last executing test programs: 3m44.10380084s ago: executing program 1 (id=341): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002dde72ffdbd6f7b0000000000000000000000000000000000000000000000000000000000000000000020000"], 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 3m43.994819927s ago: executing program 1 (id=343): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb0100180000000000000093000000930000000b000000070000000000000c030000000f0000000000000b01000000070000000000000b030000000400000000000009050000000f0000000500000f03000000040000000e0000000600000005000000ff00000001ddff7f03000000000001000400000004000000030000008100000001000000c300000001000100c4df8a1000000000000008000000000d00000000000007000000000000000061615f5f2e610000"], &(0x7f0000000480)=""/23, 0xb7, 0x17, 0x1, 0x0, 0x10000, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61124c000000000061134d0000000000bf2000000000000007000000150400003d0301"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000240)=""/118, 0x76}, {&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f00000002c0)=""/87, 0x57}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000000540)=""/251, 0xfb}], 0x9}, 0x40000000) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x10) (rerun: 32) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90824fc60040f170147000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3m43.991108175s ago: executing program 1 (id=345): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) 3m43.94241656s ago: executing program 1 (id=347): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) r1 = socket$kcm(0x10, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) r2 = syz_io_uring_complete(0x0) sendto$packet(r2, &(0x7f0000000040)="f670699d7122964a58cd0a7b4717925aa58ae85c51de2470444663fc9830d75111be9978c050995a4e35e4", 0x2b, 0x20081, &(0x7f0000000080)={0x11, 0x19, 0x0, 0x1, 0x3, 0x6, @multicast}, 0x14) socket$rds(0x15, 0x5, 0x0) (async) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) (async) socket$kcm(0x10, 0x0, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) (async) syz_io_uring_complete(0x0) (async) sendto$packet(r2, &(0x7f0000000040)="f670699d7122964a58cd0a7b4717925aa58ae85c51de2470444663fc9830d75111be9978c050995a4e35e4", 0x2b, 0x20081, &(0x7f0000000080)={0x11, 0x19, 0x0, 0x1, 0x3, 0x6, @multicast}, 0x14) (async) 3m43.88374442s ago: executing program 1 (id=349): r0 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r0, &(0x7f0000001c80)=[{{&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)=""/238, 0xee}, {&(0x7f0000000040)=""/27, 0x1b}, {&(0x7f0000000240)=""/33, 0x21}, {&(0x7f0000000280)=""/162, 0xa2}, {&(0x7f0000000340)=""/114, 0x72}, {&(0x7f00000003c0)=""/62, 0x3e}], 0x6, &(0x7f0000000640)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000500)=""/144, 0x90}, {&(0x7f0000001640)=""/103, 0x67}, {&(0x7f00000016c0)=""/204, 0xcc}, {&(0x7f00000005c0)=""/4, 0x4}, {&(0x7f00000017c0)=""/8, 0x8}, {&(0x7f0000001800)=""/235, 0xeb}, {&(0x7f0000001900)=""/10, 0xa}, {&(0x7f0000001940)=""/248, 0xf8}, {&(0x7f0000001a40)=""/198, 0xc6}], 0x9, &(0x7f0000001c00)=""/103, 0x67}, 0x400}], 0x2, 0x2, &(0x7f0000001d00)={0x0, 0x989680}) recvmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e0021001000000002800000121f", 0x2e}], 0x1}, 0x0) 3m43.053765684s ago: executing program 1 (id=370): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) close_range(r1, r2, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f0000000000)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000000)) 3m28.035339638s ago: executing program 32 (id=370): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) close_range(r1, r2, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f0000000000)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000000)) 2m16.41407819s ago: executing program 4 (id=1582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@delqdisc={0x1a8, 0x25, 0x200, 0x70bd2a, 0x25dfdb01, {0x0, 0x0, 0x0, r2, {0x4, 0x5}, {0xf, 0x2}, {0x5}}, [@TCA_STAB={0x130, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0xfa, 0x2, 0x4, 0x0, 0x1, 0x4, 0x3}}, {0xa, 0x2, [0x9, 0xf, 0x7f]}}, {{0x1c, 0x1, {0x3, 0xe, 0x5, 0xfff, 0x2, 0x6, 0x4, 0x5}}, {0xe, 0x2, [0x8, 0x2, 0x8, 0x7, 0x40]}}, {{0x1c, 0x1, {0x9, 0xf5, 0x7fff, 0x0, 0x2, 0x4, 0xd7, 0x4}}, {0xc, 0x2, [0x1, 0xff, 0x80, 0x2]}}, {{0x1c, 0x1, {0x5, 0x5, 0x7, 0x100, 0x0, 0xe2a, 0x7ff, 0x5}}, {0xe, 0x2, [0x5145, 0x4, 0x3b2c, 0xffff, 0x6]}}, {{0x11, 0x1, {0x40, 0x1, 0xb81, 0x3ff, 0x1, 0x4, 0x7ff}}, {0xfffffe5e}}, {{0x1c, 0x1, {0x80, 0x6, 0xa, 0x5, 0x0, 0x766109ec, 0x3, 0x7}}, {0x12, 0x2, [0xad, 0x85, 0x7, 0x7, 0x4, 0x80, 0x5]}}, {{0x1c, 0x1, {0x44, 0x6, 0x200, 0xb, 0x0, 0x8, 0x3ff, 0x9}}, {0x16, 0x2, [0x3, 0x8, 0x10, 0x3, 0x9, 0x3, 0x8, 0x3, 0x9]}}]}, @qdisc_kind_options=@q_hhf={{0x8}, {0x4c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x3d}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x1000}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x7}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xfff}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xffffffff}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x80000000}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x7}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x3}]}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000880}, 