4, 0xffff}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x3, 0x1, 0x0, 0x3, 0x6, 0x36}, 0x1, {0xd5}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x0, 0x1, 0x0, 0x2, 0x5, 0x8}, 0x2, {0x7, 0x5, 0x2, 0x8, 0x1, 0x1, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r4}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0) 20.638716589s ago: executing program 3 (id=1258): r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x1, @void}, 0x10) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000080)={0x0, "74100f9db61162f05d20455a609e054d"}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000001080)={{r2}, {@val={r3}, @max}}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000010c0)={0x3, r2}) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000001100)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000001140)={0x6, 0xc, 0x4, 0xe000, 0x2, {0x0, 0xea60}, {0x2, 0x8, 0x7, 0x2, 0xd, 0x5, "5591dd06"}, 0x0, 0x4, {}, 0x400, 0x0, r2}) fsetxattr$security_selinux(r1, &(0x7f00000011c0), &(0x7f0000001200)='system_u:object_r:policy_src_t:s0\x00', 0x22, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000001240)=@isdn={0x22, 0x8, 0x2, 0xb, 0x8b}, 0x80, &(0x7f0000002340)=[{&(0x7f00000012c0)="bd2b219c3156a2ad66279aed59f2c98d3f0ced9822d4db08f84afeff9e9df8586b88db181d2f86dbc62d73b330a77be8edba1d242c82f87d1e70720248afcf6953698624a89742b1446b6589dee991c9fb32bdf88496135980e0ebfbf3f928b00db78761ac5475545f70fe9f4c12076224d049773a089d0fdff0ea7bf1f120805d532eae6c7e01e516179536ddd9f3b391ffabdfdc2f2cd4d2721da20b0228372eb39a658580205523e366c0d010c8ecb4df5ba3863a770a389be6ac73985d4571a654ec3aa8e4f6e21ff66c72c002a89098889c940de0e3e430d103f3894596ecf4be76a8b2abfc6865869db30fd9da09834161935d4fef782523c571d539f9f6d78c2e747b9f5e1fa9a81ba38f6cf287fc4143c482e464e219f5b5e895b4f361fb8235fa6b395e694f61db0e5ddf8dc7bc8e3027c3896e6aa2e54db5ae000ebb405ef22647b0e6c9420dd1b00f403fcede7d6cdadc39b49c25b02ab160bb1199def222bfb83a3564899018b8c9ebabe9c6b0aeab30d0b12991006acc0719c8c8792c919029068a500bbd69fc3e6795906df0e4bfcf6e5f065b72f6d4e227983c057d0d059b9511e3bed30c660fa7b733a20cad7817af1ce74a975915906f8d1837541f7533e079b56ceb1dca074c61ccba7e4f6acc2fd33ed6fbc9efeb9172cef57ca93d10ce06eef260a84cb6493623f20d78f07bfb0f441f7dad4110c12f6be78a652fad2ad5a0e0ea2a29f6973ed29b4f2b795b2d0f819f2678be17bf4f02cbb30fd87e9df4a7c08bb8d80a6782fa8119910412be29e093061964777627872bac7bb0927e802e0a85d0d4bd2242d6444dc7e8f043f71ff5f6d187dfd7fe6bef7baec27c89a0db3613091c7bedfa1d867614f69ac0327f63892fb6b1215634c5decddd310c97df9d44301147f00682e69d581489a625fac20d0518cca7bafe1691987b0280b2cb6be550df66ac22cbf9fe02a419f416f1cfbac7058fc0b56fba03b802ee6c0f8ce6eae46c1df2935d62af8f271243bf6a9fe8dc0fea87aab5fa68ebcd6cb146ebd40dd8a2e39e23717ad458d86ae4a1790b946bab75ee78eabd5792f811d11ef3abe04ebd09fd750fc78a10a0a7b76370868d5dc2863b08e5278789d35d520f2e780c9939c0c04fe88a67471cb861822478c47e421da15376b9f8c143b00f278f6631ba293e5280aac98c40d80081f7a652d0f6a50eb6191a6273c142884e62a0c8119a61f4d25ffaac323f31a7e06bbad1ebfb9fd06f4ff6a0bb708030f92982e03e978c953ee812c2f6059066a0763ac4eafadf1255ab47e1d9c3a0c46f6f680893bd15590b76997c826c74b5b61cd87b9596b19a774500bd1bbebade4e599f81e87290f03aaa7b1f68afe9d39f95a08d51b6eb85e5bb0d8af33fb82e9d93ca2709e51a777f1817a5df28bb3ccbb8a25dcae1bbc97cdb29ef87daf46e7bc8604d18fb7b532d211af66ad0aaa82db8698b05f5de2c9615ac64e6004480206ccf5ca357650fe808c36476f256033190e62a41fc84ca338f446433a557ebbf4f74842110358c53c4458431e93c3ebf54470c1372cbea6dbd67342ebbed03d521d7907cf9ed3c4c89b46a8dec1d6f97d001c740cfb22044d42aaebb0abdcf9b882c4689c306065369d10f31c0823f5adabd88faa20f02bcc514bf3da7970fe6cf80bf94bfb702542bef94a8c1b4e3bc8f655eda1b9dec577666142a45e8fe569253eb85b2129e9495cc77d212597b10cdbc29b09e23b2476e6f59ed45e0f56a7e33e5bd62fedb8c68a1aae307c95e539755d72d21b1c2317e2fa93e5b2b3cee972388aea94867ec47d428f12bf3e9846c981a141e8b3c089cdb1eae6cbf16b8b99f536f7113d1c0f4775cf30e13873f8b0cb839b342edb99d022c4f445e084a1c64f303e3df23eea50919bd0c0f3c8c395b09f0cc8623043d819d162afa0e5db3ff275bd17cc8607d84f245cf62a56746a865ee3f80294532b03cf4614a707ec6490d61799072702c5f92f6d7c31f51c001f1c4cce1a75aca23c9d075709266e941ef4324e06182678ea00016a719068c2151b639cd6e1b6e8e6356eb4a03465c5777f83b0f6f4b522399545cecc96910633fe7258381ee8a3588e7524253a592aefac13c33619b5931655e7eab816ba4431ddf9d745487d3497a6d84cc39cdbb9fe995427abd39cbfab215b310e259c613b91e5f43bfadec04f0e7ac09414224ee808da40ec5e683bc43cd98405eac5846f0095bf7f88ccd7f6b9cab3db01b0ab2159d542ac105d143e1540a802ac0ec7a2ed5bfad5bfe189490f3b17b8a05ec8673046c20b4441e34ec6ec1d227c7c63e051c3afe12de0de16bf28950831236a34cbc534e69310896272e4a647b0064f08a0ae544c301b49092374ec3826fc5452201fa58356ba04e54b20db430e6adf654620e0f4e1fea9cbd5ced1a7d3bde1d9d4ba4761af8cfd81b4f745ae1d447249846aa5c53447600dfa4122b88519656ed03ed2cd6eabf9a67486a919c2d631ba99dd03ff027af186e0cf68e9250ec64d7dd979fc9807768f23c226788c933197905332ed1349fe025f7fdb16674acb2986b30fed8557963d60340281a0ffe4d9f1eb057553455dcaa89ad8eaadddf3e0452083783612d7862736509904770e2df374f165c40357a823c80476fc1e47528d81d2699a3d24186bce79b00f79d079a9190a92851203ce3592dd78ae1661aae76300bbf065669d47a05118f0e1eefdcfffe4108073334e56c8d52ae986558f46ee90833680ace4e9f468b4fbbcace36ef881d5d73ed3d657fac1c11e4e6d45126ded76fcba4dce18dbf9381c3e3430cddcbcdbb4ca80ccc7d9ae4d9a81d558512d71dcc80a308f7b767317c4952871bb9e59586a00e886bdcb9fcf8866e525ece7e32c258b6501985b40f941f713e1a11aa06ba370edabfdd8625ade521aa12b514a27a2457383481e3c61b77d7ec99bdefb2ec628a014b294594cdadbef90edc5212f2af65bb3b28352ef94f21fd1da2c75cbe56aba8e5e73f9ed74be75a7721b10c50283be78f354d62a036d49d93881cdcd486a7c32833c629dd24e51d943fa0568fab0d63097b998c84e32856240a6d29978d85c10580b7b52c9ac0348c302ac047d94a1589f0ecb7139b12942db31b45074cfd9bc1001ad0903c423ed3a30f3c617ba7daac2651d4e3d823ebf18b25f1b67cad10ce6bdd43a5b8662f00602b34ffc4e2d03b17e116e53e99a85f6b579b1e8111363f457aeaa0418e758915121a0026ef633b7890e9e3a57cc3b56dddcd52acf474ad079f314b733d0f89be87c4fe8a102a2a343768f9f50ab9f1bd1168e7f12537dd47ac6c18b2cdc5ef87e9c59cacfdf149b5bbe2c230c96796df1c433aa2c8d4c731b6c87fe6b3f8dab54290dc35bf9de5074ec8670a65615faa508340f00861de8de7b3d74de86d08c486f4314dea7ec6695be038dc72853c4596f68ae588b8edb709446a63212da92c41f18ac505e8356b8948fd9d7ca06bdb4786017c54cc5109375c79f7103a6c4bdab5e8d98d8357a99b1ac82d44dcd0634c388d81b88b33d9fedbb649f2d1622196e4f80ce6818bd37d6d51c3a7422ffea1343b33f9c83cc86a90ae4a968d1749738b04294f5fd586d0caa66b0fc56412326f8eee6454e2e795a1cdc97acdea93454d98f788d6026c9a21f42eb649ec548c4310a797dca7c4181110164b8fccc8dadee88bf91cee447828b56a3ae87ed41c7066ab3568ce02b1b368308328351511de9bf1f2e1597b414be7f024ce0a85bbfcc8eb107e7a6c2dfcae88b47717744dcba798283de2c254022aae39822bf8767357bc4e35a70cfd298ef6d581618f5889a6f0a0c3e122e603938b613fd07188ff48356eeacf740a6093e4f7f4c11de897ae3c63e3029e6cd8924e94a4c38828ae3b909db6b61dd2793fae4bd91c71b9dbe39be5c206cd6682bfdea016dbd04a2e717dceeb024389a90712f8347359bfe80d864882b829807d2cc0dfc440328f7ad701c4115ff0576006e8aae268744f94eb36c8107b33bc787af0b56b590f85fbc945075641dfaf3fd95b5eb6a918898b07f277d2f389dafd4fa9beabfb2464f95ffac13961692f196a44dfc4fe91ef1d96560e70e05eec9459e5f4389513e2648a8f669fe8f9ad8cbe2400ae8d9249ba87d8153ab2b2d426f2b842a63429dc35bccdd006848f2e6cb5f874280a15be131f54ae98ea62eebf5a575e6c607dd2932b6ec468f598eb65ea46843cf41201653507d353f21e3d716bf846579f12a12887b79d4171e95243257bbb9d69497d5afb250e631f12fe0b55b133881fb36844c06c54d37a1011d0e6e00c49431dc1d5f4766603578b8b864784b2640fbadfc06461539a8cf086fa753dfb4c101be8785465851bbafb0b1f8e4ac57b45b5acdd16a4c1fbe97a0f72c26cc2178df0f37d08b0c7932abe4c0103809e8db54a4cc5be01bab49b5d198848e637d5f56faf6822af5997bf3233d585790944d630007d0bfaabf0587600ba5ed3b2deccdb607b5b1266680c821aa1bb756eed0219d559611fb5bdfecbc3e53d3e480f6e0f07c5c0b6e9be4bfdb8e4d7efe1f2fd278525be54bc7c9b9c1657f0dd7f9482725c6e841e4f1ee437e3d2560f158ec1b00fca5045864ec0201bebfa20705dcbeddd49c1b0f48004c6ec7df25efee696e0bdd4174a5ab66f1d3b8d012b329518773c0e34613035f66114a45b481fdcbbcb1d090a6261367861ec1e6b3f787482f8518efdc8455538f9c818480ae1bed438c92309f21b3b398d744acdda24e1edff909079fc67c8c84ffdce5162839ee7d81e64fbd79cc9d6b4685414fcb511e674335a4c078373de1cdb454928aa770885ea876ae6c0b988169239be2f5b72b825c5ecb4d30b262414ee7aab133f0ced51d72ac16269a747bcc1f4fd192b17068ca5dd4cd9f2a946d9c9138ffce94333d30867bf82f04a287a162328b7b3df84ed441c7bcdc59ddb87306f3de41615a764d6e6fdeabe371891c3a2f756bda2200a6a97a26580390094460ea33dc6a586a8229a1691b679103233a175668708fc54f4dd28c5e345185edd95e460989313eb0a687cf9c925cde1c6feebdf8414eebc305211deb65455b5d35817b19617872321d9459a09b73f8b3cee9403a74b085292c54817563b4e3898cafc00634395554351fccdcfe1d9d920e3ae5eacc6bba9ad12db61daf355613ab0d8c760c4cbc63597bc9fa11064641650824574ba93f1fd3eedef027bb49336218483aba1276503db9075cff4a13386b0e76d2bccfce0cfdfda88f6946694bdc5759ba6e162535264de078d8d07606212f9c6d2deb2e33b2a17191aaf7c5b509b9c32fb8a10846b501627bd1d13db428f43f0c3e3f007e031f96352cbba33327e176643c0bcf664cbb657237e05c47a834ceb4d35b48e6ee350ff500176c9160a91575985308179b331e5427ee12fb6cd7364f41a056f598f87cc18ad5cb1b31c0e006e46c4fd878198972c767470a1cd78870f6204656de2893a1b0e7d2b082e4c92ea3d2cc526a910a3cdc65889c599f62f957bbad16377b32c02c542ed7e7b2cce3a6792d8b3b8753c9853544280a6ef503ce3bd1d54325f01f5da092d7d5e5a640449f35c140631082b3c0829de03fca96598a0b8f57cd8f73d98449e02d8126b0b12a51a45cab67652cc48cfe8d2c12aad8c5695ad9e6b627a6ca9e2a5ab3aa43edb649c6ba511d8d2a2c60f950ecbf8a5b4b0d5701f24214ee2310156eda282fcb035c732a194630b", 0x1000}, {&(0x7f00000022c0)="273097437e4a4c62d3b1a4a8006958ced80a80352f8008bdf52e66404a787c8cec3fc14536dd72749df580f7821e06129ef3b28a799c7fdc5557794503303e2053ab73cba38e502e9429e718d12c0bba7e440b3f2d950a27ff837440b32b40b0cc7e95d39be69220a24f6ff3e8e625351fa9fa8fc2a967c53ae0707c", 0x7c}], 0x2, &(0x7f0000002380)}, 0x4000) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000002400)={'tunl0\x00', {0x2, 0x0, @remote}}) syz_open_dev$MSR(&(0x7f0000002440), 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000002480)={'pimreg1\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002540)={r2, &(0x7f00000024c0)="be31c7bc522d202c9169a82d837fc09922ef78528b2d693e0d72ded0bf3328f1af5fd1cc61db589513538736fd311a927699cd19b3b1", &(0x7f0000002500)=@tcp6=r2}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f0000002580), r4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000025c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000002600)={0x6, 0xa, 0x0, 0x9, 0x0}, &(0x7f0000002640)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000002680)=@assoc_id=r6, 0x4) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000026c0)={0x8, 0x2, 0x4, {0x7fff, 0x7ff, 0xf4, 0xb}}) bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@bloom_filter={0x1e, 0x5, 0x8, 0x9, 0x4136c, r4, 0x6, '\x00', 0x0, r2, 0x2, 0x3, 0x4, 0x5, @void, @value, @void, @value}, 0x50) ioctl$USBDEVFS_RELEASEINTERFACE(r4, 0x80045510, &(0x7f0000002780)=0xfffffc01) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f00000027c0)={{0x9}, {0x5, 0x81}, 0x0, 0x5}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000002a00)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000029c0)={&(0x7f0000002880)={0x124, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f724674cc2275f81903d0393d8503d86"}]}, @NL80211_ATTR_REKEY_DATA={0xf0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="90017931d2e9febf0fc9c783db2e9d4641f8fbefec2584c4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a4b47c3f86116f9f1d9857cad6e1f9da"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="09836e6b1ae38b34ced392dded5936fe"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d9e22c2caa3994dd7b296e74d3709e7788091fd1298a3da9"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8726eff18195118adf6a083a73532ea905ba1c92e04dcac17d96b32b8cf13089"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "da6e401750516cdc"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e033fea81f59c82f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0910a28ac2f9950c9cded04a465198b2e94ed6b6f12424955b02c1c9dd556420"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c1f5cc8e906270f31198da9965e9dee7c1804b0c17746f5ac7bb378f04ced11a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x302}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x801}, 0x10) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xbfe53d32d2fed5bf) r7 = syz_open_dev$ndb(&(0x7f0000002a40), 0x0, 0x385880) ioctl$NBD_SET_SOCK(r7, 0xab00, r2) ioctl$VHOST_VDPA_SET_CONFIG(r4, 0x4008af74, &(0x7f0000002a80)={0x401, 0xa1, "12703e8ebf0dab810b0a15396d7b66d3eb1eacf36f00a7ef9086b326e51af7c1fa92523023068b54709900b0a8a97ca5eea751292e34646efad9aa63a8aac3bda97f3246ce3a14100a4937bf6aeba61f2ecec5604ca2de2416fe21118e9d1d8cd479b14d3aca1a90d08d0ecdef7273e5b2d05d9fe07dcaf86abe511db2ee87dbedb2e6d17cea7880cba1882742f3a741cb4403a3174c67a7a92746541560e16c0b"}) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f0000002b40)={{0xa, 0x4e22, 0x4, @remote, 0x101}, {0xa, 0x4e21, 0x7f, @private1, 0x8}, 0xffffffffffffffff, {[0xfffffff9, 0x8000, 0x1b, 0x101, 0x87, 0x9386, 0x10001, 0x2]}}, 0x5c) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000002d40)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c40)={0xb8, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3c, 0x14}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x30}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x32, 0xe}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40000000}]}, 0xb8}, 0x1, 0x0, 0x0, 0x11}, 0x8000) 20.629800258s ago: executing program 3 (id=1259): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f65787465cd94c3becffa3f6e642c6163638173733d616e79400638b191fa6acfaa831114453b2c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20044014}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) chdir(&(0x7f0000000100)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe99) 20.56990515s ago: executing program 3 (id=1261): mkdir(&(0x7f0000000600)='./file0\x00', 0xe8) mount(&(0x7f0000000180)=@sr0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='ocfs2\x00', 0x11, 0x0) 20.394173119s ago: executing program 3 (id=1263): open(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100000000d0085a168d0bf46d32345653600648d2700120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000438000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000738000/0x1000)=nil) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r4, &(0x7f0000000040)=""/148, 0xffffff96) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20020, &(0x7f0000000300)={[{@mode}]}) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xa000000, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 20.188885589s ago: executing program 3 (id=1270): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) dup(r1) r3 = syz_open_dev$vim2m(&(0x7f0000002380), 0x800, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x10000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000280)='cifs.idmap\x00', &(0x7f0000000240)=@chain={'key_or_keyring:', r2}) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000480)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000580)=""/153, 0x99}], 0x1) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x8080, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="1412e0c84935a9738e0ff2f788a8", 0x12, 0x0, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f00000000c0)='4', 0x1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) 20.009977391s ago: executing program 0 (id=1274): io_uring_setup(0xc90, &(0x7f0000000080)) r0 = io_uring_setup(0x4166, &(0x7f00000002c0)={0x0, 0x400004, 0x1, 0x3, 0x4000001}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {{0x54}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_enter(r0, 0x0, 0x0, 0x1f, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x135cfb4307d517, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x60}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0xf0, 0x10, 0x713, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1b0, 0x0, 0x11}, {@in=@remote, 0xffffffff, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xa}, {0x2, 0x10001, 0x0, 0x0, 0xe29}, {0xffffffffffffffff, 0x200003}, {0xffffffff, 0x3}, 0x70bd2c, 0x0, 0xa, 0x4}}, 0xf0}, 0x1, 0x0, 0x0, 0x20040045}, 0x40810) r8 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0xfffffff5, 0x3}, 0x10) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000280)={0xffffffffffffffff, 0x8, 0x9, 0x3ed4, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x10) syz_usb_disconnect(r8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"6957608d766cfff5c3a665bd121a2d89", 0x0, r9, {0x4, 0x40000a}, {0x7, 0xc00000}, 0x5, [0x3, 0x3, 0x9, 0x6, 0x0, 0x8000400, 0x3, 0x400002, 0x8, 0x7, 0x80000000, 0x81, 0x10, 0x80000000, 0xfffffffffffffffb, 0x400000000000001]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bind$unix(r6, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r6, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 18.600296845s ago: executing program 0 (id=1276): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8) 18.599833487s ago: executing program 0 (id=1277): close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) r0 = syz_io_uring_setup(0x17cd, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x51}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x53) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x1, 0x0}) (async) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, r0, 0x3c, {0x7, 0x81}, 0x5c}, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r6, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x8000, 0x1, 0xe3f1, 0x7, {{0x8, 0x4, 0x3, 0x9, 0x20, 0x65, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x4c, [@loopback]}]}}}}}) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000080)={r8, 0x1, 0x6, @local}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r9) sendmsg$TIPC_NL_NET_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x11}}}}}}}, 0x0) 18.489038752s ago: executing program 0 (id=1278): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r0}, 0x10) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2561082b8e36cef5a20200000004000000080000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0100000004000000080000dd0b000000000000008503e567b75521d76e8f8f3bda5ff60204b57cb67bdc83f13830669a7015a9534c188fa4133c6ba37b58e78385fadf913791ed86b1f20bf48c2022bac5faee2a2397aece7bdee5c191279efb2610a203ec2e1562f165d2a7fe079766d9322fdac9e4ff991b7e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000feff000000000000000018030000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000053000000bf0900000000000055090100000000009500000000000000b702000000000000632af0ff0000000026090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000015000000760000e4be980000000000001e080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0/../file0/../file0\x00', &(0x7f00000003c0)='./file0\x00') r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x4, 0xc, 0x40, 0x1, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x7f0f, 0x0, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x3, 0x200, 0x1b, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x8000, 0x8, 0x4, 0x1000}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x40, 0x8, 0xd, 0x4, {{0xb, 0x4, 0x1, 0x15, 0x2c, 0x65, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp={0x44, 0x18, 0xf, 0x0, 0x7, [0x3, 0xfff, 0x5, 0xfffff800, 0x7]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="68190000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="5c0001801400020070696d2672656730000000000000000014000200767863616e310000000000000000000006000200746e6c3000"/68, @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="140002006261746164765f736c6176655f31000008000300010000001400020070696d72656700000000000000000000080003000200000008000100", @ANYRES32=r13, @ANYBLOB="1400018008000100", @ANYRES32=r14, @ANYBLOB="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", @ANYRES32=r15, @ANYBLOB="08000300020000000800030002000000080003000200000014000200776c616e3000000000000000000000001400020076657468305f766c616e000000000000"], 0x1968}, 0x1, 0x0, 0x0, 0x20040009}, 0x8000) 18.42864718s ago: executing program 0 (id=1279): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x40, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x14, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331ba40dfabcc81c75"]}]}, 0x40}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x10, 0x8, 0x7ff, 0x7, {{0x9, 0x4, 0x1, 0x8, 0x24, 0x64, 0x0, 0xf7, 0x29, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xb}, {[@lsrr={0x83, 0xf, 0x95, [@local, @broadcast, @broadcast]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @private, @private}, &(0x7f0000000240)=0xc) r6 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r6, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r6, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="20000400000002000f00bc6df106176d05fe90fcaddab30096dd0e58fc547392b8838b27fc70fa0007000000000000008fe78c5f950950a71e0312d8e1d9d2bfe36147acae553677bb2f58aa86e4531264b3e60f7f17e6a56d338b768a91f3fa532b0a006917c7ef751609d47698844ced5bde"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r7, &(0x7f0000006800)="10", 0x1) syz_usb_ep_read(r6, 0x2, 0x111, &(0x7f0000000600)=""/235) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x1000000, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xc}, {0xffff, 0xffff}, {0xfff1, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x1, 0x7f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x7b627acef2af8e96}]}}]}, 0x64}}, 0x0) mkdir(&(0x7f0000000b80)='./file0\x00', 0x10a) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @multicast2, @dev}, &(0x7f00000002c0)=0xc) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r8) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000008}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r12, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4000800) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r15, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000001a80)={0x47c, r2, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x6c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vcan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc35b358a33629a13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x12c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xa, 0x5, "25db72a7affe"}, @ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'tbf\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x700000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vcan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1d0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9b, 0x5, "a555ec6acdf8da091f704383b92c636ea7f4e99e7d9aad2005889f6b2a9b1cedeab55f89c1cb4a05fe961735611c994b5cbb892fa1342627954f5f394890847e35e26918fdc0b3db3de6fd4643c9027df8ccb09f7d506140c0185e13203d116da73d16eec11e8fd4d15c0c8f085a5417b8164ced2e271c191af9128e7a4249a7f631d272e451cade802bb25c4a48a9a084f270d9db5e3e"}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '@$-[(%^^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':\xf5\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[[[,\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x2b, 0x4, "1414168e6f3596c734e034fad0f835d36ea786fc97fa3988a1ffa906a855d3a5f7ec27d4f8a5f8"}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.