0x40040) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x10000) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0xfffffffe, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f000008e000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000280)="650f3566b9800000c00f326635008000000f3066b9b50000400f320f80ee0066b9800000c00f326635000100000f306536640f01d10fc7ae7f03660f58d0805b210066b8000000000f23c00f21f86635010002000f23f8", 0x57}], 0x1, 0x0, 0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) (async) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000180)={0xa4, 0x0, 0x1}) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) r8 = eventfd(0x2000001) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000140)={r8, 0x1, 0x0, r8}) (async) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000080)={r8, 0x1}) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r7, 0x4068aea3, &(0x7f0000000300)={0xed, 0x0, 0x2}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m16.284019706s ago: executing program 4 (id=1583): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x1f, 0x4) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r2 = gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000004a40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8958249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4537], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="1a1500000000000900000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, @NFT_MSG_DELOBJ={0x58, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x104, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELOBJ={0x1d4, 0x14, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x74, 0x8, "c2073d78d5b4071fd1651d3b5da4198ccce6f3e85044adf9844754564c4351a2707131d70ad9367371849cc584e092b7d2084b2cc144738db9df7d02135a15ae5be1b9c1651674174624bf0bbb62065f2c308748de07791742a8f683b329bd63c34b1a7a3960cbad2f5489e8027f184c"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xf3, 0x8, "2e4485586a47b7da4b4b08eb2143204f34b63c9e7061c50fb04f66a09951764b3958ef03146889bde718d33d143b235ee9fa3d08061f0da4ad3df4b090dacd06056fc2c47481401e79f23ed0c59f4ef053d2d8a2f8cd17d1a28b8ed041b59336f80f6a6f40179bc797672206cd8c7b8fef8b9a8ed07b757015e0e2c41b15449c2ec046335d0c4a6941bdbd3c8e7ddf6a6794120039d49e0b7556fe6f8bd6adf286d7b37409dfdd2bfc28b8058ec175a51c08c228b420c8bca2696e874d51383e45f7b33a410364b282590dba860893fe925bc307010a9584df8754e3206fb32c843deb6402f354e7c1fad3a3dc5985"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x84, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2c3b}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x7, 0x6, "94958e"}, @NFTA_TABLE_USERDATA={0x5e, 0x6, "1baaf58a1c106432a54d7ad16410de050517aae2d294c2e3b3fdb95666a299516b6525607d5e70d9935e00f634a0dde5514eaa8baefeb1a016b1bc394429271c5a1fbf6ac22ae97c041bc28ba31d90adc187e1def0e6baf0d52c"}]}, @NFT_MSG_DELOBJ={0x58, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_OBJ_USERDATA={0x37, 0x8, "bed10b0bd12353e1ca80a9df5bc3c5e4127c1d275603b51376675d362b3152d626a652105ee827888774cfdd78b66edc377b9f"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3f4}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4058000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r3, r6, 0x2f, 0x2038, 0x4, @void, @void, @value=r7}, 0x20) sigaltstack(&(0x7f0000000080)={&(0x7f0000001200)=""/4096, 0x0, 0x1000}, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000100)) rt_sigqueueinfo(r2, 0x21, &(0x7f0000000000)) 2m16.28324626s ago: executing program 4 (id=1584): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, r2, 0xfbfbfbfb}) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40010, r1, 0xf7fd8000) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x1, 0x2, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f00000003c0)=r3) (async) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000400), 0x220000, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000440)={@private, @rand_addr, 0x0}, &(0x7f0000000480)=0xc) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@private}}, &(0x7f00000005c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000600)={{{@in=@loopback, @in=@broadcast, 0x4e21, 0x0, 0x4e20, 0x1, 0x2, 0xa0, 0xa0, 0x21, r5, r7}, {0xffffffffffffff47, 0x1, 0x4000000000, 0x2, 0x4, 0x40, 0x7, 0xfffffffffffffffb}, {0x49df, 0x5, 0x9, 0xa}, 0x1000, 0x6e6bb4, 0x1, 0x0, 0x1, 0x3}, {{@in6=@mcast1, 0x4d5, 0x33}, 0xa, @in=@local, 0x3502, 0x4, 0x1, 0xf, 0x1ff, 0x6, 0xfffffffc}}, 0xe8) (async) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000700)) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r4, r8, &(0x7f0000000740)=0x6be, 0x8) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000780), 0x244002, 0x0) (async) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f00000007c0)=0x0) move_pages(r9, 0x5, &(0x7f0000000800)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000840)=[0xfffffffc, 0x8], &(0x7f0000000880)=[0x0, 0x0], 0x2) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000008c0)={0x2, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000900)={0x0, r10}) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000940)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x9, 0x10000, 0x1, 0x9175, 0x4, 0x900}, {0x6, 0x8, 0x3, 0x45f6, 0x2, 0x8}], ['\x00', '\x00']}) (async) getpid() (async) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r8, {0x337}}, './file0\x00'}) ioctl$VIDIOC_G_EXT_CTRLS(r11, 0xc0205647, &(0x7f0000000b00)={0x9d0000, 0x3, 0x10001, r4, 0x0, &(0x7f0000000ac0)={0x9a0907, 0x40, '\x00', @ptr=0x100000001}}) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r4) sendmsg$ETHTOOL_MSG_PAUSE_GET(r11, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xb0, r12, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) syz_open_dev$evdev(&(0x7f0000000d00), 0x10000, 0x300440) (async) ioctl$DRM_IOCTL_SET_VERSION(r11, 0xc0106407, &(0x7f0000000d40)={0xe, 0x8000, 0xfffffffd, 0x38}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x39}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2m16.204246315s ago: executing program 4 (id=1585): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000340)=@sg0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000003c0)='aio\x00', 0x800001, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) shutdown(r0, 0x1) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) mount$nfs(&(0x7f0000000040)='sysfs\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000180), 0x1000000, &(0x7f0000000240)={[{'\x00'}, {'[!