+!!\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf47b}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\xce^+}\\%\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0x2e, 0x2, '\x00\x00`\xe1\xd0\xbc\v\xea?\x96\xbcU~\xf3\x9e\x8at\xccvW\x91\xcc~K\xb1\x80l\x8e\xd0$\x8f\x92\xc6\x9e\xc3dbj\xed\x9b\vh'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}]}]}]}]}, 0x47c}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) 18.425070118s ago: executing program 0 (id=1280): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0x40045010, &(0x7f0000000300)=0x2) ioctl$SNDCTL_DSP_RESET(r6, 0x5000, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x10, 0x0, 0x44) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x1, @local}}, 0x9d2, 0x104}, &(0x7f0000000040)=0x90) accept4$ax25(r4, &(0x7f0000000000)={{0x3, @netrom}, [@null, @null, @remote, @default, @netrom, @null, @rose]}, &(0x7f0000000080)=0x48, 0x80000) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x24008054) 18.373722101s ago: executing program 33 (id=1280): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0x40045010, &(0x7f0000000300)=0x2) ioctl$SNDCTL_DSP_RESET(r6, 0x5000, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x10, 0x0, 0x44) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x1, @local}}, 0x9d2, 0x104}, &(0x7f0000000040)=0x90) accept4$ax25(r4, &(0x7f0000000000)={{0x3, @netrom}, [@null, @null, @remote, @default, @netrom, @null, @rose]}, &(0x7f0000000080)=0x48, 0x80000) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x24008054) 13.978924089s ago: executing program 34 (id=1180): mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0420eb00000000000100090000007fe708000000bdc8a0930136388520a54a95a0a1094ada47f103d4dda5db7d9eddd63c0d1832120bb29b66c45420de69818b4a042d06"]) pipe2$9p(&(0x7f0000000100), 0x80080) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x141341) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffe, 0x1, 0x0, 0x0, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x7}}]}}]}, 0x45c}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f0000000400000004000000120000000000000065ce9e29f4e5b03c9b842f920cb68cae676181ae3556db853999c2d04f513a052b43b913fcf5e18384995256b8e2e4714979e546657b9e9918e945fdf2231fc7478023f100ac465a1d5134abda07105c1bd8bee8ec8e985777c80000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)=r2}, 0x20) close(r2) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000040)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) kcmp(r9, r10, 0x2, r8, r2) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f00000005c0)="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", 0xfffffffffffffda6, r0) 5.098146207s ago: executing program 35 (id=1270): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) dup(r1) r3 = syz_open_dev$vim2m(&(0x7f0000002380), 0x800, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x10000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000280)='cifs.idmap\x00', &(0x7f0000000240)=@chain={'key_or_keyring:', r2}) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000480)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000580)=""/153, 0x99}], 0x1) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x8080, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="1412e0c84935a9738e0ff2f788a8", 0x12, 0x0, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f00000000c0)='4', 0x1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) 2.31468372s ago: executing program 7 (id=1459): socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000040)=0x1, 0x4) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 2.139481504s ago: executing program 7 (id=1463): r0 = syz_open_procfs(0x0, &(0x7f0000000680)='net\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x6, {0x2, 0xd360, 0x0, 0x7ff, 0x8000000000bd02}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'geneve0\x00', @random="f4fd4d750210"}) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r8, 0x6, &(0x7f0000002000)={0x1}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000280)="0f781bb9800000c00f3235010000000f30f3470f090f01cb440fa3d60f01d4b98b0300000f3266b87b000f00d8660f388206f266d092bc190000", 0x3a}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) fcntl$lock(r8, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r8, 0x26, &(0x7f0000000080)) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000080)={0x8000000, 0x3fffffe}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x2}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000000100)={0x5}) ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f0000000200)={0x0, 0x7, 0xc, '\x00', &(0x7f00000001c0)=0xf}) 2.138835898s ago: executing program 2 (id=1464): r0 = socket$kcm(0x10, 0x2, 0x10) syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="540100001800010000000000000000001d010000150003000000000000000000dd5f392602cc30570500000008000500f70800001e0106"], 0x154}}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x400, 0x4f424752, 0x1, 0x8, 0x6, 0xb, 0xa, 0x0, 0x8, 0x0, 0x7}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000380)=@gcm_128={{0x304}, "0ca474864549ddec", '\x00', "6563aff3", "5ba3b7deb8fd11a3"}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) sendfile(r5, r6, 0x0, 0x8000002b) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x3}]}}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b03d25a806c8c6394f90324fc60100000000a020200053582c137153e3704000180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 1.870068334s ago: executing program 2 (id=1467): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYRES8], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES32=r0], 0x14}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB="a734e09052103168f52ec83cce015e44536d4cf1b30c2d08d6989cdf21991cd251624c8631f566e2ffeea9954f239f012c255103cc6475ba8d8e078100a671882f"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5, 0x0, 0xfffffffffffffffd}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="6400000010003704000000000000040000000000649be831d8b8886c989f50301b4bd969b0981993afde207cced89ecd93260d4f3cb4ad48b8c74e494f8f6e40000000007367f680d0c0304d0bf057", @ANYRES32=0x0, @ANYBLOB="0000000000220000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000000214000700fc02000000000000000000000000000004001200"], 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0xfffd, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x51}, 0x9c) accept(r7, &(0x7f0000000380)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000000400)=0x80) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.659584725s ago: executing program 5 (id=1471): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0xa50, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000200)={0x7}, 0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x4, 0x1, 0x4, 0x0, 0x800000, {}, {0x0, 0x0, 0x0, 0x0, 0xfc, 0xff, "e6dd3c3d"}, 0x0, 0x1, {0x0}}) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000800000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000002244000034000300766574e1d53a7a6972745f776966690008001500fe"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) close(r0) 1.559951824s ago: executing program 5 (id=1472): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'geneve1\x00', 0x0}) r2 = signalfd4(r0, &(0x7f0000000140)={[0x72]}, 0x8, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000400)={0x8, 0x3, 0x48, 0x68, &(0x7f0000000180)=""/104, 0x62, &(0x7f0000000300)=""/98, 0x21, &(0x7f00000003c0)=""/33}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) readv(r0, &(0x7f00000018c0)=[{&(0x7f0000001500)=""/84, 0x54}], 0x1) sendto$inet6(r0, &(0x7f0000000280)="0503092c8f0b480301020d00c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18f01c3081f3a358460000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x300000d, 0x12, r4, 0xa7681000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0xb, 0x8}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r5, &(0x7f00000000c0), &(0x7f0000000100)=0x10) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'geneve1\x00'}) (async) signalfd4(r0, &(0x7f0000000140)={[0x72]}, 0x8, 0x0) (async) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000400)={0x8, 0x3, 0x48, 0x68, &(0x7f0000000180)=""/104, 0x62, &(0x7f0000000300)=""/98, 0x21, &(0x7f00000003c0)=""/33}) (async) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) readv(r0, &(0x7f00000018c0)=[{&(0x7f0000001500)=""/84, 0x54}], 0x1) (async) sendto$inet6(r0, &(0x7f0000000280)="0503092c8f0b480301020d00c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18f01c3081f3a358460000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x300000d, 0x12, r4, 0xa7681000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0xb, 0x8}, 0x10) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) getpeername$tipc(r5, &(0x7f00000000c0), &(0x7f0000000100)=0x10) (async) 1.47990438s ago: executing program 5 (id=1473): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r1, 0x8004af79, &(0x7f00000000c0)) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x4000, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0xffff, 0xffff, 0x4c, 0x0, @opaque="f5cc541ed0400aa3d092be33908183cfca001caf024205745c54126b93843a010000008e5cbc61fc63898d4baf9bfeb4656673e31d38b96febf75cb5de471f8dd04df9d5"}}}}}, 0x0) ioctl$TCFLSH(r0, 0x4b63, 0x3) 1.479309582s ago: executing program 5 (id=1474): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0xb, 0x0, 0x0, {0x6}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec0400339b8fd15e58a83b3da942"], 0xb0) r4 = memfd_create(&(0x7f00000004c0)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6:|R\x04\xc2\xb8I\xa3\xb9\xe2\xa2\xebw^I\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\xc3\x96\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\xcf\xb7\"S\a\x04ry\x00#4\x87m\xf7\xe3\xf5\xa7\xda\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x14\xbev\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb9\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8ez\x1eo\x18\xb6#@P&[\xad\xda\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\xf3\xde\x96\x85\xc5\xdd\xa8\x92\xc7\xcb\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\xae\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6kYH+\xa5\xdcxUY30x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="7572616e733d661f302287646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',privport,access=', @ANYRESDEC=r8]) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x18) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_off}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) bind$alg(r0, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r9, &(0x7f0000000040)=""/148, 0xffffff96) 1.399419302s ago: executing program 5 (id=1475): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, &(0x7f0000000000)={[{@uid, 0x41}]}) (async) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x14202, 0x101) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0x4018aee3, &(0x7f0000000040)=ANY=[]) (async) renameat2(r0, &(0x7f0000000100)='./file0/../file0/../file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='map_files\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) 1.398800333s ago: executing program 7 (id=1476): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040)=0x6, 0x4) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000900)={0x10, 0x2e, 0x0, 0x0, 0x200000}, 0x10}], 0x1}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f015, 0x4000008}) (rerun: 64) llistxattr(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000140)=""/98, 0x62) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0xb, 0x5, 0xd, 0x8, 0x6, 0x3, 0x1}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050028"], 0x7c}}, 0x0) 1.39082902s ago: executing program 5 (id=1477): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4001, 0x8, @empty, 0xd}, 0x1c) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000040)) ioctl$DVD_AUTH(r3, 0x5390, &(0x7f0000000600)=@hrpcs={0xb, 0x35}) recvmmsg(r2, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000001600)="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", 0x1000, 0x55, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x400004) splice(r1, 0x0, r4, 0x0, 0x7, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac1(0x3, 0xd4, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x3, 0x40, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x8}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x101, 0x3, 0x3, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1, 0x1ff, 0x3, '*'}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4c4e, 0x7, 0xf, "57e81ce950"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x1, 0x5, 0x5f, "", "98"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x2, 0xd, {0x7, 0x25, 0x1, 0x1, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x10, 0x2, 0x1}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x4, 0x4, 0x8, 0x0, "70a7689b"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x9, 0x861def6644869159}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xdb, 0x3, 0x5, 0xf, "f0596e853db7e21de8"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x1, 0x1002}, @as_header={0x7, 0x24, 0x1, 0xbb, 0x6, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0xc, 0x0, {0x7, 0x25, 0x1, 0x1, 0xa, 0x7ff}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x5, 0x0, 0xf6, 0x8, 0x1}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x3, [{0x12, &(0x7f00000001c0)=@string={0x12, 0x3, "48115fd34abca5d46133c3a6843d925a"}}, {0xbe, &(0x7f0000000240)=@string={0xbe, 0x3, "34ff714fd135e9679d9d544cad757ffedd10bb1d9005abe341331e081543d517da20ec32b53c599f95097e4850238f137fdc0c827fedb70a43fe2443e1dfa823c77a2e6e4a31afa67c02482e0b5f2034a0d68641bba32c7e8e6c9bf3d3652f5b0c4f78b9173c3e23ebad4cc429a0c104b889d4950d771e8cc8a28fadce2465853a99c995d0bc69ae75c6105207075709b12ab43da38ffabb115f6e13aee71e3bde21032480a44b178e50ff9708929ed400025d97fb095e5fbb35708b"}}, {0x1e, &(0x7f0000000500)=@string={0x1e, 0x3, "0d5438636a8709a9d99ad2ba298da140ea85fe38ccbd709ee567f3a2"}}]}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETIFINDEX(r8, 0x400454da, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0xa0003b40, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r7}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0) write$char_usb(r0, &(0x7f0000000140)="aea5", 0x2) 1.319099911s ago: executing program 7 (id=1478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x212}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5, 0xa, 0x1}]}}}]}, 0x44}}, 0x0) (async) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0xffffffffffffffff}) (async) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x2, 0x80000001}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x9}]}, 0x30}}, 0x0) syz_clone(0x40000, &(0x7f0000000380)="d98fb907779890670630fde730ef457dc14fd8849ae478864c730397603250fc8c67cbc1f173322eb24dedfed14155a844a7", 0x32, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f00000004c0)="7d135995be68cf0956031e202ad97fa9e42642875295f1d636db25946333b2c9fe5d970ac85c9d9e46fe793f2fbe1f2224ad22cbfe18bbd0ed450864e8422e25dc6e112e4d89c3bfe5b29241198c6eb4e42bed4ef5463f587a355fbde8e5ff55a7433e3948742e6be6575b2d428c42c9448000dfad02cb7ce9c2bebd604738fae15f13da98ae2d77aeefb8660f9b781badbba1e93598a7eb7a9661b5e22e92ec5879ef") (async) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback, @initdev}, &(0x7f0000000200)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6tnl0\x00', r8, 0x2f, 0x3, 0x9, 0x7, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x1, 0x4f3}}) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000040)={0x70002000}) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0) 1.237515617s ago: executing program 7 (id=1479): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x4000000) (async) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x6}}}, 0x24}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x849d, 0x401, 0xfffffffa}}]}}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000017c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xfff3}}]}}]}, 0x40}}, 0x4004415) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000100)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r10, 0x0, 0x0, 0x2, 0x3, {0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)="d4eed3573e4e5160710d22f3c4e4fa735fb875b47e7c958d6307", 0x1a}, {&(0x7f0000000380)="33959e047c8e4d8f17e12abe07e67255b16f44424d3f7edff658670212e2102aa061ee21aea3d38ed7b1172bae268b6a059318c0c82e678e2552659db68b635caa38f23d83c9f9a1a8dfa1fec4afec00711a6f12e2d6956940684389c0afe633f5acb367e3a8006b479528d7728438121d2e48dc991912a8e30610b29706ee8bd1402a63378bc8c83d5c938990a9dd9f9cd9965635ebc4c8f7fa47fc7014192b4acc94612e5abb715a1bf152650e300264494f5404d9d2976a3eaffbc75b08020ec3d517a48e367dd9b144f8e705e7f93b0d966f78c3812d3219bb178d953c8d9d30b08e0a23a2934f690ce75554775329", 0xf1}, {&(0x7f0000000580)="62c1fc4f5558af5f312c5ddb0eb6ccb17b2881cbd5453a9eade23806fcc02003d6a63d3e1ee65519396bd499465300424a34cb9335afce2f63d468e76f11504df2ba93e64527fab2ad3dd0e433deaa684056dce000139acb574a663839eeb72529a4c300a322eb0b3a5af43b4cf88ae7a324b49eff234181cec8c018b8f84dc5b1d48c87545d73a719009d644b1ebbec553bbf336b7aef2423a73943567c9f0119f5e05b8ad5748434016f742c1b288bf65d9aac351f71e1b58f37b571a86e66e22e6d9c8eac38f8907a47f7471bfcdf8edd", 0xd2}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000002800)="e097ebfb8d78efa63e0d8f389d69d718519bd642cec99b048905225e55476f1b3ea93a1f55faec80813f615ff5ba5df6eda33b7e93c5a0ada6b4b48ac4b7f80f2034e1d3a6676c0bc803fbb20de7b0e8e4ce7a577f057ad73eafb1db5ac9df1d65827bd7d20ed139571fec23a894df65dde7b1f861b66620680c76bd8668d46f7e6d85eb21c2138a9a95a9bf653b322eb0c6151ced99118a06302655d54ac844d0a830cbb728db3553d685a90e9bcea77867370bcbc64975a2f1bb2044f6ba8e81921f07ac48550cdcd5812f0f9895f438442c5609239a006bb7932c9510f125f0aac5a3ec3931c8651ddc98817a388540868f5a7176d2247337e15ed156c9c84ca7b6743bef5f815d8257fd2fa5617674b26d38e1c13bb3bf0cf928101d3e85275f85f3694c0b54755ea639829d32c99e31422b32711b89e0e07319ad093af2297bf79d001e888ec5aeb1e11208c77753348d477fa5d5df88bcf00e3e29e3d070887f2515af1672f9c0f2a548ce6e566ce3f7b545acca4fe9c42a940c9a7c2fbccd0f9f4deb8162f3545164697343bc9ae4ab0c76bb33afbf839e623710de580d14428fa0f5fed6970b5ef298d0fdd51fb6f8f491890836f22ed51c32d416035c132d4b2a6c52194804a43a2e07b79fe42104fa1f93c9ca372f6185435da136d9374e2ed0c78f0f037ac2b25b71c06d1f445c6922dc743df4114e5c7c9e1a38bf3cde2b5e6caf80bd7bc6bede9f99b162fa1993204db99a059746b275bfb55de25c06981645412c0a67a09fbf53961509149f2899ce94399ad15eb0f77a1e2ae96aba86a4d6d41d2d7113548bb14c48c556caf601bd0a34b8541ec95a41f4a80e3e2f1abf6f4c13ec17f58e771542356b47cb4deeb0b39f781c1f47edb8e9ad00a6024caf312d4c8f4b24204f69906ad2f84ba264ed982716a7df151c628364f07cb75174e2c6fcb2ba36ab49e8f8c326876cc2941bcd3d8649e7b8bc77ee62579a8eca0263c26056df517eb1113af4eb0d0b8f01908dbb25bfc22aa20377360d6a0d26bd331e645fe0efc6c1768c52fcee533cc8e251954029d097fc24b5901550101392fe12c71479bb5cf74b4692a0f648aaf1a8e25172799b0bb5982e1a438202c6dc755a956f86c7564b0ab3eda10fb210bcb146ade39e9335afb17987c0cfb78b61cb96fa577669e02a2f005fb079c42bfd76fb48540ecfe4ab547a99ef7bcb06e5603f68b70f514e6fbcb7685a7c7711dcfb230b20e63f06abb69b6a94f13a3599fa0529fe1e55a1e51f8187de42d234becabb0e2c0364d129895cbae6c9954cc1ec7c5dd6c889f21de3d9d6987dc337f74ac24eb9a3c874d52db9694ca5ad8171ab8ec6fe78ef2f862acd5b464e4fd377cdb2ac2581745e192e40f6c1fbac597a82f3801076242b9ee6c0111ab97783e1f0e2dde8fe4227d69fce99673f7df432c7b9e9a19e1b6868f9f9d5470d45a19d9a3405f5e996ed300d4fa3a6ce41731644c22b5616b3ca126c38133c487c2159a64091c4d10c0bb3ed418c25f03e83d74bc14927a550eea66f1f98cc1d38da68d5088b0ca5d3e67f4568bf9c8fa52398acf7b8c31bccad834406dd94090feb539efb45fffdc2c70e24199ac561158d571d272d73c085ff5941cca57e341ad4032e339ffa5ccf4c1c03496bf298c9760b93e8e8803f58f08376d12110b1bf960acb2134b2f491e433128be715c89883a7435eae66ae31408a176325b017f39b31254b06e31dc0dce770d8cd01499bff04a51941f749a1c3c7a99813ee0d9e104613aa0a27ef8b408d214ab08ed20bec66a7ec95981ea98c0fcf63f521d301120fff0440328856d7df575c516fd5d747045ffa8be4476847fe6b013ab1b25d4204a3ffe7ea184156cd89a3467d496e3954780aa071b497cd813f3f3e7b782c066628e10172f83d4d125c0034e9dc30cad87b9d1c05c701ca32c5d808b5e53a97cc7afe6a315e268246b25f4a5f96cfeb60ad336bccc6530dd2c212bba97871d13f9dcb0acb06f534b1d2c98c7436c07b9f9a298b16643cfa7c1c63fae5b6c4c6ed06db3df74f230345fe0fc19ddbb7a5f74933d844044300a0eb7ae6648cda747eca4f7e95a6b4ddf62682f817eb4c8d95364f492539bfa5fb69f8b610d47e5ac9c0b345445c1aca4d23647fdc845a5ffdc37180d2b1e1a92367f8e32e5209023628f6a53961937fbac939af9bce5473be9dc602b922b8dd02acb2a39fbfa84f15b70c1f0c59a581753f61c3365e0bd8c5f7240f5e0f44e03c8d9bbd00f5cc4f2a3756f29eb3db6e6d4fd9a67df96d5ecd201182a08e60a6470c3247422e7ece650d8093069bb532d882697ed7f65851db8ea55581e52838ef7fc59c92dbb82991a13ef83cd8d107fa134e37abe8fb481d01e6f3b01cf59ca4d06b95a9ac112951a8253530e94bbb40e4dcff8a8ad95d73e5bf9f58c3fda7484cdba4cbacc60a43f28e33d606cb5125b9853f47791a3192a5f8c23e1aa50e1fc2cb002d31c04fbcc9d64aa6f486dba945d5ea4fd94a8aedb1a833859c4d9e401e4574309c1a642a1ef72375649515bcae4f0dabc6d5b04695d75c546ba11d971eeee9c68e6a869909a4a92079fea04dda7ab4ec3bbeadf42ef80368ad1c6d2b0e5250d0d46f52eb70014cffea4fd202863e298f0be133f716cdef114840ea3ed045fa7a7f0b7c5dd260440bf76640fda45da11d1a76822e5f9965da6ee3b39ddabc1a3134395cf5da76906ec33bf6c292c643e600150da29c41afacd3a653473a51cab0d7ee6270fe0359ebed6a08f9a5055572da77eaa4efc42afd32b47e8118ed92e5c422a6d7714ff0fe7e464459a8963a3a9b9827b8775e5afa2a149d1437752fb7b94b5ace5db0c4c9344f57e0e84f3f37eead60eae554ecaee2ef02f80d40baa014a03891c9ee9f83a9a0939c4fe0e250e84111ae5ef73c27b96535013694b39a863b537b96136c0208489843191605d5121c00bde853cae2df1ffa0a45918a886b95886da8743d60837869918f8e2fd42b336c155df1d3fde0947239fa696d7b990e185beebc0750a4c7fab47780e0c8cff3c91a24d51a66c4d468ecaf47fd60c5698b393a7fa5be80f058f3ff9ef2783c0cff5319e9d49fb2a377845d4fc638b3503f45f98fdf63884213a320e1cfc31d36bc828281a3e84b94b1142bed4783f0a8dcf82482cbc6b2658d00ea97c4883d16fd347dc7d1d527b735c41e442816f2c52ac9f7709b33cc310eb0636f2017b301685bb55061e0bed0f4274c7df9ec4917ff080f1b85d6fa9e2fe7d50dca457a71141d506847638050e8df77f4ac8f17f385043d92ce43f20b8aef8776dc2db4b7cdf973585187a816675b0e1a43379562d8c99432f9bf69bbc940df30e164d3f5833a16dcfadaad21b888d603bfccef8f5e8b0d80663892f6502188081534504a54ae334b1072f2c15e18a261466f33568dd3bfcdf59464652243676334381f735dba323ee853dbee1b6745506ec6e78ef86f5565e9bfef84a5fec286dfd11ae6485612e8a028a37380e4e81b5b4fcf9a948ee3c68d9a4e8b915672cd0a61fa72d73c91895c39a9660368bd04c8f9c29a0bd7aa0e3594101d79c78a612b292c0067c60aa71d6fd91f7949022d1ff8061672675f0f3b4e4bc6c9992ca1efd36333bceecd3a19b78b782048d567f28f672049866d4067c5a9c5a99175b22e47273eabfd63988cf857901fc264b62e95780f862aaa372285d6fff750ab4e5131e4f54cbe1e81e1dcae6bb4d6809ad0f5050b864c28b65fa37a40be0869b953a70e013ebc8249a81f9dc8f787b63ba39b6fa4c5eac19f4e19ba8b05782fa836598b3313752689b0d5b45f6f68d4f1ec9fcea7e0052e709e6bcb457faaf5752599fa53a455602963c95361bda0682f0178df33423612193944f09e27f764c9e42b4399b4b864fe2c516fb778419d6f2dd0ca85ac11bb3748dd2a01590206b07d0506c1ee25c17faee73788a1d6165199de7a6c456055ea0aa5b1ecc29a2ad2f13c2ec399f4e902f787e3fddbf5877425e07c402ce0709800cb1d18790ae09af02fa56555c74d3e168e7ddf89c7d69ec9210d5108a26efecb582a6641823185cee297e16a3c7b0b18e056ca2744cda43a9b49e3fe5cd9a457dc7add5389e34adf4b671929d6b57019e0f3632035fc16486a9a94057b4e508d9a2b27b77efe926857533d9e38431326f63022e6149273dfccbc64fda7a81f481a907d9f4f98b556bf9452e1f7e1284a4c8d84cd56adb441142958dfb1d6c761f6c0a38345a97e6352c234e17582238b2b064eb7c958ab381781d06c7386599291b691fadfa5d1a84c43283fdf4fa48b23cb45699f5274776494fe30438baa3e9d6cdd87645df622b4c4c3c25749f612ae1831d1abb58522c1d7c3527dbb769d461374534dc291d51f52537dbd6acdd2a9322080360fa893b2cab13cffd682d326acf6a6132901c7f521741812498c6da578a3af43b0507dd5f90949c94bb65a63a7206454e5bd789ecf05d2cb96f25ce2549b2528f0d5da476cb09f97171d36c3a59cf495e82b5e70a946916814db49e42b4ae91c352d27e167d96848706599fdf627729162e4a5c4c209221c2889fbf685445320e968ab5bcb1a9e0aad41cbc48d4b8c3710015c4f15681462fb7ee7febeb82b39814c19d3f7881fa314d03c46b60cc7e6728f04c44a954693fd372e46f125f9ced1917177f4242d6e4fee0f57684bf05e15770e71b83854916cee7491ff297eef935f6e02e706fad571823b034d4029357499b0655a8b7cb67be7c70cfd8bb5f0bdf062a0a5ff6539f5b2aafcab8c2286e68cae9974b8d6fe7e846a0baf4ecdbd64c2df426166d56dfd54321e923b3ed916a18dac9992fe32cc433d3d618215ebc80b9df5dffbe6426497be79facea505c2e10580acc178ecd62dabb3a22f64ca33b14c6bc1b1e90067e034734b6ccd1aa1040fbec3d216e3548946f0c71e6b40369c7feea8c166fbc0806576d4d9ce376bc9b41274f5f1547ac621bf28ad81894d596cf6e41be463b289191226763729cbeaa46d1095c162b73bc66c699d205959515cc128483deeb24551bec391749184275105c9d51b0f97993b9ddb36a19d13578c38c997ea2a58cde43535826f276df7b13137c97c7cf9fdad4251040982e0adb03236c7ff020f0d797e9df76b5bc2653da5c8e5deb5dd80d57642142b75fb5df14298a5fb61a9bd22d6e936b22ab38777a40524be1e6410024a4f63e6f35f3862646feb0fb9a8698950b1b4d0d87d9e2af0495cb9510f3641f0997b04b5ae5693cf31e9c14e6fa95457aa49438dccfba66de0d9c4328cd485ac17fbb07d6b1ed908c80c9c6199aeeded102c7351feae3b4ef47a8cfdee1c63ba12fa02bf0d451020c3148c0871b08ac75b1c4369b4acc9163d7584f83ffc6d445c0f926c56f3cc0b4778de31c85038bd94db2e833dfe151fcb4a646678ae3cd70317b15efa30831d2067dfc850635ec9e8686db29f6fa7a2a0def9e6a93fcca3ed60bbf17487caa9b9566c914c3544644e19eb7b12e571fbc77c5afc3a3e536aa496c63dec34dc31caf5542da4edd73dc1327341ed09cea97bec3668501e4f220067264689218a5eabfffa2fa19f13508a79995b8c109ebdf0eca28aa1707586dc67a58dc8df3ed0efae95af03ba33ed7cbb01ea425def088708e840d3d9b403a57706a750ab3d08d4b547c187bef217e855d4c61ef9cb739bc63f68a5d7eb4e7026173c5c9ca31a4adabcf094ac955e88b800c5a012c5", 0x1000}, {&(0x7f00000000c0)="0062351d632df6c0e7761b01178bc82676ebd87370b9b02a2a347066b28fdd5d5b32ba0e4000db001b641fbdedbee0314624e6de2511b1d14e1c27", 0x3b}], 0x6}}], 0x1, 0x800) (async) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 978.968175ms ago: executing program 2 (id=1480): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) 976.391192ms ago: executing program 2 (id=1481): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) dup2(r0, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'macvtap0\x00', &(0x7f00000006c0)=@ethtool_drvinfo={0x3, "697f1d5474cfe436689ae7ec0e3ab15f102f43cbff1fae0c9800001700", "137d54cb3d01000800ffffffffb553c4d551b60899207e5a4e9f4fa75e981f4f", "ff5752d26eb63c9ad4193004008f4c5da3fc84900bad4c0cb1343bd894acdc97", "bf8e534384366a8a53a25be08c60417cf3669db5542db25c82a177d06b09ae3d", "1a98aa146dcf2e700a20fd88a2d80bac21307475a642d71f689faeb797096d41", "e17d88d6b1f540f95f2d3f93"}}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015002800000008001240000a00000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) r4 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x0) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f00000000c0)={0x8, "1f938a7b853b3a9b0b000000000000000089000000000200", 0xffffffffffffffff}) r10 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000340)={0x1ff, "1f138a91b80f3795181800c70511603d79e1ef0700000000000000f124708900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000140)={"50edd24983fde74e78682dbc67d293c19050af5f39c0ce29436807917da2c17e", r11, 0xffffffffffffffff}) close_range(r8, r10, 0x0) ppoll(&(0x7f00000001c0)=[{r12}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, 0x0, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000080), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r13 = socket$kcm(0x10, 0x2, 0x0) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @local}]}, 0x24}}, 0x2000c044) setresuid(0x0, r5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="940000001a000100000000000000000081008000000000000000000014000200fc01000000000000000000000000000114000100000000000000000000000000000000001400010020010000000000000000000000000001140002000000000000000000000000001700000014000100fc010000000000000000000000000000140001"], 0x94}}, 0x0) 870.049568ms ago: executing program 2 (id=1482): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x101) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) accept4(r2, 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r4, 0x0) r5 = socket$kcm(0x10, 0x100000000002, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x50, r3, 0xda4e3000) r7 = socket(0x11, 0x3, 0x0) setsockopt$packet_fanout(r7, 0x107, 0x14, &(0x7f0000000100)={0x2}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="48000000100001047fff0000f700008100000000", @ANYBLOB="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", @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r8], 0x48}}, 0x20000000) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 388.251666ms ago: executing program 6 (id=1489): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c000104002300000000000002000000", @ANYRES32=r3, @ANYBLOB="800000000a000100543dc80677c2000008000f0001"], 0x30}}, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x1, @multicast}, 0x1a, {0x2, 0x4e23, @rand_addr=0x64010100}, 'ip6gre0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="2000000000000000280012800b00010065727370616e000018000280040012000600020000000000080004"], 0x48}}, 0x0) add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 387.990794ms ago: executing program 7 (id=1490): r0 = socket(0xa, 0x1, 0x100) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES64=0x0], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40080c0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0xfeff, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x10, 0x96}) write(0xffffffffffffffff, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f08", 0x15) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=@newtaction={0x6c, 0x30, 0x1, 0x3, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x2, 0x20000000, 0xfffffff3, 0x5}, 0xb}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x6c}}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000100000000000000000002"], 0x114}], 0x1}, 0x0) 329.922864ms ago: executing program 6 (id=1491): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f7cf55720fac000000000000", @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x20080014) syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x4000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f7cf55720fac000000000000", @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x20080014) (async) syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x4000) (async) 327.416091ms ago: executing program 6 (id=1492): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb, 0x0, 0x0, 0x9800}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setuid(r2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007fd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'sit0\x00', @ifru_settings={0x4, 0x0, @te1=0x0}}) ioctl$sock_netdev_private(r3, 0x89f2, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) 248.959971ms ago: executing program 6 (id=1493): r0 = syz_open_dev$vim2m(&(0x7f0000001340), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000054c0)={0x1a, 0x1, 0x1, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800", 0x32314d54}) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_tables_names\x00') preadv(r1, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f00000000c0)=0x7, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000003c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "66864e02"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800003a"]) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000001c0)=@multiplanar_mmap={0x5, 0x1, 0x4, 0x70000, 0x8000, {0x77359400}, {0x3, 0x2, 0xec, 0xb9, 0x9, 0x4d, "c2ab9c4a"}, 0x9, 0x1, {&(0x7f0000000140)=[{0x3, 0xfffffff5, {0x401}, 0x7fffffff}, {0xfb, 0x7fff, {0x1}}]}, 0xd2, 0x0, r4}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010425bd70000000000000000000", @ANYRES32=0x0, @ANYRESHEX=r9], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 139.254ms ago: executing program 6 (id=1494): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x111, 0x4b4, 0x120, 0xd4feffff, 0x258, 0x20a, 0x278, 0x258, 0x278, 0x3, 0x0, {[{{@ipv6={@private0, @empty, [], [], 'syz_tun\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @local, [], [], 'netdevsim0\x00', 'veth1_to_bridge\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) 135.599882ms ago: executing program 6 (id=1495): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="4404010109f701"], 0x7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast1}}) 0s ago: executing program 2 (id=1496): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_create_ruleset(0xffffffffffffffff, 0x6c, 0x0) ptrace(0x10, r2) ptrace$setopts(0x4200, r2, 0x1000, 0xe) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000180)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x8000000000000000}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000380)={0x28, 0x2, r1, r1, 0x1907da}) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r4 = gettid() r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0xb, r5, 0x0, r1}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000240)="67f30f09660fae7e0066b9c100000066b80d000000640f205b0f3066670f30f2e18d6635000001000f22c066b9800000c00f32663500800000650f023cc02d182ef30fc770180f32f30f01df", 0x4c}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_int(r9, 0x0, 0x21, 0x0, &(0x7f0000000080)) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) ioprio_set$pid(0x2, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="5e010004000015e630130e80eb2062ce15bb623a5cbb0000"], 0x18) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): t device team_slave_1 added [ 90.510538][ T8590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.512348][ T8590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.522661][ T8590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.526261][ T8590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.528202][ T8590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.534676][ T8590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.559160][ T8590] hsr_slave_0: entered promiscuous mode [ 90.561533][ T8590] hsr_slave_1: entered promiscuous mode [ 90.563322][ T8590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.566309][ T8590] Cannot create hsr debugfs directory [ 90.644165][ T8590] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.648250][ T8590] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.651304][ T8590] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.654250][ T8590] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.667532][ T8590] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.669883][ T8590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.671852][ T8590] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.673707][ T8590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.686442][ T1017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.694281][ T8590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.702041][ T7982] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.704903][ T7982] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.716852][ T8590] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.722848][ T7982] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.724674][ T7982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.729665][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.731520][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.766758][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.822340][ T8590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.914554][ T8590] veth0_vlan: entered promiscuous mode [ 90.919318][ T8590] veth1_vlan: entered promiscuous mode [ 90.929483][ T8590] veth0_macvtap: entered promiscuous mode [ 90.932240][ T8590] veth1_macvtap: entered promiscuous mode [ 90.937626][ T8590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.940363][ T8590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.942826][ T8590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.945501][ T8590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.949447][ T8590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.951960][ T8590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.954446][ T8590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.957039][ T8590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.960064][ T8590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.964154][ T8590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.967530][ T8590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.969908][ T8590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.972522][ T8590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.975069][ T8590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.977917][ T8590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.980867][ T8590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.984576][ T8590] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.987032][ T8590] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.989290][ T8590] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.991501][ T8590] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.004902][ T2310] usb 8-1: USB disconnect, device number 11 [ 91.028664][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.030812][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.040652][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.042719][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.057280][ T39] audit: type=1400 audit(1732513725.796:593): avc: denied { mounton } for pid=8590 comm="syz-executor" path="/syzkaller.F8WLQV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 91.159772][ T8635] No such timeout policy "syz0" [ 91.166486][ T39] audit: type=1400 audit(1732513725.916:594): avc: denied { getopt } for pid=8634 comm="syz.0.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 91.204233][ T39] audit: type=1400 audit(1732513725.946:595): avc: denied { ioctl } for pid=8637 comm="syz.0.714" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 91.247871][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.299326][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'. [ 91.302527][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'. [ 91.319289][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.431677][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.515704][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 91.520825][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.570323][ T39] audit: type=1400 audit(1732513726.316:596): avc: denied { create } for pid=8653 comm="syz.3.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 91.669773][ T11] bridge_slave_1: left allmulticast mode [ 91.673668][ T11] bridge_slave_1: left promiscuous mode [ 91.675357][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.679020][ T11] ªªªªª»: left allmulticast mode [ 91.680394][ T11] ªªªªª»: left promiscuous mode [ 91.681819][ T11] bridge0: port 1(ªªªªª») entered disabled state [ 91.718236][ T1017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.821324][ T39] audit: type=1400 audit(1732513726.566:597): avc: denied { read } for pid=8668 comm="syz.3.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 91.928498][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.932400][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.936071][ T11] bond0 (unregistering): Released all slaves [ 91.994810][ T11] tipc: Disabling bearer [ 92.002411][ T11] tipc: Left network mode [ 92.002674][ T39] audit: type=1400 audit(1732513726.746:598): avc: denied { setopt } for pid=8672 comm="syz.3.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 92.008310][ T8674] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 92.009665][ T39] audit: type=1400 audit(1732513726.746:599): avc: denied { read } for pid=8672 comm="syz.3.721" path="socket:[26588]" dev="sockfs" ino=26588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.012243][ T8672] delete_channel: no stack [ 92.072149][ T8683] overlayfs: statfs failed on './file0' [ 92.178387][ T8698] fuse: Unknown parameter 'rootme' [ 92.199241][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.228546][ T11] hsr_slave_0: left promiscuous mode [ 92.237323][ T11] hsr_slave_1: left promiscuous mode [ 92.240591][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.242530][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.245252][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.246877][ T8710] cgroup: subsys name conflicts with all [ 92.249176][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.270034][ T11] veth1_macvtap: left promiscuous mode [ 92.271501][ T11] veth0_macvtap: left promiscuous mode [ 92.272935][ T11] veth1_vlan: left promiscuous mode [ 92.274277][ T11] veth0_vlan: left promiscuous mode [ 92.323814][ T8716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.326220][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.329858][ T8717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.332584][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.358272][ T5958] Bluetooth: hci2: command tx timeout [ 92.468186][ T8726] netlink: 96 bytes leftover after parsing attributes in process `syz.0.730'. [ 92.763968][ T1017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.942949][ T11] team0 (unregistering): Port device team_slave_1 removed [ 93.010269][ T11] team0 (unregistering): Port device team_slave_0 removed [ 93.013038][ T8700] orangefs_mount: mount request failed with -4 [ 93.489307][ T2310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.553516][ T8777] overlayfs: conflicting lowerdir path [ 94.240846][ T8872] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 94.250385][ T8872] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 94.290781][ T8877] netlink: 'syz.2.756': attribute type 4 has an invalid length. [ 94.416256][ T8883] netlink: 16 bytes leftover after parsing attributes in process `syz.4.759'. [ 94.446380][ T5958] Bluetooth: hci2: command tx timeout [ 94.524445][ T8899] Invalid ELF header magic: != ELF [ 94.687062][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'. [ 94.895711][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 94.895722][ T39] audit: type=1400 audit(1732513729.636:609): avc: denied { connect } for pid=8907 comm="syz.3.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 95.299418][ T8928] tipc: Started in network mode [ 95.300690][ T8928] tipc: Node identity ac1414aa, cluster identity 4711 [ 95.302666][ T8928] tipc: Enabled bearer , priority 10 [ 95.307490][ T8928] evm: overlay not supported [ 95.421749][ T39] audit: type=1400 audit(1732513730.166:610): avc: denied { create } for pid=8947 comm="syz.4.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 95.580534][ T8957] (syz.0.778,8957,1):dlmfs_mkdir:420 ERROR: invalid domain name for directory. [ 95.580556][ T39] audit: type=1400 audit(1732513730.326:611): avc: denied { create } for pid=8956 comm="syz.0.778" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 95.627863][ T39] audit: type=1400 audit(1732513730.376:612): avc: denied { write } for pid=8961 comm="syz.4.779" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 95.638663][ T8960] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 95.651227][ T39] audit: type=1400 audit(1732513730.396:613): avc: denied { rmdir } for pid=8959 comm="syz.0.780" name="file2" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.881527][ T8968] netlink: 'syz.0.782': attribute type 1 has an invalid length. [ 95.900574][ T8968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.909199][ T8968] bond1: (slave gretap2): making interface the new active one [ 95.911345][ T8968] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 95.930917][ T2310] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 96.098758][ T2310] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 96.101200][ T2310] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.103193][ T2310] usb 9-1: Product: syz [ 96.104213][ T2310] usb 9-1: Manufacturer: syz [ 96.105419][ T2310] usb 9-1: SerialNumber: syz [ 96.108683][ T2310] usb 9-1: config 0 descriptor?? [ 96.306016][ T2310] tipc: Node number set to 2886997162 [ 96.312750][ T1017] usb 9-1: USB disconnect, device number 2 [ 96.330081][ T8980] binder: 8979:8980 ioctl c00c620f 20000000 returned -22 [ 96.454962][ T39] audit: type=1400 audit(1732513731.196:614): avc: denied { unlink } for pid=8996 comm="syz.2.789" name="file1" dev="9p" ino=35922728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.465040][ T39] audit: type=1400 audit(1732513731.206:615): avc: denied { create } for pid=8996 comm="syz.2.789" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 96.526315][ T5958] Bluetooth: hci2: command tx timeout [ 96.794630][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.793'. [ 96.797904][ T9017] Bluetooth: MGMT ver 1.23 [ 96.822532][ T39] audit: type=1400 audit(1732513731.566:616): avc: denied { write } for pid=9018 comm="syz.0.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.822775][ T9019] atomic_op ffff8880350d3998 conn xmit_atomic 0000000000000000 [ 96.886815][ T39] audit: type=1400 audit(1732513731.636:617): avc: denied { watch_reads } for pid=9023 comm="syz.2.796" path="/211" dev="tmpfs" ino=1171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 96.932558][ T9019] 9p: Unknown Cache mode or invalid value fscacheP [ 97.142517][ T39] audit: type=1400 audit(1732513731.886:618): avc: denied { connect } for pid=9056 comm="syz.2.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.196595][ T1111] sr 2:0:0:0: [sr0] tag#26 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 97.199080][ T1111] sr 2:0:0:0: [sr0] tag#26 Sense Key : Illegal Request [current] [ 97.201428][ T1111] sr 2:0:0:0: [sr0] tag#26 Add. Sense: Invalid command operation code [ 97.203515][ T1111] sr 2:0:0:0: [sr0] tag#26 CDB: Write(10) 2a 00 00 00 00 00 00 00 04 00 [ 97.205681][ T1111] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 0 [ 97.209662][ T1111] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 97.216051][ T1111] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 97.437938][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.811'. [ 97.441273][ T9078] IPVS: Error joining to the multicast group [ 97.466238][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.812'. [ 97.569577][ T9088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9088 comm=syz.2.814 [ 97.573190][ T9088] netlink: 'syz.2.814': attribute type 1 has an invalid length. [ 97.582401][ T9088] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.593452][ T9088] bond1: (slave bridge2): making interface the new active one [ 97.595678][ T9088] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 97.603755][ T9088] bridge2: entered promiscuous mode [ 97.605358][ T9088] macsec2: entered promiscuous mode [ 97.606893][ T9088] bond1: entered promiscuous mode [ 97.608275][ T9088] macsec2: entered allmulticast mode [ 97.609573][ T9088] bond1: entered allmulticast mode [ 97.610803][ T9088] bridge2: entered allmulticast mode [ 97.818446][ T9094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.816'. [ 97.825264][ T9094] 8021q: adding VLAN 0 to HW filter on device team1 [ 97.936129][ T9102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.818'. [ 97.941331][ T9102] netlink: 40 bytes leftover after parsing attributes in process `syz.0.818'. [ 98.080060][ T9104] blktrace: Concurrent blktraces are not allowed on nullb0 [ 98.134567][ T9109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.821'. [ 98.192115][ T9111] mkiss: ax0: crc mode is auto. [ 98.322285][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.823'. [ 98.324549][ T9115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.823'. [ 98.368071][ T9117] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 98.626138][ T5958] Bluetooth: hci2: command tx timeout [ 98.746108][ T2310] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 98.787210][ T9155] netlink: 'syz.2.836': attribute type 32 has an invalid length. [ 98.789199][ T9155] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 98.946001][ T2310] usb 9-1: Using ep0 maxpacket: 8 [ 98.949765][ T2310] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.952214][ T2310] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.954636][ T2310] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.957132][ T2310] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.960363][ T2310] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 98.962568][ T2310] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.036075][ T8] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 99.169930][ T2310] usb 9-1: GET_CAPABILITIES returned 0 [ 99.171400][ T2310] usbtmc 9-1:16.0: can't read capabilities [ 99.216022][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 99.219461][ T8] usb 7-1: config 0 has an invalid interface descriptor of length 8, skipping [ 99.221720][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.224262][ T8] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 99.226786][ T8] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 99.229005][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.232094][ T8] usb 7-1: config 0 descriptor?? [ 99.379088][ T2310] usb 9-1: USB disconnect, device number 3 [ 99.439751][ T1017] usb 7-1: USB disconnect, device number 7 [ 99.641700][ T9179] netlink: 'syz.3.842': attribute type 10 has an invalid length. [ 99.649473][ T9179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.651924][ T9179] team0: Port device batadv0 added [ 100.011756][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 100.011771][ T39] audit: type=1400 audit(1732513734.756:624): avc: denied { ioctl } for pid=9182 comm="syz.4.843" path="socket:[30579]" dev="sockfs" ino=30579 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 100.085228][ T39] audit: type=1400 audit(1732513734.826:625): avc: denied { read } for pid=9190 comm="syz.0.845" laddr=172.20.20.170 lport=45672 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 100.143022][ T9192] batman_adv: batadv0: Adding interface: erspan1 [ 100.144735][ T9192] batman_adv: batadv0: Not using interface erspan1 (retrying later): interface not active [ 100.151401][ T9196] netlink: 'syz.4.846': attribute type 10 has an invalid length. [ 100.158844][ T9196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.161652][ T9196] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 100.162090][ T9187] __nla_validate_parse: 1 callbacks suppressed [ 100.162099][ T9187] netlink: 40 bytes leftover after parsing attributes in process `syz.2.844'. [ 100.181902][ T9199] binder: 9198:9199 unknown command 0 [ 100.183309][ T9199] binder: 9198:9199 ioctl c0306201 20000340 returned -22 [ 100.261578][ T9203] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.350213][ T9203] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.384551][ T39] audit: type=1400 audit(1732513735.126:626): avc: denied { accept } for pid=9205 comm="syz.0.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 100.410179][ T9203] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.422779][ T9210] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 100.471272][ T9203] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.471557][ T9215] loop2: detected capacity change from 0 to 7 [ 100.481647][ T9215] Dev loop2: unable to read RDB block 7 [ 100.483849][ T9215] loop2: AHDI p1 p2 [ 100.484871][ T9215] loop2: partition table partially beyond EOD, truncated [ 100.488176][ T9215] loop2: p1 size 150995200 extends beyond EOD, truncated [ 100.587341][ T9203] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.592777][ T9203] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.598931][ T9203] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.603853][ T9203] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.643696][ C0] net_ratelimit: 3 callbacks suppressed [ 100.643707][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 100.681780][ T1157] Bluetooth: hci4: Frame reassembly failed (-84) [ 100.695262][ T9237] Bluetooth: hci4: Frame reassembly failed (-84) [ 100.786076][ T1017] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 100.909328][ T9269] netlink: 52 bytes leftover after parsing attributes in process `syz.4.865'. [ 100.922051][ T39] audit: type=1400 audit(1732513735.666:627): avc: denied { create } for pid=9266 comm="syz.2.864" name="#27" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 100.966242][ T1017] usb 5-1: Using ep0 maxpacket: 32 [ 100.968999][ T1017] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 100.970946][ T1017] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 100.976148][ T1017] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 100.982742][ T1017] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 100.987342][ T1017] usb 5-1: config 0 interface 0 has no altsetting 0 [ 100.991253][ T1017] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 100.993724][ T1017] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 100.995824][ T1017] usb 5-1: Product: syz [ 100.997017][ T1017] usb 5-1: Manufacturer: syz [ 100.998374][ T1017] usb 5-1: SerialNumber: syz [ 101.001431][ T1017] usb 5-1: config 0 descriptor?? [ 101.007471][ T1017] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 101.015514][ T1017] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 101.021404][ T39] audit: type=1400 audit(1732513735.766:628): avc: denied { read } for pid=9278 comm="syz.4.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 101.027513][ T9279] input: syz0 as /devices/virtual/input/input13 [ 101.065540][ T9283] binder: 9282:9283 ioctl c0306201 20000140 returned -14 [ 101.163392][ T9291] tipc: Started in network mode [ 101.164652][ T9291] tipc: Node identity feae570a27fd, cluster identity 4711 [ 101.167519][ T9291] tipc: Enabled bearer , priority 0 [ 101.170297][ T9291] tipc: Resetting bearer [ 101.172309][ T9291] netlink: 80 bytes leftover after parsing attributes in process `syz.2.871'. [ 101.267653][ T9288] tipc: Disabling bearer [ 101.415698][ T9305] syz.2.875: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 101.421952][ T9305] CPU: 3 UID: 0 PID: 9305 Comm: syz.2.875 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 101.425124][ T9305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.427861][ T9305] Call Trace: [ 101.428733][ T9305] [ 101.429624][ T9305] dump_stack_lvl+0x16c/0x1f0 [ 101.431209][ T9305] warn_alloc+0x24d/0x3a0 [ 101.432664][ T9305] ? __pfx_warn_alloc+0x10/0x10 [ 101.433920][ T9305] ? __get_vm_area_node+0x1b0/0x2f0 [ 101.435594][ T9305] ? __get_vm_area_node+0x1dc/0x2f0 [ 101.437328][ T9305] __vmalloc_node_range_noprof+0x1105/0x1530 [ 101.439260][ T9305] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 101.441046][ T9305] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 101.442703][ T9305] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 101.443987][ T9305] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 101.445628][ T9305] vmalloc_user_noprof+0x6b/0x90 [ 101.447292][ T9305] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 101.449024][ T9305] vb2_vmalloc_alloc+0x11e/0x3d0 [ 101.450731][ T9305] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 101.452552][ T9305] __vb2_queue_alloc+0x896/0x1230 [ 101.454275][ T9305] vb2_core_reqbufs+0xa73/0xfb0 [ 101.455904][ T9305] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 101.457525][ T9305] ? __pfx___mutex_trylock_common+0x10/0x10 [ 101.459200][ T9305] ? trace_lock_acquire+0x146/0x1e0 [ 101.460936][ T9305] ? __video_do_ioctl+0x4a2/0xf00 [ 101.462647][ T9305] ? trace_contention_end+0xea/0x140 [ 101.464406][ T9305] ? __mutex_lock+0x1cc/0xa60 [ 101.465992][ T9305] vb2_reqbufs+0x1a5/0x1f0 [ 101.467261][ T9305] ? __pfx_vb2_reqbufs+0x10/0x10 [ 101.468774][ T9305] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 101.470750][ T9305] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 101.472519][ T9305] v4l_reqbufs+0x14c/0x1e0 [ 101.473982][ T9305] __video_do_ioctl+0xaf0/0xf00 [ 101.475485][ T9305] ? __pfx___video_do_ioctl+0x10/0x10 [ 101.477089][ T9305] ? __might_fault+0xe3/0x190 [ 101.478507][ T9305] video_usercopy+0x4c6/0x1680 [ 101.479940][ T9305] ? __pfx___video_do_ioctl+0x10/0x10 [ 101.481740][ T9305] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 101.483707][ T9305] ? __pfx_video_usercopy+0x10/0x10 [ 101.485257][ T9305] v4l2_ioctl+0x1ba/0x250 [ 101.486673][ T9305] ? __pfx_v4l2_ioctl+0x10/0x10 [ 101.488207][ T9305] __x64_sys_ioctl+0x190/0x200 [ 101.489464][ T9305] do_syscall_64+0xcd/0x250 [ 101.490796][ T9305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.492413][ T9305] RIP: 0033:0x7f44a357e819 [ 101.493931][ T9305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.498782][ T9305] RSP: 002b:00007f44a43c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.500950][ T9305] RAX: ffffffffffffffda RBX: 00007f44a3735fa0 RCX: 00007f44a357e819 [ 101.502936][ T9305] RDX: 0000000020000080 RSI: 00000000c0145608 RDI: 0000000000000007 [ 101.505078][ T9305] RBP: 00007f44a35f175e R08: 0000000000000000 R09: 0000000000000000 [ 101.507675][ T9305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.509721][ T9305] R13: 0000000000000000 R14: 00007f44a3735fa0 R15: 00007ffc1b622988 [ 101.512151][ T9305] [ 101.513908][ T9305] Mem-Info: [ 101.515023][ T9305] active_anon:7199 inactive_anon:16 isolated_anon:0 [ 101.515023][ T9305] active_file:277 inactive_file:54771 isolated_file:0 [ 101.515023][ T9305] unevictable:3816 dirty:168 writeback:0 [ 101.515023][ T9305] slab_reclaimable:11876 slab_unreclaimable:73173 [ 101.515023][ T9305] mapped:24530 shmem:2490 pagetables:1175 [ 101.515023][ T9305] sec_pagetables:302 bounce:0 [ 101.515023][ T9305] kernel_misc_reclaimable:0 [ 101.515023][ T9305] free:461979 free_pcp:1396 free_cma:0 [ 101.529539][ T9305] Node 0 active_anon:28796kB inactive_anon:64kB active_file:1108kB inactive_file:218992kB unevictable:11728kB isolated(anon):0kB isolated(file):0kB mapped:98100kB dirty:648kB writeback:0kB shmem:6424kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB writeback_tmp:0kB kernel_stack:12944kB pagetables:4700kB sec_pagetables:1208kB all_unreclaimable? no [ 101.538836][ T9305] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:24kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 101.546693][ T9305] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 101.553834][ T9305] lowmem_reserve[]: 0 1212 0 0 0 [ 101.555322][ T9305] Node 0 DMA32 free:245696kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB active_anon:28796kB inactive_anon:64kB active_file:1108kB inactive_file:218992kB unevictable:11728kB writepending:648kB present:2080628kB managed:1269928kB mlocked:8192kB bounce:0kB free_pcp:3460kB local_pcp:868kB free_cma:0kB [ 101.564660][ T9305] lowmem_reserve[]: 0 0 0 0 0 [ 101.566406][ T9305] Node 1 Normal free:1586916kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:3536kB writepending:24kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:2080kB local_pcp:160kB free_cma:0kB [ 101.574498][ T9305] lowmem_reserve[]: 0 0 0 0 0 [ 101.576174][ T9305] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 101.580325][ T9305] Node 0 DMA32: 99*4kB (UE) 242*8kB (UE) 384*16kB (UME) 213*32kB (UME) 227*64kB (UME) 79*128kB (UME) 61*256kB (UM) 25*512kB (UM) 17*1024kB (UME) 16*2048kB (UM) 31*4096kB (UM) = 245500kB [ 101.585777][ T9305] Node 1 Normal: 5*4kB (UME) 34*8kB (UME) 12*16kB (UME) 182*32kB (UME) 61*64kB (UME) 26*128kB (UME) 10*256kB (UME) 6*512kB (UM) 1*1024kB (E) 3*2048kB (UM) 381*4096kB (UM) = 1586916kB [ 101.590507][ T9305] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 101.592876][ T9305] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 101.595259][ T9305] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 101.597697][ T9305] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 101.599959][ T9305] 57557 total pagecache pages [ 101.601388][ T9305] 16 pages in swap cache [ 101.602699][ T9305] Free swap = 123704kB [ 101.603784][ T9305] Total swap = 124996kB [ 101.604841][ T9305] 1048443 pages RAM [ 101.605812][ T9305] 0 pages HighMem/MovableOnly [ 101.607085][ T9305] 281640 pages reserved [ 101.608168][ T9305] 0 pages cma reserved [ 101.770298][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.771611][ T1017] usb 5-1: USB disconnect, device number 7 [ 101.771617][ C2] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 101.778493][ T9310] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 101.781083][ T1017] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 101.819473][ T9323] xt_l2tp: unknown flags: 17 [ 101.821246][ T9323] xt_l2tp: unknown flags: 17 [ 101.822622][ T9323] xt_l2tp: unknown flags: 17 [ 101.823919][ T9323] xt_l2tp: unknown flags: 17 [ 101.825220][ T9323] xt_l2tp: unknown flags: 17 [ 101.830558][ T9323] xt_l2tp: unknown flags: 17 [ 101.833693][ T9323] xt_l2tp: unknown flags: 17 [ 101.835865][ T9323] xt_l2tp: unknown flags: 17 [ 101.838215][ T9323] xt_l2tp: unknown flags: 17 [ 101.840021][ T9323] xt_l2tp: unknown flags: 17 [ 102.001778][ T39] audit: type=1400 audit(1732513736.746:629): avc: denied { mount } for pid=9334 comm="syz.2.884" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 102.007706][ T39] audit: type=1400 audit(1732513736.746:630): avc: denied { mounton } for pid=9334 comm="syz.2.884" path="/245/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 102.009364][ T9336] devtmpfs: Bad value for 'mpol' [ 102.013441][ T39] audit: type=1400 audit(1732513736.756:631): avc: denied { remount } for pid=9334 comm="syz.2.884" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 102.014870][ T9335] devtmpfs: Bad value for 'mpol' [ 102.616049][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 102.756153][ T5958] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 102.781785][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 102.781803][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 102.781818][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 102.781837][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 102.781852][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 102.791030][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 102.791047][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 102.791058][ T9] usb 5-1: Product: syz [ 102.791066][ T9] usb 5-1: Manufacturer: syz [ 102.794074][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 102.794085][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 102.797563][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 102.797583][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 102.823647][ T9354] program syz.3.890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.893512][ T9354] syz.3.890: attempt to access beyond end of device [ 102.893512][ T9354] loop3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 102.909210][ T9354] SQUASHFS error: Failed to read block 0x0: -5 [ 102.910886][ T9354] unable to read squashfs_super_block [ 103.009910][ T9346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.013892][ T9346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.068043][ T9367] input: syz0 as /devices/virtual/input/input14 [ 104.045670][ T9393] syzkaller0: entered promiscuous mode [ 104.047927][ T9393] syzkaller0: entered allmulticast mode [ 104.056311][ T3229] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 104.206162][ T3229] usb 9-1: Using ep0 maxpacket: 32 [ 104.210084][ T3229] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 104.213242][ T3229] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 104.216435][ T3229] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 104.219597][ T3229] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.222660][ T3229] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 104.226281][ T3229] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 104.230373][ T3229] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 104.233676][ T3229] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.241799][ T3229] usb 9-1: config 0 descriptor?? [ 104.451284][ T9386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.454397][ T9386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.511954][ T3229] usblp 9-1:0.0: usblp1: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 104.525520][ T3229] usb 9-1: USB disconnect, device number 4 [ 104.534284][ T3229] usblp1: removed [ 104.956086][ T3229] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 105.090712][ T3229] usb 9-1: device descriptor read/64, error -71 [ 105.326220][ T3229] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 105.359339][ T5992] usb 5-1: USB disconnect, device number 8 [ 105.395280][ T39] audit: type=1400 audit(1732513740.136:632): avc: denied { read } for pid=9399 comm="syz.0.901" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 105.456118][ T3229] usb 9-1: device descriptor read/64, error -71 [ 105.485872][ T9410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.902'. [ 105.567221][ T3229] usb usb9-port1: attempt power cycle [ 105.907593][ T3229] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 105.926477][ T3229] usb 9-1: device descriptor read/8, error -71 [ 106.186081][ T3229] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 106.206462][ T3229] usb 9-1: device descriptor read/8, error -71 [ 106.326234][ T3229] usb usb9-port1: unable to enumerate USB device [ 107.476166][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.476187][ T9401] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 108.384626][ T9401] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 108.397819][ T9401] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 108.521941][ T39] audit: type=1400 audit(1732513743.266:633): avc: denied { read } for pid=9470 comm="syz.4.908" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 108.531850][ T39] audit: type=1400 audit(1732513743.266:634): avc: denied { open } for pid=9470 comm="syz.4.908" path="/41/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 108.586686][ T9485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.590361][ T9485] bond0: (slave rose0): Enslaving as an active interface with an up link [ 108.618038][ T9482] sd 0:0:0:0: PR command failed: 1026 [ 108.619508][ T9482] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 108.621254][ T9482] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 108.623460][ T39] audit: type=1400 audit(1732513743.366:635): avc: denied { nlmsg_write } for pid=9481 comm="syz.2.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 108.861687][ T9522] vlan3: entered allmulticast mode [ 108.863660][ T9522] bridge0: port 3(vlan3) entered blocking state [ 108.865388][ T9522] bridge0: port 3(vlan3) entered disabled state [ 108.869667][ T9522] vlan3: entered promiscuous mode [ 108.871304][ T9522] bridge0: port 3(vlan3) entered blocking state [ 108.873463][ T9522] bridge0: port 3(vlan3) entered forwarding state [ 108.976382][ T7590] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 109.126048][ T7590] usb 8-1: Using ep0 maxpacket: 8 [ 109.128890][ T7590] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 109.131201][ T7590] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.133809][ T7590] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.138048][ T7590] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.140651][ T7590] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.144068][ T7590] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 109.146527][ T7590] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.356806][ T7590] usb 8-1: usb_control_msg returned -32 [ 109.358913][ T7590] usbtmc 8-1:16.0: can't read capabilities [ 109.556057][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.605769][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.921'. [ 109.723433][ T9547] usbtmc 8-1:16.0: INDICATOR_PULSE returned 0 [ 109.727717][ T9547] syz.3.915: attempt to access beyond end of device [ 109.727717][ T9547] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 109.731683][ T9550] netlink: 68 bytes leftover after parsing attributes in process `syz.4.923'. [ 109.735019][ T9550] netlink: 68 bytes leftover after parsing attributes in process `syz.4.923'. [ 109.744252][ T9547] VFS: unable to read V7 FS superblock on device loop3. [ 109.747486][ T9547] VFS: could not find a valid V7 on loop3. [ 109.795033][ T9555] xt_hashlimit: max too large, truncated to 1048576 [ 109.798780][ T9555] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 109.837204][ T9559] SELinux: policydb string does not match my string SE Linux [ 109.839295][ T9559] SELinux: failed to load policy [ 109.881287][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'. [ 109.881309][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'. [ 110.179120][ T5992] usb 8-1: USB disconnect, device number 12 [ 110.195671][ T9572] overlay: ./file0 is not a directory [ 110.604489][ T9587] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 110.720767][ T9601] fuse: Bad value for 'rootmode' [ 111.261067][ T9625] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1207) [ 111.263651][ T9625] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 111.385427][ T9631] serio: Serial port ptm0 [ 111.438595][ T39] audit: type=1400 audit(1732513746.186:636): avc: denied { setopt } for pid=9630 comm="syz.2.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 111.636147][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.718247][ T9642] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 111.721702][ T9642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.859736][ T9650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.951'. [ 111.874852][ T9650] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.006441][ T9666] netlink: 24 bytes leftover after parsing attributes in process `syz.4.955'. [ 112.028500][ T9666] IPv6: NLM_F_CREATE should be specified when creating new route [ 112.089255][ T9670] overlayfs: failed to set uuid (61/file1, err=-1); falling back to uuid=null. [ 112.092301][ T9670] overlayfs: failed to verify upper root origin [ 112.319739][ T9681] mkiss: ax0: crc mode is auto. [ 112.491640][ T9686] overlayfs: failed to set uuid (64/file1, err=-1); falling back to uuid=null. [ 112.494190][ T9686] overlayfs: failed to verify upper root origin [ 112.501193][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'. [ 112.542771][ T39] audit: type=1400 audit(1732513747.286:637): avc: denied { ioctl } for pid=9690 comm="syz.2.962" path="socket:[34682]" dev="sockfs" ino=34682 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 112.543576][ T9691] netlink: 'syz.2.962': attribute type 9 has an invalid length. [ 112.551232][ T39] audit: type=1400 audit(1732513747.286:638): avc: denied { setopt } for pid=9690 comm="syz.2.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 112.551520][ T9691] netlink: 132 bytes leftover after parsing attributes in process `syz.2.962'. [ 112.627253][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.965'. [ 112.668702][ T9708] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 112.668702][ T9708] program syz.2.966 not setting count and/or reply_len properly [ 112.675745][ T39] audit: type=1400 audit(1732513747.416:639): avc: denied { search } for pid=5669 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=34716 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 112.721553][ T39] audit: type=1400 audit(1732513747.466:640): avc: denied { bind } for pid=9713 comm="syz.4.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 112.810086][ T39] audit: type=1400 audit(1732513747.556:641): avc: denied { getopt } for pid=9725 comm="syz.4.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 112.851242][ T9714] kvm: pic: non byte read [ 113.606605][ T66] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 113.608424][ T66] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 113.610537][ T66] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 113.777326][ T39] audit: type=1400 audit(1732513748.526:642): avc: denied { mounton } for pid=9755 comm="syz.2.977" path="/274/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 113.854613][ T39] audit: type=1400 audit(1732513748.596:643): avc: denied { ioctl } for pid=9762 comm="syz.2.979" path="/dev/uhid" dev="devtmpfs" ino=1296 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 113.918530][ T9765] netlink: 184 bytes leftover after parsing attributes in process `syz.2.979'. [ 115.177633][ T9793] binder: Unknown parameter 'smackfshat' [ 115.180057][ T9796] binder: Unknown parameter 'smackfshat' [ 115.251774][ T9808] tipc: Enabled bearer , priority 10 [ 115.255300][ T39] audit: type=1400 audit(1732513749.996:644): avc: denied { map } for pid=9807 comm="syz.4.988" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 115.261665][ T39] audit: type=1400 audit(1732513749.996:645): avc: denied { execute } for pid=9807 comm="syz.4.988" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 115.270076][ T9813] netlink: 44 bytes leftover after parsing attributes in process `syz.0.987'. [ 115.307806][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.988'. [ 115.331115][ T9809] xt_hashlimit: size too large, truncated to 1048576 [ 115.339051][ T9808] vxcan1: tx address claim with dlc 1 [ 116.067882][ T9833] netlink: 104 bytes leftover after parsing attributes in process `syz.0.993'. [ 116.118657][ T9837] dccp_invalid_packet: P.Data Offset(0) too small [ 116.258213][ T9845] netlink: 220 bytes leftover after parsing attributes in process `syz.2.996'. [ 116.407966][ T9855] tipc: Enabling of bearer rejected, failed to enable media [ 116.463547][ T9856] netlink: 'syz.2.1000': attribute type 2 has an invalid length. [ 116.493920][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 116.493932][ T39] audit: type=1400 audit(1732513751.236:648): avc: denied { ioctl } for pid=9854 comm="syz.2.1000" path="socket:[33388]" dev="sockfs" ino=33388 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 116.528533][ T9855] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 116.530736][ T9855] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 116.619709][ T9861] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 116.673914][ T9862] sctp: [Deprecated]: syz.2.1002 (pid 9862) Use of int in max_burst socket option deprecated. [ 116.673914][ T9862] Use struct sctp_assoc_value instead [ 116.950337][ T39] audit: type=1326 audit(1732513751.696:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9866 comm="syz.0.1004" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb562b7e819 code=0x0 [ 117.483747][ T9880] __nla_validate_parse: 1 callbacks suppressed [ 117.483757][ T9880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1008'. [ 117.681758][ T39] audit: type=1400 audit(1732513752.426:650): avc: denied { setattr } for pid=9889 comm="syz.2.1012" name="clear_refs" dev="proc" ino=35018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 118.034122][ T39] audit: type=1400 audit(1732513752.776:651): avc: denied { connect } for pid=9918 comm="syz.2.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 118.496116][ T8] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 118.666452][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 118.669740][ T8] usb 7-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 118.672960][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.680312][ T8] usb 7-1: config 0 descriptor?? [ 118.689910][ T8] usb 7-1: invalid MIDI EP [ 118.691242][ T8] usb 7-1: snd-bcd2000: error during probing [ 118.693968][ T8] snd-bcd2000 7-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 118.697450][ T9935] openvswitch: netlink: Tunnel attr 21 out of range max 16 [ 118.713234][ T9935] nullb0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 118.715580][ T9935] nullb0: p1 start 1714368869 is beyond EOD, truncated [ 118.717493][ T9935] nullb0: p2 size 1206004561 extends beyond EOD, truncated [ 118.720388][ T9935] nullb0: p3 start 1191073469 is beyond EOD, truncated [ 118.722179][ T9935] nullb0: p4 start 2287918823 is beyond EOD, truncated [ 118.724019][ T9935] nullb0: p5 start 960600701 is beyond EOD, truncated [ 118.726584][ T9935] nullb0: p6 start 2190857000 is beyond EOD, truncated [ 118.728534][ T9935] nullb0: p7 start 536870912 is beyond EOD, truncated [ 118.730300][ T9935] nullb0: p8 start 979124583 is beyond EOD, truncated [ 118.732058][ T9935] nullb0: p9 start 1764832699 is beyond EOD, truncated [ 118.733821][ T9935] nullb0: p10 start 1181281287 is beyond EOD, truncated [ 118.735595][ T9935] nullb0: p11 start 709501399 is beyond EOD, truncated [ 118.737805][ T9935] nullb0: p12 start 1769863430 is beyond EOD, truncated [ 118.888555][ T8] usb 7-1: USB disconnect, device number 9 [ 118.925152][ T39] audit: type=1400 audit(1732513753.666:652): avc: denied { ioctl } for pid=9950 comm="syz.0.1026" path="socket:[35148]" dev="sockfs" ino=35148 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 118.931787][ T39] audit: type=1400 audit(1732513753.676:653): avc: denied { ioctl } for pid=9948 comm="syz.3.1025" path="socket:[33618]" dev="sockfs" ino=33618 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 119.020919][ T9958] netlink: 'syz.3.1028': attribute type 29 has an invalid length. [ 119.081029][ T9961] zonefs (nullb0) ERROR: Not a zoned block device [ 119.118513][ T9968] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 119.120616][ T9968] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 119.217585][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1035'. [ 119.219896][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1035'. [ 119.260175][ T39] audit: type=1400 audit(1732513754.006:654): avc: denied { setopt } for pid=9983 comm="syz.0.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.292657][ T9984] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1037'. [ 119.323873][ T9993] trusted_key: syz.0.1040 sent an empty control message without MSG_MORE. [ 119.344889][ T9990] MTD: Couldn't look up '/dev/sg0': -15 [ 119.348452][ T9990] /dev/sg0: Can't lookup blockdev [ 119.356078][ T8] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 119.398349][ T9998] uprobe: syz.0.1041:9998 failed to unregister, leaking uprobe [ 119.433461][ T39] audit: type=1400 audit(1732513754.176:655): avc: denied { rename } for pid=9999 comm="syz.4.1042" name="file0" dev="9p" ino=35922886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 119.440456][ T39] audit: type=1400 audit(1732513754.186:656): avc: denied { map } for pid=9997 comm="syz.0.1041" path="/proc/sys/net/ipv4/tcp_syncookies" dev="proc" ino=37137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 119.447221][ T39] audit: type=1400 audit(1732513754.196:657): avc: denied { execute } for pid=9997 comm="syz.0.1041" path="/proc/sys/net/ipv4/tcp_syncookies" dev="proc" ino=37137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 119.526292][ T8] usb 8-1: Using ep0 maxpacket: 8 [ 119.528890][ T8] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.531479][ T8] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.534414][ T8] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.537233][ T8] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.540546][ T8] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 119.542892][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.549391][T10019] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1045'. [ 119.655555][T10024] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 119.746135][ T829] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 119.749569][ T8] usb 8-1: GET_CAPABILITIES returned 0 [ 119.749588][ T8] usbtmc 8-1:16.0: can't read capabilities [ 119.912840][ T829] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 119.915251][ T829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.917684][ T829] usb 5-1: Product: syz [ 119.918788][ T829] usb 5-1: Manufacturer: syz [ 119.920006][ T829] usb 5-1: SerialNumber: syz [ 119.923536][ T829] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 119.951293][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.958458][ T829] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 120.043549][ T8] usb 8-1: USB disconnect, device number 13 [ 120.128768][T10043] binfmt_misc: register: failed to install interpreter file ./file0 [ 120.178621][T10045] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 120.182015][T10045] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 120.184948][T10045] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 120.188026][T10045] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 120.191184][T10045] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 120.193559][T10045] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 120.195851][T10045] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 120.199033][T10045] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 120.202252][T10045] geneve2: entered promiscuous mode [ 120.203637][T10045] geneve2: entered allmulticast mode [ 120.299703][T10047] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 120.398045][T10063] IPv6: addrconf: prefix option has invalid lifetime [ 120.435604][T10066] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1061'. [ 120.491389][T10072] Option 'n4:v®êšmäÛÌð¨áçžRÝfÍêËR­Oq±rúsJ)º¿rq' to dns_resolver key: bad/missing value [ 120.518152][T10076] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 120.712140][T10096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.714585][T10096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.748840][T10102] overlayfs: missing 'lowerdir' [ 120.756165][ T57] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 120.768421][T10099] binder: 10097:10099 ioctl c0306201 20000140 returned -14 [ 120.834899][T10107] QAT: Invalid ioctl -2142727111 [ 120.842683][T10107] QAT: Device 4 not found [ 120.906069][ T57] usb 9-1: Using ep0 maxpacket: 16 [ 120.909194][ T57] usb 9-1: no configurations [ 120.910568][ T57] usb 9-1: can't read configurations, error -22 [ 121.003899][T10114] ebt_among: dst integrity fail: 200 [ 121.006231][ T829] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 121.008464][ T829] ath9k_htc: Failed to initialize the device [ 121.031674][ T829] usb 5-1: ath9k_htc: USB layer deinitialized [ 121.041793][ T829] usb 5-1: USB disconnect, device number 9 [ 121.045104][T10119] ALSA: seq fatal error: cannot create timer (-22) [ 121.048207][ T57] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 121.227239][ T57] usb 9-1: Using ep0 maxpacket: 16 [ 121.230579][ T57] usb 9-1: no configurations [ 121.232147][ T57] usb 9-1: can't read configurations, error -22 [ 121.234348][ T57] usb usb9-port1: attempt power cycle [ 121.376145][T10137] ttynull ttynull: ldisc open failed (-12), clearing slot 0 [ 121.596138][ T57] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 121.626680][ T57] usb 9-1: Using ep0 maxpacket: 16 [ 121.628284][ T57] usb 9-1: no configurations [ 121.629395][ T57] usb 9-1: can't read configurations, error -22 [ 121.733207][T10172] netlink: 'syz.0.1095': attribute type 1 has an invalid length. [ 121.750781][T10178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10178 comm=syz.2.1097 [ 121.776165][ T57] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 121.808060][ T57] usb 9-1: Using ep0 maxpacket: 16 [ 121.809932][ T57] usb 9-1: no configurations [ 121.812439][ T57] usb 9-1: can't read configurations, error -22 [ 121.814628][ T57] usb usb9-port1: unable to enumerate USB device [ 121.894154][T10186] nbd: couldn't find a device at index 536870912 [ 121.944256][T10194] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 121.949787][T10194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1102'. [ 121.952106][T10194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1102'. [ 121.954461][T10194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1102'. [ 121.962601][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1102'. [ 122.278704][T10210] batman_adv: batadv0: Adding interface: erspan1 [ 122.280382][T10210] batman_adv: batadv0: Not using interface erspan1 (retrying later): interface not active [ 122.521363][T10236] ata1.00: invalid cdb length 6 [ 122.575293][T10240] __nla_validate_parse: 1 callbacks suppressed [ 122.575303][T10240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1115'. [ 123.026061][ T1017] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 123.196094][ T1017] usb 8-1: Using ep0 maxpacket: 16 [ 123.208927][ T1017] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 123.211540][ T1017] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 123.213865][ T1017] usb 8-1: Product: syz [ 123.215105][ T1017] usb 8-1: Manufacturer: syz [ 123.216544][ T1017] usb 8-1: SerialNumber: syz [ 123.218971][ T1017] usb 8-1: config 0 descriptor?? [ 123.427063][ T1017] usb 8-1: USB disconnect, device number 14 [ 123.642206][T10281] overlay: ./bus is not a directory [ 123.743316][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 123.743327][ T39] audit: type=1400 audit(1732513758.486:669): avc: denied { getopt } for pid=10284 comm="syz.4.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 123.830258][T10294] netlink: 'syz.0.1128': attribute type 2 has an invalid length. [ 123.831618][ T39] audit: type=1400 audit(1732513758.576:670): avc: denied { read } for pid=10291 comm="syz.4.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.840701][T10294] Xÿ: entered promiscuous mode [ 123.873945][ T39] audit: type=1400 audit(1732513758.616:671): avc: denied { getopt } for pid=10298 comm="syz.0.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.886384][ T39] audit: type=1400 audit(1732513758.636:672): avc: denied { ioctl } for pid=10291 comm="syz.4.1129" path="socket:[37712]" dev="sockfs" ino=37712 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.913404][T10299] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.942082][ T39] audit: type=1400 audit(1732513758.686:673): avc: denied { getopt } for pid=10309 comm="syz.0.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.945263][T10306] x_tables: duplicate underflow at hook 2 [ 123.953229][ T39] audit: type=1400 audit(1732513758.696:674): avc: denied { getattr } for pid=10305 comm="syz.2.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 123.956057][ T66] Bluetooth: hci0: command tx timeout [ 123.990328][ T39] audit: type=1400 audit(1732513758.736:675): avc: denied { map } for pid=10319 comm="syz.2.1134" path="socket:[36684]" dev="sockfs" ino=36684 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.997558][ T39] audit: type=1400 audit(1732513758.736:676): avc: denied { read } for pid=10319 comm="syz.2.1134" path="socket:[36684]" dev="sockfs" ino=36684 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.113552][T10333] ipvlan0: entered promiscuous mode [ 124.269007][T10341] ieee802154 phy0 wpan0: encryption failed: -22 [ 124.572125][T10349] virtio-fs: tag <./file0> not found [ 124.635620][T10356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1143'. [ 124.887140][ T39] audit: type=1400 audit(1732513759.636:677): avc: denied { read } for pid=10372 comm="syz.2.1149" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 124.893038][ T39] audit: type=1400 audit(1732513759.636:678): avc: denied { open } for pid=10372 comm="syz.2.1149" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 126.031588][T10479] netlink: 'syz.0.1159': attribute type 10 has an invalid length. [ 126.037464][T10479] rose0: (slave netdevsim0): Enslaving as an active interface with an up link [ 126.102879][T10483] netlink: 'syz.0.1161': attribute type 1 has an invalid length. [ 126.105260][T10483] netlink: 'syz.0.1161': attribute type 2 has an invalid length. [ 127.017466][T10527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1176'. [ 127.256611][T10529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=10529 comm=syz.2.1177 [ 127.392753][T10519] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 127.726651][T10550] jfs: Unknown parameter '‰>ü¯šöÈG°%ÍRõ“KÆØðI¿ uE–-ûåßë)ôp)ÙFjß1Ø%ê!§/ì›õ2… Œn›äÂñÿÿÿÿÿÿÿE· ŒU ' [ 127.837630][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1184'. [ 127.839856][T10552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1184'. [ 127.842004][T10552] netlink: 'syz.2.1184': attribute type 7 has an invalid length. [ 127.892484][T10557] random: crng reseeded on system resumption [ 128.014655][T10565] netlink: 'syz.3.1188': attribute type 10 has an invalid length. [ 128.028808][T10565] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 128.191356][T10568] netlink: 2096 bytes leftover after parsing attributes in process `syz.3.1188'. [ 128.676073][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.816764][ T1017] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 128.875777][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 128.875791][ T39] audit: type=1400 audit(1732513763.616:691): avc: denied { mount } for pid=10580 comm="syz.3.1193" name="/" dev="9p" ino=35922061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 128.885630][ T39] audit: type=1400 audit(1732513763.626:692): avc: denied { getattr } for pid=10580 comm="syz.3.1193" name="/" dev="9p" ino=35922061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 128.886228][T10581] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 128.903708][ T39] audit: type=1400 audit(1732513763.646:693): avc: denied { read } for pid=10580 comm="syz.3.1193" name="file0" dev="9p" ino=35922579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 128.910798][ T39] audit: type=1400 audit(1732513763.646:694): avc: denied { open } for pid=10580 comm="syz.3.1193" path="/file0" dev="9p" ino=35922579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 128.930867][ T39] audit: type=1400 audit(1732513763.676:695): avc: denied { setattr } for pid=10580 comm="syz.3.1193" name="#1424" dev="tmpfs" ino=1424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 128.939092][ T39] audit: type=1400 audit(1732513763.676:696): avc: denied { link } for pid=10580 comm="syz.3.1193" name="#1424" dev="tmpfs" ino=1424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 128.947104][ T39] audit: type=1804 audit(1732513763.676:697): pid=10581 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1193" name="/newroot/256/bus/file0" dev="overlay" ino=35922579 res=1 errno=0 [ 128.954787][ T39] audit: type=1400 audit(1732513763.686:698): avc: denied { mounton } for pid=10580 comm="syz.3.1193" path="/256/bus/file0" dev="overlay" ino=35922579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 128.962639][ T39] audit: type=1400 audit(1732513763.696:699): avc: denied { listen } for pid=10580 comm="syz.3.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 128.970476][ T1017] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 128.973722][ T1017] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 128.976912][ T1017] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.985665][T10570] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.989591][ T1017] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 129.223851][ T1017] usb 7-1: USB disconnect, device number 10 [ 129.669225][T10587] program syz.0.1194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.712837][ T39] audit: type=1400 audit(1732513764.456:700): avc: denied { unmount } for pid=5959 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 129.810473][T10599] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1195'. [ 129.865439][T10601] @: renamed from vlan0 (while UP) [ 129.930116][T10604] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 129.975003][T10610] tmpfs: Bad value for 'mpol' [ 130.038830][T10613] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.353694][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1206'. [ 130.360993][T10631] tipc: Started in network mode [ 130.362308][T10631] tipc: Node identity ac1414aa, cluster identity 4711 [ 130.364221][T10631] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 130.366565][T10631] tipc: Enabled bearer , priority 10 [ 130.368853][T10633] netlink: 'syz.2.1207': attribute type 1 has an invalid length. [ 130.376608][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.378605][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.440118][T10642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1210'. [ 130.442502][T10642] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1210'. [ 130.443290][T10638] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1209'. [ 130.496146][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 130.636245][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 130.786071][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 130.926040][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 131.066206][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 131.118175][T10701] IPv6: NLM_F_CREATE should be specified when creating new route [ 131.216142][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 131.346123][ T63] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 131.366085][ T3229] tipc: Node number set to 2886997162 [ 131.470563][T10722] Bluetooth: hci4: Frame reassembly failed (-84) [ 131.474144][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 131.496077][ T63] usb 8-1: device descriptor read/64, error -71 [ 131.506231][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 131.736073][ T63] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 131.776118][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 131.876030][ T63] usb 8-1: device descriptor read/64, error -71 [ 131.997213][ T63] usb usb8-port1: attempt power cycle [ 132.336173][ T63] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 132.357924][ T63] usb 8-1: device descriptor read/8, error -71 [ 132.531013][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.532815][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.596155][ T63] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 132.616597][ T63] usb 8-1: device descriptor read/8, error -71 [ 132.726287][ T63] usb usb8-port1: unable to enumerate USB device [ 133.476196][ T66] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 133.535861][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1233'. [ 133.538299][T10727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1233'. [ 133.542123][T10727] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 133.765843][T10728] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.933463][T10757] tipc: Failed to remove unknown binding: 66,1,1/0:226525320/226525322 [ 134.153960][T10777] 9pnet_fd: Insufficient options for proto=fd [ 134.391912][T10793] Bluetooth: (null): Invalid header checksum [ 134.393959][T10793] dvmrp1: left allmulticast mode [ 134.511570][ T68] Bluetooth: (null): Invalid header checksum [ 134.516067][ T68] Bluetooth: (null): Invalid header checksum [ 134.630815][ T11] Bluetooth: (null): Invalid header checksum [ 134.728085][ T1157] Bluetooth: (null): Invalid header checksum [ 134.846409][ T84] Bluetooth: (null): Invalid header checksum [ 134.946300][ T84] Bluetooth: (null): Invalid header checksum [ 135.056278][ T11] Bluetooth: (null): Invalid header checksum [ 135.166280][ T1157] Bluetooth: (null): Invalid header checksum [ 135.351188][T10812] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1257'. [ 135.353515][T10812] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1257'. [ 135.371922][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 135.371931][ T39] audit: type=1400 audit(1732513770.116:707): avc: denied { accept } for pid=10811 comm="syz.2.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 135.396062][ C1] net_ratelimit: 4 callbacks suppressed [ 135.396073][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 135.424119][T10812] random: crng reseeded on system resumption [ 135.502844][ T39] audit: type=1400 audit(1732513770.246:708): avc: denied { relabelfrom } for pid=10815 comm="syz.3.1258" name="" dev="pipefs" ino=39851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 135.503050][T10816] SELinux: Context system_u:object_r:policy_src_t:s0 is not valid (left unmapped). [ 135.516024][ T39] audit: type=1400 audit(1732513770.256:709): avc: denied { relabelto } for pid=10815 comm="syz.3.1258" name="" dev="pipefs" ino=39851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:policy_src_t:s0" [ 135.643960][T10823] fuse: Bad value for 'user_id' [ 135.645355][T10823] fuse: Bad value for 'user_id' [ 135.657446][T10823] overlay: ./file0 is not a directory [ 135.713161][T10827] syz.3.1261: attempt to access beyond end of device [ 135.713161][T10827] sr0: rw=0, sector=0, nr_sectors = 4 limit=0 [ 135.716890][T10827] (syz.3.1261,10827,2):ocfs2_get_sector:1769 ERROR: status = -5 [ 135.717565][ T5958] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.718861][T10827] (syz.3.1261,10827,2):ocfs2_sb_probe:749 ERROR: status = -5 [ 135.722360][T10827] (syz.3.1261,10827,2):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 135.729516][T10827] (syz.3.1261,10827,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 135.756357][T10829] netlink: 'syz.3.1263': attribute type 5 has an invalid length. [ 135.785874][ T39] audit: type=1400 audit(1732513770.526:710): avc: denied { remount } for pid=10828 comm="syz.3.1263" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 135.795011][T10829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1263'. [ 135.798256][T10829] bridge_slave_1: left allmulticast mode [ 135.799730][T10829] bridge_slave_1: left promiscuous mode [ 135.801254][T10829] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.805874][T10829] bridge_slave_0: left allmulticast mode [ 135.809476][T10829] bridge_slave_0: left promiscuous mode [ 135.811363][T10829] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.909953][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1266'. [ 135.967750][ T39] audit: type=1400 audit(1732513770.716:711): avc: denied { unmount } for pid=5959 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 136.071904][T10857] binder: 10856:10857 ioctl 400c620e 20000500 returned -22 [ 136.406049][ T63] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 136.436121][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 136.577253][ T63] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 136.579599][ T63] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 136.582279][ T63] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 136.584662][ T63] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 136.587891][ T63] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 136.591851][ T63] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 136.594252][ T63] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 136.596638][ T63] usb 5-1: Product: syz [ 136.597800][ T63] usb 5-1: Manufacturer: syz [ 136.601424][ T63] cdc_wdm 5-1:1.0: skipping garbage [ 136.602721][ T63] cdc_wdm 5-1:1.0: skipping garbage [ 136.604654][ T63] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 136.606671][ T63] cdc_wdm 5-1:1.0: Unknown control protocol [ 136.682592][T10867] netlink: 1024 bytes leftover after parsing attributes in process `syz.2.1275'. [ 136.802863][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 136.805015][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 136.807348][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 136.809596][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 136.811299][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 136.812912][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 136.814595][ T1017] usb 5-1: USB disconnect, device number 10 [ 136.816142][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 136.816153][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 136.816160][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 136.916086][ T63] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 137.066171][ T63] usb 7-1: Invalid ep0 maxpacket: 16 [ 137.206108][ T63] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 137.356126][ T63] usb 7-1: Invalid ep0 maxpacket: 16 [ 137.358274][ T63] usb usb7-port1: attempt power cycle [ 137.476106][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 137.706057][ T63] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 137.726657][ T63] usb 7-1: Invalid ep0 maxpacket: 16 [ 137.796138][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.821610][ T7982] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.856164][ T63] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 137.876778][ T63] usb 7-1: Invalid ep0 maxpacket: 16 [ 137.878329][ T63] usb usb7-port1: unable to enumerate USB device [ 137.893618][ T7982] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.901254][ T5958] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 137.906877][ T5958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 137.909803][ T5958] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 137.912038][ T5958] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 137.914151][ T5958] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 137.916548][ T5958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.960902][ T7982] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.005016][T10878] chnl_net:caif_netlink_parms(): no params data found [ 138.062205][ T7982] rose0: (slave netdevsim0): Releasing backup interface [ 138.065125][ T7982] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.070607][T10878] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.072403][T10878] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.074184][T10878] bridge_slave_0: entered allmulticast mode [ 138.076103][T10878] bridge_slave_0: entered promiscuous mode [ 138.078647][T10878] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.080664][T10878] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.082803][T10878] bridge_slave_1: entered allmulticast mode [ 138.085140][T10878] bridge_slave_1: entered promiscuous mode [ 138.116673][T10878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.120246][T10878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.146561][T10878] team0: Port device team_slave_0 added [ 138.150646][T10878] team0: Port device team_slave_1 added [ 138.179092][T10878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.180989][T10878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.187925][T10878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.200032][T10878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.201847][T10878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.211411][T10878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.248002][T10878] hsr_slave_0: entered promiscuous mode [ 138.251559][T10878] hsr_slave_1: entered promiscuous mode [ 138.253791][T10878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.255800][T10878] Cannot create hsr debugfs directory [ 138.257879][ T7982] bridge_slave_1: left promiscuous mode [ 138.259418][ T7982] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.262413][ T7982] bridge_slave_0: left allmulticast mode [ 138.263989][ T7982] bridge_slave_0: left promiscuous mode [ 138.265553][ T7982] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.363693][ T7982] batman_adv: batadv0: Removing interface: erspan1 [ 138.385894][ T7982] bond1 (unregistering): (slave gretap2): Releasing active interface [ 138.516171][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 138.731446][ T7982] rose0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.735124][ T7982] rose0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.738427][ T7982] rose0 (unregistering): Released all slaves [ 138.743644][ T7982] bond0 (unregistering): Released all slaves [ 138.842089][ T7982] bond1 (unregistering): Released all slaves [ 138.961659][ T7982] Xÿ: left promiscuous mode [ 138.990544][T10878] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 138.993978][T10878] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 139.006422][T10878] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 139.009823][T10878] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 139.045822][T10878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.070001][T10878] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.073818][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.076462][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.080692][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.082470][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.129446][ T39] audit: type=1400 audit(1732513773.866:712): avc: denied { egress } for pid=3229 comm="kworker/1:2" daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 139.132172][T10878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.134939][ T39] audit: type=1400 audit(1732513773.866:713): avc: denied { sendto } for pid=3229 comm="kworker/1:2" daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 139.220549][T10878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.259452][ T7982] hsr_slave_0: left promiscuous mode [ 139.264389][ T7982] hsr_slave_1: left promiscuous mode [ 139.266506][ T7982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.268304][ T7982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.270392][ T7982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.288933][ T7982] veth1_macvtap: left promiscuous mode [ 139.290397][ T7982] veth0_macvtap: left promiscuous mode [ 139.291856][ T7982] veth1_vlan: left promiscuous mode [ 139.566042][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 139.956950][ T66] Bluetooth: hci0: command tx timeout [ 139.958399][T10908] IPVS: set_ctl: invalid protocol: 11612 172.20.20.170:20003 [ 140.176610][ T7982] team0 (unregistering): Port device team_slave_1 removed [ 140.263875][ T7982] team0 (unregistering): Port device team_slave_0 removed [ 140.606045][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 140.925148][T10926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10926 comm=syz.2.1285 [ 140.928492][T10926] netlink: 'syz.2.1285': attribute type 1 has an invalid length. [ 140.937061][T10926] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.944370][T10926] bond3: (slave bridge3): making interface the new active one [ 140.946615][T10926] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 140.960322][T10926] bridge3: entered promiscuous mode [ 140.961683][T10926] macsec3: entered promiscuous mode [ 140.963034][T10926] bond3: entered promiscuous mode [ 140.964408][T10926] macsec3: entered allmulticast mode [ 140.965738][T10926] bond3: entered allmulticast mode [ 140.967363][T10926] bridge3: entered allmulticast mode [ 140.990745][T10878] veth0_vlan: entered promiscuous mode [ 140.995249][T10878] veth1_vlan: entered promiscuous mode [ 141.008017][T10878] veth0_macvtap: entered promiscuous mode [ 141.013595][T10878] veth1_macvtap: entered promiscuous mode [ 141.020850][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.023551][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.027463][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.032736][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.035218][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.038987][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.042099][T10878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.048301][T10934] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.076921][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.079498][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.082060][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.084546][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.090333][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.092952][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.095858][T10878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.102511][T10878] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.104724][T10878] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.107293][T10878] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.109686][T10878] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.145664][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.153684][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.158384][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.160288][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.177678][ T39] audit: type=1400 audit(1732513775.926:714): avc: denied { mounton } for pid=10878 comm="syz-executor" path="/syzkaller.VyrZuN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=40471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 141.310795][ T7982] IPVS: stop unused estimator thread 0... [ 141.516103][ T2310] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 141.636055][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 141.686072][ T2310] usb 7-1: Using ep0 maxpacket: 16 [ 141.687804][ T2310] usb 7-1: too many configurations: 212, using maximum allowed: 8 [ 141.690902][ T2310] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 141.692819][ T2310] usb 7-1: can't read configurations, error -61 [ 141.836179][ T2310] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 141.973734][ T66] Bluetooth: Wrong link type (-57) [ 142.006984][ T2310] usb 7-1: Using ep0 maxpacket: 16 [ 142.009675][ T2310] usb 7-1: too many configurations: 212, using maximum allowed: 8 [ 142.012806][ T2310] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 142.014673][ T2310] usb 7-1: can't read configurations, error -61 [ 142.017318][ T2310] usb usb7-port1: attempt power cycle [ 142.036166][ T66] Bluetooth: hci0: command tx timeout [ 142.212371][T11035] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20004 [ 142.226106][T11035] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20004 [ 142.272437][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 142.278584][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 142.283196][ T5958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 142.285682][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 142.290138][ T5958] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 142.292127][ T5958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 142.369355][T11048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11048 comm=syz.5.1305 [ 142.369768][T11049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11049 comm=syz.5.1305 [ 142.376147][ T2310] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 142.381859][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1305'. [ 142.382720][T11039] chnl_net:caif_netlink_parms(): no params data found [ 142.396486][ T2310] usb 7-1: Using ep0 maxpacket: 16 [ 142.398934][ T2310] usb 7-1: too many configurations: 212, using maximum allowed: 8 [ 142.402421][ T2310] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 142.404347][ T2310] usb 7-1: can't read configurations, error -61 [ 142.476631][T11039] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.479076][T11039] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.481445][T11039] bridge_slave_0: entered allmulticast mode [ 142.484072][T11039] bridge_slave_0: entered promiscuous mode [ 142.500799][ T1157] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.509496][T11039] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.511936][T11039] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.514304][T11039] bridge_slave_1: entered allmulticast mode [ 142.518187][T11039] bridge_slave_1: entered promiscuous mode [ 142.539663][T11039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.544050][T11039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.546062][ T2310] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 142.566489][ T2310] usb 7-1: Using ep0 maxpacket: 16 [ 142.567691][T11039] team0: Port device team_slave_0 added [ 142.568190][ T2310] usb 7-1: too many configurations: 212, using maximum allowed: 8 [ 142.570365][T11039] team0: Port device team_slave_1 added [ 142.572365][ T2310] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 142.574605][ T2310] usb 7-1: can't read configurations, error -61 [ 142.578139][ T2310] usb usb7-port1: unable to enumerate USB device [ 142.590698][T11039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.592948][T11039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.601025][T11039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.604680][T11039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.609486][T11039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.616603][T11039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.622784][ T1157] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.650025][T11039] hsr_slave_0: entered promiscuous mode [ 142.651897][T11039] hsr_slave_1: entered promiscuous mode [ 142.653701][T11039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.655620][T11039] Cannot create hsr debugfs directory [ 142.676122][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 142.681469][ T1157] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.746653][T11039] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 142.750282][T11039] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 142.753904][T11039] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 142.758529][T11039] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 142.767781][T11039] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.769578][T11039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.771494][T11039] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.773270][T11039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.794241][T11039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.801621][ T98] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.804377][ T98] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.822202][ T1157] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.831316][T11039] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.837839][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.839588][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.843963][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.845837][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.964584][ T1157] vlan3: left promiscuous mode [ 142.966919][ T1157] bridge0: port 3(vlan3) entered disabled state [ 142.969917][ T1157] bridge_slave_1: left allmulticast mode [ 142.971695][ T1157] bridge_slave_1: left promiscuous mode [ 142.973317][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.975672][ T1157] bridge_slave_0: left promiscuous mode [ 142.977246][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.287042][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.290945][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.294731][ T1157] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 143.298368][ T1157] bond0 (unregistering): Released all slaves [ 143.321678][T11039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.355435][ T1157] tipc: Disabling bearer [ 143.357570][ T1157] tipc: Disabling bearer [ 143.360617][ T1157] tipc: Left network mode [ 143.462569][T11039] veth0_vlan: entered promiscuous mode [ 143.466486][T11039] veth1_vlan: entered promiscuous mode [ 143.484043][T11039] veth0_macvtap: entered promiscuous mode [ 143.493588][T11039] veth1_macvtap: entered promiscuous mode [ 143.526728][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.529867][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.533180][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.537067][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.540515][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.544076][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.546670][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.549197][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.552173][T11039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.557729][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.560519][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.563019][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.565647][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.568800][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.571308][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.573730][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.576964][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.582191][T11039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.599708][ T1157] hsr_slave_0: left promiscuous mode [ 143.601550][ T1157] hsr_slave_1: left promiscuous mode [ 143.603363][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.605331][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.607731][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.609618][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.632473][ T1157] bridge_slave_0: left allmulticast mode [ 143.633995][ T1157] veth1_macvtap: left promiscuous mode [ 143.635369][ T1157] veth0_macvtap: left promiscuous mode [ 143.638606][ T1157] veth1_vlan: left promiscuous mode [ 143.639953][ T1157] veth0_vlan: left promiscuous mode [ 143.716079][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 144.116176][ T5958] Bluetooth: hci0: command tx timeout [ 144.310393][ T39] audit: type=1400 audit(1732513779.056:715): avc: denied { remount } for pid=11095 comm="syz.5.1308" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 144.311194][T11101] binder: Binderfs stats mode cannot be changed during a remount [ 144.311883][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 144.369207][ T5958] Bluetooth: hci2: command tx timeout [ 144.397002][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 144.676014][ T63] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 144.766125][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 144.816028][ T63] usb 7-1: device descriptor read/64, error -71 [ 145.008706][T11039] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.011044][T11039] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.013271][T11039] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.015598][T11039] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.056037][ T63] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 145.061841][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.063710][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.097898][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.100075][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.174098][T11112] QAT: failed to copy from user. [ 145.186250][ T63] usb 7-1: device descriptor read/64, error -71 [ 145.297128][ T63] usb usb7-port1: attempt power cycle [ 145.381055][T11126] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 145.398394][T11126] kvm: pic: level sensitive irq not supported [ 145.398720][T11126] kvm: pic: non byte read [ 145.402254][T11126] kvm: pic: level sensitive irq not supported [ 145.402509][T11126] kvm: pic: non byte read [ 145.406504][T11126] kvm: pic: level sensitive irq not supported [ 145.406834][T11126] kvm: pic: non byte read [ 145.410227][T11126] kvm: pic: level sensitive irq not supported [ 145.410458][T11126] kvm: pic: non byte read [ 145.636062][ T63] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 145.656656][ T63] usb 7-1: device descriptor read/8, error -71 [ 145.680077][T11148] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 145.684397][T11148] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 145.691768][T11148] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 145.781688][T11157] 9pnet_fd: Insufficient options for proto=fd [ 145.806051][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 145.873573][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1318'. [ 145.896258][ T63] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 145.905551][T11170] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1319'. [ 145.916481][ T63] usb 7-1: device descriptor read/8, error -71 [ 146.016038][T11182] serio: Serial port ptm0 [ 146.026654][ T63] usb usb7-port1: unable to enumerate USB device [ 146.071533][ T39] audit: type=1400 audit(1732513780.816:716): avc: denied { name_bind } for pid=11181 comm="syz.6.1321" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 146.079205][ T39] audit: type=1400 audit(1732513780.816:717): avc: denied { name_connect } for pid=11181 comm="syz.6.1321" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 146.204974][ T39] audit: type=1400 audit(1732513780.946:718): avc: denied { setopt } for pid=11189 comm="syz.6.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 146.283189][ T39] audit: type=1400 audit(1732513781.026:719): avc: denied { append } for pid=11194 comm="syz.6.1324" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 146.345893][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1327'. [ 146.436483][ T5958] Bluetooth: hci2: command tx timeout [ 146.477678][ T39] audit: type=1400 audit(1732513781.226:720): avc: denied { watch } for pid=11219 comm="syz.6.1331" path="/8" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 146.484328][ T39] audit: type=1400 audit(1732513781.226:721): avc: denied { watch_sb } for pid=11219 comm="syz.6.1331" path="/8" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 146.511583][T11227] tmpfs: Bad value for 'mpol' [ 146.742103][T11243] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 146.750398][ T39] audit: type=1400 audit(1732513781.496:722): avc: denied { mounton } for pid=11242 comm="syz.6.1338" path="/12/bus/file0" dev="overlay" ino=45058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=sock_file permissive=1 [ 146.755652][T11243] overlay: filesystem on ./bus not supported as upperdir [ 146.793698][T11245] hsr0: entered promiscuous mode [ 146.796136][T11102] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 146.834175][T11249] 9pnet_virtio: no channels available for device syz [ 146.836104][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 146.924946][T11251] ip6t_rpfilter: unknown options [ 146.957375][T11102] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.965993][T11102] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 146.969381][T11102] usb 10-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 146.971857][T11102] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.975146][T11102] usb 10-1: config 0 descriptor?? [ 146.978640][ T39] audit: type=1400 audit(1732513781.726:723): avc: denied { bind } for pid=11252 comm="syz.6.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 147.017979][ T39] audit: type=1400 audit(1732513781.766:724): avc: denied { mounton } for pid=11256 comm="syz.6.1343" path="/proc/54/cgroup" dev="proc" ino=45076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 147.024951][T11257] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1343'. [ 147.183403][T11229] dummy0: entered promiscuous mode [ 147.185261][T11229] macsec1: entered promiscuous mode [ 147.186947][T11229] macsec1: entered allmulticast mode [ 147.188876][T11229] dummy0: entered allmulticast mode [ 147.194074][T11229] dummy0: left allmulticast mode [ 147.196010][T11229] dummy0: left promiscuous mode [ 147.299437][T11102] usbhid 10-1:0.0: can't add hid device: -71 [ 147.301138][T11102] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 147.304099][T11102] usb 10-1: USB disconnect, device number 2 [ 147.390358][T11277] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 147.800350][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1358'. [ 147.804049][T11312] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1358'. [ 147.857767][T11315] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1358'. [ 147.876082][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 147.899808][T11317] fuse: Unknown parameter 'allr' [ 147.905710][T11317] block nbd6: not configured, cannot reconfigure [ 147.918105][ T39] audit: type=1400 audit(1732513782.666:725): avc: denied { write } for pid=11316 comm="syz.6.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 147.960357][ T39] audit: type=1400 audit(1732513782.706:726): avc: denied { setopt } for pid=11318 comm="syz.6.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 147.966094][ T39] audit: type=1400 audit(1732513782.706:727): avc: denied { connect } for pid=11318 comm="syz.6.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 148.000376][T11319] netlink: 596 bytes leftover after parsing attributes in process `syz.6.1360'. [ 148.477725][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1362'. [ 148.487193][T11329] macsec0: entered promiscuous mode [ 148.516113][ T5958] Bluetooth: hci2: command tx timeout [ 148.782781][T11346] kvm: pic: non byte write [ 148.905462][T11355] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1369'. [ 148.926047][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 148.949217][T11359] SELinux: policydb version 592713773 does not match my version range 15-33 [ 148.951654][T11359] SELinux: failed to load policy [ 148.953637][T11359] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1370'. [ 148.961355][T11359] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.963551][T11359] IPv6: NLM_F_CREATE should be set when creating new route [ 148.966728][T11359] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.968686][T11359] IPv6: NLM_F_CREATE should be set when creating new route [ 148.995566][T11359] mkiss: ax0: crc mode is auto. [ 149.105148][T11365] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1372'. [ 149.943790][T11374] netlink: 'syz.5.1375': attribute type 32 has an invalid length. [ 149.945978][T11374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1375'. [ 149.948365][T11374] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 149.956058][T11376] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 149.956124][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 149.968101][T11374] usb usb8: usbfs: process 11374 (syz.5.1375) did not claim interface 0 before use [ 149.999653][T11379] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1377'. [ 150.033967][T11382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.218593][T11384] netlink: 'syz.2.1379': attribute type 1 has an invalid length. [ 150.325720][T11404] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 150.596110][ T5958] Bluetooth: hci2: command tx timeout [ 150.996137][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 151.166480][ T66] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.172237][ T66] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.175625][ T66] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.179484][ T66] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.182266][ T66] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.184824][ T66] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.251187][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 151.251197][ T39] audit: type=1400 audit(1732513785.996:737): avc: denied { getopt } for pid=11433 comm="syz.2.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 151.275081][T11424] chnl_net:caif_netlink_parms(): no params data found [ 151.314848][ T39] audit: type=1400 audit(1732513786.056:738): avc: denied { create } for pid=11429 comm="syz.6.1392" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 151.322185][ T39] audit: type=1400 audit(1732513786.056:739): avc: denied { map } for pid=11429 comm="syz.6.1392" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=46620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 151.333700][ T39] audit: type=1400 audit(1732513786.056:740): avc: denied { read write } for pid=11429 comm="syz.6.1392" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=46620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 151.340534][ T39] audit: type=1400 audit(1732513786.056:741): avc: denied { create } for pid=11429 comm="syz.6.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.345548][ T39] audit: type=1400 audit(1732513786.056:742): avc: denied { listen } for pid=11429 comm="syz.6.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.350736][ T39] audit: type=1400 audit(1732513786.066:743): avc: denied { read } for pid=11429 comm="syz.6.1392" lport=40125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.358246][T11424] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.361679][T11424] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.364287][T11424] bridge_slave_0: entered allmulticast mode [ 151.368162][T11424] bridge_slave_0: entered promiscuous mode [ 151.371685][T11424] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.374163][T11424] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.376885][T11424] bridge_slave_1: entered allmulticast mode [ 151.379528][T11424] bridge_slave_1: entered promiscuous mode [ 151.391919][T11447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11447 comm=syz.2.1396 [ 151.413700][T11424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.422231][T11424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.452080][T11424] team0: Port device team_slave_0 added [ 151.454792][T11424] team0: Port device team_slave_1 added [ 151.472705][T11424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.474548][T11424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.483283][T11424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.487557][T11424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.489334][T11424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.495992][T11424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.533435][T11424] hsr_slave_0: entered promiscuous mode [ 151.536414][T11424] hsr_slave_1: entered promiscuous mode [ 151.540445][T11424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.542413][T11424] Cannot create hsr debugfs directory [ 151.589979][ T39] audit: type=1400 audit(1732513786.336:744): avc: denied { unlink } for pid=11466 comm="syz.5.1402" name="file1" dev="9p" ino=35922617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 151.659939][T11424] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 151.664708][T11424] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 151.670735][T11424] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 151.674067][T11424] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 151.701812][T11424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.722840][T11478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11478 comm=syz.5.1403 [ 151.730325][T11424] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.737847][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.739736][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.744002][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.746178][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.851161][T11502] syz.2.1408: attempt to access beyond end of device [ 151.851161][T11502] sr0: rw=4096, sector=0, nr_sectors = 4 limit=0 [ 151.851322][T11424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.855174][T11502] EXT4-fs (sr0): unable to read superblock [ 151.901315][ T39] audit: type=1400 audit(1732513786.646:745): avc: denied { getopt } for pid=11509 comm="syz.2.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.958632][T11424] veth0_vlan: entered promiscuous mode [ 151.964273][T11424] veth1_vlan: entered promiscuous mode [ 151.982918][T11424] veth0_macvtap: entered promiscuous mode [ 151.986229][T11424] veth1_macvtap: entered promiscuous mode [ 151.993429][T11424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.996788][T11424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.999239][T11424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.002318][T11424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.004836][T11424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.008833][T11424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.011558][T11424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.014395][T11424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.018063][T11424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.025340][T11424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.031537][T11424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.034497][T11424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.037949][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 152.039927][T11424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.042411][T11424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.045087][T11424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.048081][T11424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.050825][T11424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.058179][T11424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.065108][T11424] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.070867][T11424] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.075584][T11424] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.078565][T11424] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.142867][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.145054][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.168063][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.170459][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.334189][ T39] audit: type=1400 audit(1732513787.076:746): avc: denied { ioctl } for pid=11584 comm="syz.6.1418" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=46830 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 152.339150][T11585] nbd: must specify at least one socket [ 152.354972][T11585] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 152.408815][T11603] binder: BINDER_SET_CONTEXT_MGR already set [ 152.410521][T11603] binder: 11601:11603 ioctl 4018620d 200002c0 returned -16 [ 152.505545][T11623] Malformed UNC in devname [ 152.505545][T11623] [ 152.507784][T11623] CIFS: VFS: Malformed UNC in devname [ 152.513720][T11607] sd 0:0:0:0: PR command failed: 1026 [ 152.515138][T11607] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 152.519559][T11607] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 152.703903][T11645] tipc: Started in network mode [ 152.705749][T11645] tipc: Node identity ac1414aa, cluster identity 4711 [ 152.709787][T11645] tipc: Enabled bearer , priority 10 [ 152.790577][T11675] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 152.797740][T11679] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 2 [ 152.798244][T11676] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 1 [ 152.803534][T11680] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 3 [ 152.842942][T11669] kernel profiling enabled (shift: 17) [ 152.932786][T11704] __nla_validate_parse: 4 callbacks suppressed [ 152.932797][T11704] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1434'. [ 152.946373][T11704] binder: Binderfs stats mode cannot be changed during a remount [ 152.991921][T11714] netlink: 'syz.6.1439': attribute type 2 has an invalid length. [ 153.051168][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1442'. [ 153.076151][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 153.110693][T11723] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1442'. [ 153.162721][T11726] block nbd5: Unsupported socket: shutdown callout must be supported. [ 153.208115][T11733] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1446'. [ 153.211035][T11733] program syz.6.1446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.237476][ T66] Bluetooth: hci4: command tx timeout [ 153.301238][T11739] loop2: detected capacity change from 0 to 7 [ 153.303228][T11739] Dev loop2: unable to read RDB block 7 [ 153.304809][T11739] loop2: unable to read partition table [ 153.307206][T11739] loop2: partition table beyond EOD, truncated [ 153.309651][T11739] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 153.403844][T11756] netlink: 'syz.5.1450': attribute type 1 has an invalid length. [ 153.666825][ T5955] Bluetooth: hci5: sending frame failed (-49) [ 153.669373][ T66] Bluetooth: hci5: Entering manufacturer mode failed (-49) [ 153.706362][ T1017] tipc: Node number set to 2886997162 [ 153.714164][T11775] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 153.776736][T11781] vlan3: entered allmulticast mode [ 153.778629][T11781] bridge0: port 3(vlan3) entered blocking state [ 153.780417][T11781] bridge0: port 3(vlan3) entered disabled state [ 153.782674][T11781] vlan3: entered promiscuous mode [ 153.784211][T11781] bridge0: port 3(vlan3) entered blocking state [ 153.785826][T11781] bridge0: port 3(vlan3) entered forwarding state [ 153.831396][T11789] ipvlan2: entered promiscuous mode [ 153.834803][T11789] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 153.837901][T11789] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 153.919556][T11799] netlink: 'syz.2.1461': attribute type 10 has an invalid length. [ 153.997009][T11804] geneve0: entered promiscuous mode [ 154.116038][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 154.295631][T11822] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1467'. [ 154.351839][T11826] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1468'. [ 154.476179][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1471'. [ 154.478570][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1471'. [ 154.515467][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1471'. [ 154.517961][T11838] netlink: 'syz.5.1471': attribute type 21 has an invalid length. [ 154.519978][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1471'. [ 154.755739][T11856] netlink: 'syz.7.1476': attribute type 3 has an invalid length. [ 154.758353][T11856] netlink: 'syz.7.1476': attribute type 3 has an invalid length. [ 154.859155][T11865] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.016034][ T829] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 155.141274][T11822] syz.2.1467 (11822) used greatest stack depth: 20608 bytes left [ 155.166047][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 155.167242][ T829] usb 10-1: Using ep0 maxpacket: 8 [ 155.171447][ T829] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.174307][ T829] usb 10-1: config 0 has no interface number 0 [ 155.177085][ T829] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.180421][ T829] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 155.182698][ T829] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.185773][ T829] usb 10-1: config 0 descriptor?? [ 155.189841][ T829] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 155.224659][T11884] netlink: 'syz.2.1481': attribute type 10 has an invalid length. [ 155.227462][T11884] netlink: 'syz.2.1481': attribute type 10 has an invalid length. [ 155.237722][T11884] team0: Port device netdevsim0 removed [ 155.240472][T11884] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 155.326570][ T66] Bluetooth: hci4: command 0x041b tx timeout [ 155.398757][T11862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.401239][T11862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.409663][T11862] netlink: 'syz.5.1477': attribute type 4 has an invalid length. [ 155.681584][T11911] bond0: (slave rose0): Releasing backup interface [ 155.693111][T11911] input: syz0 as /devices/virtual/input/input17 [ 156.097090][ T7975] nci: nci_rsp_packet: unknown rsp opcode 0x404 [ 156.196407][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 156.207880][T11970] kvm: kvm [11964]: vcpu0, guest rIP: 0x19 Unhandled WRMSR(0xc1) = 0xd [ 156.211269][T11970] kvm: kvm [11964]: vcpu0, guest rIP: 0x1b Unhandled WRMSR(0xc1) = 0xd [ 156.527624][ C3] ================================================================== [ 156.529715][ C3] BUG: KASAN: slab-out-of-bounds in selinux_ip_output+0x1e0/0x1f0 [ 156.531649][ C3] Read of size 8 at addr ffff88805e5ca498 by task syz.5.1477/11861 [ 156.533801][ C3] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 156.534948][ C3] CPU: 3 UID: 0 PID: 11861 Comm: syz.5.1477 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 156.538773][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 156.542127][ C3] Call Trace: [ 156.543282][ C3] [ 156.544296][ C3] dump_stack_lvl+0x116/0x1f0 [ 156.545913][ C3] print_report+0xc3/0x620 [ 156.547454][ C3] ? __virt_addr_valid+0x5e/0x590 [ 156.548892][ C3] ? __phys_addr+0xc6/0x150 [ 156.550110][ C3] kasan_report+0xd9/0x110 [ 156.551217][ C3] ? selinux_ip_output+0x1e0/0x1f0 [ 156.552508][ C3] ? selinux_ip_output+0x1e0/0x1f0 [ 156.553834][ C3] selinux_ip_output+0x1e0/0x1f0 [ 156.555131][ C3] ? __pfx_selinux_ip_output+0x10/0x10 [ 156.556588][ C3] nf_hook_slow+0xbb/0x200 [ 156.558042][ C3] nf_hook+0x474/0x7d0 [ 156.559449][ C3] ? __pfx_dst_output+0x10/0x10 [ 156.561237][ C3] ? __pfx_nf_hook+0x10/0x10 [ 156.562904][ C3] ? __pfx_lock_release+0x10/0x10 [ 156.564755][ C3] ? __pfx_dst_output+0x10/0x10 [ 156.566513][ C3] ip6_xmit+0xd44/0x2130 [ 156.568061][ C3] ? __pfx_dst_output+0x10/0x10 [ 156.569840][ C3] ? __pfx_ip6_xmit+0x10/0x10 [ 156.571555][ C3] ? xfrm_lookup_route+0x6a/0x200 [ 156.573341][ C3] ? ip6_dst_lookup_flow+0x164/0x1d0 [ 156.575123][ C3] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 156.577112][ C3] tcp_v6_send_response+0x11d9/0x25e0 [ 156.578868][ C3] ? __pfx_tcp_v6_send_response+0x10/0x10 [ 156.580385][ C3] ? mark_held_locks+0x9f/0xe0 [ 156.581619][ C3] tcp_v6_rcv+0x2c9c/0x3fd0 [ 156.582771][ C3] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 156.584154][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 156.585542][ C3] ? find_held_lock+0x2d/0x110 [ 156.586831][ C3] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 156.588147][ C3] ip6_protocol_deliver_rcu+0x180/0x1510 [ 156.589653][ C3] ip6_input_finish+0x14f/0x2f0 [ 156.590957][ C3] ip6_input+0xa1/0xd0 [ 156.592213][ C3] ? __pfx_ip6_input+0x10/0x10 [ 156.593615][ C3] ipv6_rcv+0x265/0x680 [ 156.594734][ C3] ? __pfx_ipv6_rcv+0x10/0x10 [ 156.596333][ C3] __netif_receive_skb_one_core+0x12e/0x1e0 [ 156.598319][ C3] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 156.599251][T11952] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.600458][ C3] ? rcu_is_watching+0x12/0xc0 [ 156.600486][ C3] ? process_backlog+0x3f1/0x15f0 [ 156.600497][ C3] ? process_backlog+0x3f1/0x15f0 [ 156.608026][ C3] __netif_receive_skb+0x1d/0x160 [ 156.609712][ C3] process_backlog+0x443/0x15f0 [ 156.611340][ C3] __napi_poll.constprop.0+0xb7/0x550 [ 156.613161][ C3] net_rx_action+0xa94/0x1010 [ 156.614739][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 156.616468][ C3] ? __pfx_mark_lock+0x10/0x10 [ 156.618122][ C3] ? __pfx_read_tsc+0x10/0x10 [ 156.619642][ C3] ? ktime_get+0x1ac/0x300 [ 156.621027][ C3] ? kvm_sched_clock_read+0x11/0x20 [ 156.622387][ C3] ? sched_clock+0x38/0x60 [ 156.623475][ C3] ? sched_clock_cpu+0x6d/0x4d0 [ 156.624685][ C3] ? handle_softirqs+0x213/0x8f0 [ 156.625904][ C3] ? mark_held_locks+0x9f/0xe0 [ 156.627086][ C3] handle_softirqs+0x213/0x8f0 [ 156.628322][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 156.629708][ C3] ? __dev_queue_xmit+0x89b/0x43e0 [ 156.631060][ C3] do_softirq+0xb2/0xf0 [ 156.632176][ C3] [ 156.632978][ C3] [ 156.633769][ C3] __local_bh_enable_ip+0x100/0x120 [ 156.635159][ C3] ? __dev_queue_xmit+0x89b/0x43e0 [ 156.636523][ C3] __dev_queue_xmit+0x8b0/0x43e0 [ 156.637849][ C3] ? __lock_acquire+0x2077/0x3c40 [ 156.639157][ C3] ? __pfx___dev_queue_xmit+0x10/0x10 [ 156.640554][ C3] ? hlock_class+0x4e/0x130 [ 156.641763][ C3] ? mark_lock+0xb5/0xc60 [ 156.642898][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 156.644263][ C3] ? __pfx_mark_lock+0x10/0x10 [ 156.645528][ C3] ? find_held_lock+0x2d/0x110 [ 156.646795][ C3] ? mark_held_locks+0x9f/0xe0 [ 156.648075][ C3] ip6_finish_output2+0x1801/0x2070 [ 156.649458][ C3] ip6_finish_output+0x3f9/0x1360 [ 156.650774][ C3] ip6_output+0x1f8/0x540 [ 156.651916][ C3] ? __pfx_ip6_output+0x10/0x10 [ 156.653219][ C3] ip6_xmit+0x1234/0x2130 [ 156.654357][ C3] ? __pfx_ip6_xmit+0x10/0x10 [ 156.655591][ C3] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 156.657050][ C3] ? rcu_is_watching+0x12/0xc0 [ 156.658310][ C3] ? trace_lock_acquire+0x146/0x1e0 [ 156.659669][ C3] ? __pfx_mptcp_established_options+0x10/0x10 [ 156.661283][ C3] ? inet6_csk_xmit+0x18a/0x740 [ 156.662555][ C3] inet6_csk_xmit+0x3ce/0x740 [ 156.663785][ C3] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 156.665102][ C3] ? csum_ipv6_magic+0x296/0x310 [ 156.666385][ C3] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 156.667754][ C3] __tcp_transmit_skb+0x1b02/0x3df0 [ 156.669077][ C3] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 156.670515][ C3] ? __pfx_lock_release+0x10/0x10 [ 156.671807][ C3] ? ktime_get+0x206/0x300 [ 156.672929][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 156.674257][ C3] tcp_write_xmit+0x12b1/0x8560 [ 156.675469][ C3] ? tcp_current_mss+0x27e/0x500 [ 156.676734][ C3] __tcp_push_pending_frames+0xaf/0x390 [ 156.678133][ C3] tcp_send_fin+0x154/0xc70 [ 156.679279][ C3] ? __pfx_tcp_send_fin+0x10/0x10 [ 156.680511][ C3] ? mark_held_locks+0x9f/0xe0 [ 156.681713][ C3] tcp_shutdown+0x12b/0x170 [ 156.682832][ C3] mptcp_subflow_shutdown+0x1c3/0x380 [ 156.684122][ C3] mptcp_check_send_data_fin+0x24a/0x450 [ 156.685477][ C3] __mptcp_close+0x8cb/0xb90 [ 156.686616][ C3] ? __pfx_lock_release+0x10/0x10 [ 156.687923][ C3] ? __pfx___mptcp_close+0x10/0x10 [ 156.689266][ C3] ? __local_bh_enable_ip+0xa4/0x120 [ 156.690661][ C3] mptcp_close+0x28/0xe0 [ 156.691778][ C3] inet_release+0x13c/0x280 [ 156.692979][ C3] inet6_release+0x4f/0x70 [ 156.694144][ C3] __sock_release+0xb0/0x270 [ 156.695355][ C3] ? __pfx_sock_close+0x10/0x10 [ 156.696631][ C3] sock_close+0x1c/0x30 [ 156.697719][ C3] __fput+0x3f8/0xb60 [ 156.698774][ C3] task_work_run+0x14e/0x250 [ 156.699978][ C3] ? __pfx_task_work_run+0x10/0x10 [ 156.701314][ C3] ? __pfx___do_sys_close_range+0x10/0x10 [ 156.702787][ C3] syscall_exit_to_user_mode+0x27b/0x2a0 [ 156.704254][ C3] do_syscall_64+0xda/0x250 [ 156.705451][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.706983][ C3] RIP: 0033:0x7fbd8eb7e819 [ 156.708143][ C3] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.713092][ C3] RSP: 002b:00007fff39d9eb08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 156.715242][ C3] RAX: 0000000000000000 RBX: 00007fbd8ed37ba0 RCX: 00007fbd8eb7e819 [ 156.717283][ C3] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 156.719317][ C3] RBP: 00007fbd8ed37ba0 R08: 00000000000001b0 R09: 00007fff39d9edff [ 156.721351][ C3] R10: 00000000003ffc30 R11: 0000000000000246 R12: 0000000000026a95 [ 156.723272][ C3] R13: 00007fff39d9ec10 R14: 0000000000000032 R15: ffffffffffffffff [ 156.725164][ C3] [ 156.726179][ C3] [ 156.726959][ C3] The buggy address belongs to the object at ffff88805e5ca420 [ 156.726959][ C3] which belongs to the cache tw_sock_TCPv6 of size 288 [ 156.730849][ C3] The buggy address is located 120 bytes inside of [ 156.730849][ C3] allocated 288-byte region [ffff88805e5ca420, ffff88805e5ca540) [ 156.734201][ C3] [ 156.734782][ C3] The buggy address belongs to the physical page: [ 156.736325][ C3] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5e5ca [ 156.738418][ C3] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 156.740502][ C3] memcg:ffff888027124d01 [ 156.741539][ C3] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 156.743339][ C3] page_type: f5(slab) [ 156.744300][ C3] raw: 00fff00000000040 ffff888100092b40 dead000000000122 0000000000000000 [ 156.746417][ C3] raw: 0000000000000000 0000000080170017 00000001f5000000 ffff888027124d01 [ 156.748506][ C3] head: 00fff00000000040 ffff888100092b40 dead000000000122 0000000000000000 [ 156.750635][ C3] head: 0000000000000000 0000000080170017 00000001f5000000 ffff888027124d01 [ 156.752854][ C3] head: 00fff00000000001 ffffea0001797281 ffffffffffffffff 0000000000000000 [ 156.755071][ C3] head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 156.757289][ C3] page dumped because: kasan: bad access detected [ 156.758930][ C3] page_owner tracks the page as allocated [ 156.760390][ C3] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 34, tgid 34 (ksoftirqd/3), ts 155406509353, free_ts 155303506267 [ 156.765185][ C3] post_alloc_hook+0x2d1/0x350 [ 156.766440][ C3] get_page_from_freelist+0xfce/0x2f80 [ 156.767847][ C3] __alloc_pages_noprof+0x223/0x25a0 [ 156.769240][ C3] alloc_pages_mpol_noprof+0x2c9/0x610 [ 156.770652][ C3] new_slab+0x2c9/0x410 [ 156.771751][ C3] ___slab_alloc+0xdac/0x1880 [ 156.773023][ C3] __slab_alloc.constprop.0+0x56/0xb0 [ 156.774437][ C3] kmem_cache_alloc_noprof+0x2a7/0x2f0 [ 156.775875][ C3] inet_twsk_alloc+0x120/0x970 [ 156.777126][ C3] tcp_time_wait+0x5f/0xe10 [ 156.778357][ C3] tcp_rcv_state_process+0x4935/0x4c40 [ 156.779784][ C3] tcp_v6_do_rcv+0x492/0x1730 [ 156.781068][ C3] tcp_v6_rcv+0x30b3/0x3fd0 [ 156.782261][ C3] ip6_protocol_deliver_rcu+0x180/0x1510 [ 156.783653][ C3] ip6_input_finish+0x14f/0x2f0 [ 156.784949][ C3] ip6_input+0xa1/0xd0 [ 156.786014][ C3] page last free pid 11888 tgid 11887 stack trace: [ 156.787682][ C3] free_unref_page+0x661/0x1080 [ 156.788966][ C3] qlist_free_all+0x4e/0x120 [ 156.790120][ C3] kasan_quarantine_reduce+0x195/0x1e0 [ 156.791556][ C3] __kasan_slab_alloc+0x69/0x90 [ 156.792835][ C3] __kmalloc_cache_noprof+0x11e/0x300 [ 156.794074][ C3] ref_tracker_alloc+0x17c/0x5b0 [ 156.795368][ C3] net_rx_queue_update_kobjects+0x284/0x5f0 [ 156.796908][ C3] netdev_register_kobject+0x26d/0x3f0 [ 156.798324][ C3] register_netdevice+0x1473/0x1e90 [ 156.799675][ C3] veth_newlink+0x436/0xa30 [ 156.800859][ C3] rtnl_newlink+0xb88/0x1c50 [ 156.802058][ C3] rtnetlink_rcv_msg+0x95b/0xea0 [ 156.803321][ C3] netlink_rcv_skb+0x16b/0x440 [ 156.804581][ C3] netlink_unicast+0x53c/0x7f0 [ 156.805819][ C3] netlink_sendmsg+0x8b8/0xd70 [ 156.807069][ C3] ____sys_sendmsg+0xaaf/0xc90 [ 156.808305][ C3] [ 156.808932][ C3] Memory state around the buggy address: [ 156.810381][ C3] ffff88805e5ca380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 156.812450][ C3] ffff88805e5ca400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 156.814528][ C3] >ffff88805e5ca480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 156.816596][ C3] ^ [ 156.817884][ C3] ffff88805e5ca500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 156.819932][ C3] ffff88805e5ca580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 156.821990][ C3] ================================================================== [ 156.824178][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 156.826036][ C3] CPU: 3 UID: 0 PID: 11861 Comm: syz.5.1477 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 156.828679][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 156.831408][ C3] Call Trace: [ 156.832272][ C3] [ 156.833023][ C3] dump_stack_lvl+0x3d/0x1f0 [ 156.834233][ C3] panic+0x71d/0x800 [ 156.835259][ C3] ? __pfx_panic+0x10/0x10 [ 156.836421][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 156.837769][ C3] check_panic_on_warn+0xab/0xb0 [ 156.839055][ C3] end_report+0x117/0x180 [ 156.840182][ C3] kasan_report+0xe9/0x110 [ 156.841350][ C3] ? selinux_ip_output+0x1e0/0x1f0 [ 156.842677][ C3] ? selinux_ip_output+0x1e0/0x1f0 [ 156.844000][ C3] selinux_ip_output+0x1e0/0x1f0 [ 156.845289][ C3] ? __pfx_selinux_ip_output+0x10/0x10 [ 156.846685][ C3] nf_hook_slow+0xbb/0x200 [ 156.847862][ C3] nf_hook+0x474/0x7d0 [ 156.848933][ C3] ? __pfx_dst_output+0x10/0x10 [ 156.850199][ C3] ? __pfx_nf_hook+0x10/0x10 [ 156.851403][ C3] ? __pfx_lock_release+0x10/0x10 [ 156.852715][ C3] ? __pfx_dst_output+0x10/0x10 [ 156.853986][ C3] ip6_xmit+0xd44/0x2130 [ 156.855092][ C3] ? __pfx_dst_output+0x10/0x10 [ 156.856367][ C3] ? __pfx_ip6_xmit+0x10/0x10 [ 156.857599][ C3] ? xfrm_lookup_route+0x6a/0x200 [ 156.858899][ C3] ? ip6_dst_lookup_flow+0x164/0x1d0 [ 156.860266][ C3] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 156.861728][ C3] tcp_v6_send_response+0x11d9/0x25e0 [ 156.863115][ C3] ? __pfx_tcp_v6_send_response+0x10/0x10 [ 156.864602][ C3] ? mark_held_locks+0x9f/0xe0 [ 156.865843][ C3] tcp_v6_rcv+0x2c9c/0x3fd0 [ 156.867035][ C3] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 156.868298][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 156.869641][ C3] ? find_held_lock+0x2d/0x110 [ 156.870895][ C3] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 156.872173][ C3] ip6_protocol_deliver_rcu+0x180/0x1510 [ 156.873635][ C3] ip6_input_finish+0x14f/0x2f0 [ 156.874905][ C3] ip6_input+0xa1/0xd0 [ 156.875970][ C3] ? __pfx_ip6_input+0x10/0x10 [ 156.877230][ C3] ipv6_rcv+0x265/0x680 [ 156.878319][ C3] ? __pfx_ipv6_rcv+0x10/0x10 [ 156.879544][ C3] __netif_receive_skb_one_core+0x12e/0x1e0 [ 156.881075][ C3] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 156.882730][ C3] ? rcu_is_watching+0x12/0xc0 [ 156.883981][ C3] ? process_backlog+0x3f1/0x15f0 [ 156.885310][ C3] ? process_backlog+0x3f1/0x15f0 [ 156.886625][ C3] __netif_receive_skb+0x1d/0x160 [ 156.887922][ C3] process_backlog+0x443/0x15f0 [ 156.889194][ C3] __napi_poll.constprop.0+0xb7/0x550 [ 156.890574][ C3] net_rx_action+0xa94/0x1010 [ 156.891808][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 156.893140][ C3] ? __pfx_mark_lock+0x10/0x10 [ 156.894379][ C3] ? __pfx_read_tsc+0x10/0x10 [ 156.895602][ C3] ? ktime_get+0x1ac/0x300 [ 156.896771][ C3] ? kvm_sched_clock_read+0x11/0x20 [ 156.898119][ C3] ? sched_clock+0x38/0x60 [ 156.899315][ C3] ? sched_clock_cpu+0x6d/0x4d0 [ 156.900537][ C3] ? handle_softirqs+0x213/0x8f0 [ 156.902005][ C3] ? mark_held_locks+0x9f/0xe0 [ 156.903629][ C3] handle_softirqs+0x213/0x8f0 [ 156.905272][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 156.907037][ C3] ? __dev_queue_xmit+0x89b/0x43e0 [ 156.908748][ C3] do_softirq+0xb2/0xf0 [ 156.910171][ C3] [ 156.911181][ C3] [ 156.912177][ C3] __local_bh_enable_ip+0x100/0x120 [ 156.913941][ C3] ? __dev_queue_xmit+0x89b/0x43e0 [ 156.915675][ C3] __dev_queue_xmit+0x8b0/0x43e0 [ 156.917358][ C3] ? __lock_acquire+0x2077/0x3c40 [ 156.919050][ C3] ? __pfx___dev_queue_xmit+0x10/0x10 [ 156.920870][ C3] ? hlock_class+0x4e/0x130 [ 156.922402][ C3] ? mark_lock+0xb5/0xc60 [ 156.923848][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 156.925596][ C3] ? __pfx_mark_lock+0x10/0x10 [ 156.927224][ C3] ? find_held_lock+0x2d/0x110 [ 156.928848][ C3] ? mark_held_locks+0x9f/0xe0 [ 156.930463][ C3] ip6_finish_output2+0x1801/0x2070 [ 156.932223][ C3] ip6_finish_output+0x3f9/0x1360 [ 156.933915][ C3] ip6_output+0x1f8/0x540 [ 156.935370][ C3] ? __pfx_ip6_output+0x10/0x10 [ 156.937011][ C3] ip6_xmit+0x1234/0x2130 [ 156.938473][ C3] ? __pfx_ip6_xmit+0x10/0x10 [ 156.940057][ C3] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 156.941948][ C3] ? rcu_is_watching+0x12/0xc0 [ 156.943561][ C3] ? trace_lock_acquire+0x146/0x1e0 [ 156.945313][ C3] ? __pfx_mptcp_established_options+0x10/0x10 [ 156.947369][ C3] ? inet6_csk_xmit+0x18a/0x740 [ 156.949013][ C3] inet6_csk_xmit+0x3ce/0x740 [ 156.950588][ C3] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 156.952339][ C3] ? csum_ipv6_magic+0x296/0x310 [ 156.953983][ C3] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 156.955497][ C3] __tcp_transmit_skb+0x1b02/0x3df0 [ 156.956881][ C3] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 156.958332][ C3] ? __pfx_lock_release+0x10/0x10 [ 156.959654][ C3] ? ktime_get+0x206/0x300 [ 156.960840][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 156.962199][ C3] tcp_write_xmit+0x12b1/0x8560 [ 156.963477][ C3] ? tcp_current_mss+0x27e/0x500 [ 156.964798][ C3] __tcp_push_pending_frames+0xaf/0x390 [ 156.966271][ C3] tcp_send_fin+0x154/0xc70 [ 156.967463][ C3] ? __pfx_tcp_send_fin+0x10/0x10 [ 156.968796][ C3] ? mark_held_locks+0x9f/0xe0 [ 156.970053][ C3] tcp_shutdown+0x12b/0x170 [ 156.971262][ C3] mptcp_subflow_shutdown+0x1c3/0x380 [ 156.972676][ C3] mptcp_check_send_data_fin+0x24a/0x450 [ 156.974141][ C3] __mptcp_close+0x8cb/0xb90 [ 156.975576][ C3] ? __pfx_lock_release+0x10/0x10 [ 156.977299][ C3] ? __pfx___mptcp_close+0x10/0x10 [ 156.979013][ C3] ? __local_bh_enable_ip+0xa4/0x120 [ 156.980789][ C3] mptcp_close+0x28/0xe0 [ 156.982211][ C3] inet_release+0x13c/0x280 [ 156.983730][ C3] inet6_release+0x4f/0x70 [ 156.985240][ C3] __sock_release+0xb0/0x270 [ 156.986795][ C3] ? __pfx_sock_close+0x10/0x10 [ 156.988425][ C3] sock_close+0x1c/0x30 [ 156.989834][ C3] __fput+0x3f8/0xb60 [ 156.991205][ C3] task_work_run+0x14e/0x250 [ 156.992764][ C3] ? __pfx_task_work_run+0x10/0x10 [ 156.994481][ C3] ? __pfx___do_sys_close_range+0x10/0x10 [ 156.996382][ C3] syscall_exit_to_user_mode+0x27b/0x2a0 [ 156.998260][ C3] do_syscall_64+0xda/0x250 [ 156.999858][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.001908][ C3] RIP: 0033:0x7fbd8eb7e819 [ 157.003097][ C3] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.008133][ C3] RSP: 002b:00007fff39d9eb08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 157.010336][ C3] RAX: 0000000000000000 RBX: 00007fbd8ed37ba0 RCX: 00007fbd8eb7e819 [ 157.012412][ C3] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 157.014482][ C3] RBP: 00007fbd8ed37ba0 R08: 00000000000001b0 R09: 00007fff39d9edff [ 157.016545][ C3] R10: 00000000003ffc30 R11: 0000000000000246 R12: 0000000000026a95 [ 157.018619][ C3] R13: 00007fff39d9ec10 R14: 0000000000000032 R15: ffffffffffffffff [ 157.020692][ C3] [ 157.022089][ C3] Kernel Offset: disabled [ 157.023192][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:49:51 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=1ffff92000aebe79 RCX=000000001f7a41b1 RDX=0000000000000001 RSI=0000000000000001 RDI=ffffffff96e4bae8 RBP=ffffffff96e4cbd8 RSP=ffffc9000575f338 R8 =0000000000000000 R9 =fffffbfff2dc9398 R10=ffffffff96e49cc7 R11=0000000000000003 R12=ffffed1009e0da6b R13=ffff88804f06c880 R14=0000000000000003 R15=ffff88804f06d3d8 RIP=ffffffff816b31b8 RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f44a3737bac CR3=000000003fb50000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200000000000000 000001001f000001 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33baff25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33baff2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33baff2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33baff2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33baff269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33baff277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33bb10c488 00007f33bb10c480 00007f33bb10c478 00007f33bb10c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33bbc6d100 00007f33bb10c440 00007f33bb100004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33bb10c498 00007f33bb10c490 00007f33bb10c488 00007f33bb10c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 0000000000000000 0000000000000000 0000000000000220 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000021 RCX=0000000000000004 RDX=1ffff11005192a75 RSI=0000000000000008 RDI=ffffffff96e49cc0 RBP=ffffc900045df128 RSP=ffffc900045defe0 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff96e49cff R11=0000000000000067 R12=ffff888028c94880 R13=0000000000000200 R14=0000000000000009 R15=1ffff920008bbe04 RIP=ffffffff816a7e99 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1c79867d60 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c78d0c6a3 00007f1c78d0c6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb28f3a00 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557decc498 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557dece01e 000055557decdff0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03ffffffff040010 0003ffffffff0400 10000c044cce0810 0205000401ee8208 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000000080606 0116e80008000803 1808000003000400 00080002800401c7 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03ffffffff040010 0003ffffffff0400 10000c044cce0810 0205000401ee8208 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01328600100001d8 1000048080808104 06012a9a03ffffff ff0403ffffffff04 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0103ffffffff040d 8004001000000800 080150a409c4da80 10000db003001000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000169ce5 RBX=0000000000000002 RCX=ffffffff8b24ee99 RDX=0000000000000000 RSI=ffffffff8b6cdee0 RDI=ffffffff8bd0e980 RBP=ffffed1003ad4000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d6a0000 R14=ffffffff905f5c10 R15=0000000000000000 RIP=ffffffff8b25027f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555578e97808 CR3=0000000025630000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1b622d20 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44a35f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44a35f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44a35f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44a35f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44a35f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44a35f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000010c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 000000000000010c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85067b60 RDI=ffffffff9ab05bc0 RBP=ffffffff9ab05b80 RSP=ffffc90000707cd0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff3560bca R15=dffffc0000000000 RIP=ffffffff85067b87 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555576e6a500 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc1b621fc0 CR3=0000000030d5c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00316c6e747a7973 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47727f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47727f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47727f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47727f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47727f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47727f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f477290c488 00007f477290c480 00007f477290c478 00007f477290c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f477346d100 00007f477290c440 00007f4772900004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f477290c498 00007f477290c490 00007f477290c488 00007f477290c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000