\'-/'}, {'tmpfs\x00'}, {'sysfs\x00'}, {'sysfs\x00'}, {'{-\a@&{\x15'}, {'sysfs\x00'}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) fcntl$setstatus(r1, 0x4, 0x4a400) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0/../file0/../file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x12a) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x10000, &(0x7f0000000200)=ANY=[@ANYRES8=0x0]) 2m16.202575532s ago: executing program 4 (id=1586): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0xc8080, 0x40) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x100) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000003440), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) 2m15.864477912s ago: executing program 4 (id=1587): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)={0x40, r0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20008050) socket$kcm(0x29, 0x2, 0x0) 2m15.843146013s ago: executing program 33 (id=1587): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154400000000006113500000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916480000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d00180000032c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472fc445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea25940790deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3d3f43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e8131a678d15640604c89e759d34de0459a61e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046972cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe00000000000000000000000000c5201233489defaaac665fe9adc67c38af110de35b65a008125b0b9c8d5c23eed0c360ec22596d79ff75e2be697f7ba58cf772c9a23f1a2b5aae1928f3c7c607dbc766159c2ee07f788a58fcbfa3b042741991c3a72f26ce65d58c03431e881f93d6a54f7268c95070ef3d244f2520cbce2cc4880516f2e62adcffbc217619f81bb6f81140f96e65c1887f0f1373a4499d4cd566feadee7f66c0caf5773ef8c468dc3cbfdae35b11ecc81b6344c19d2b5d05063b19c99e21eabadec66382a44631bb908c00000000"], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)={0x40, r0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20008050) socket$kcm(0x29, 0x2, 0x0) 1m36.783856309s ago: executing program 5 (id=2279): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) poll(&(0x7f0000000080)=[{r0, 0x1101}], 0x1, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) write$tcp_congestion(r3, &(0x7f0000000100)='reno\x00', 0x4) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b31cc2fae8bbae014f68d481d78af068bda81d336a7ba6d96ae246df0996d698abdd519da93a0000000001000000110908e51ea6733a4acb880ba5c3d72ad3f0a5621257c60b5333bee1a2bef49ef6a4604f3fbe2623da5e84e8b3d1855ffefc88ae323f55bae734400e040f51dbef7805b856b7cc0810f358733cad65978e327aa0f68dd21333d9ed293c84621d77c2b48dc6c9dfcecf5e6be5474253c88cf8d0ebfa76aa89d6e480c3ec58ebd087dff9445a99ce04b95c7f9f0b3368b86cf187a96d50de93dfe15667160cb12fc5d9ac645964f346c0de3f9ed4b64339", @ANYRES16=r2, @ANYBLOB="010025bd7000fddbde250200000008000600ac1414bb"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x80) 1m36.722488839s ago: executing program 5 (id=2282): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/141, 0x8d}], 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x7}}, './cgroup\x00'}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2b, 0x1, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d", 0x14) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x1000}, &(0x7f00000000c0)=0x8) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xfff1, 0xffff}, {0x1b6dd91e85e94ce1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@delchain={0x34, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x8, 0xffff}, {0x0, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x44004) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getaddr={0x20, 0x16, 0x8, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0xe1, 0xff, r9}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xb}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4040) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='nfs\x00', 0x1218081, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000000)=0x0) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f00000002c0), &(0x7f0000000380)=0x4) timer_create(0x6, &(0x7f0000000040)={0x0, 0x2c, 0x4, @tid=r10}, &(0x7f0000000140)) 1m36.643799461s ago: executing program 5 (id=2284): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @timestamp, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) (async) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) (async) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 1m36.643109512s ago: executing program 5 (id=2286): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x510, 0xffffffff, 0x210, 0x210, 0xd0, 0xffffffff, 0xffffffff, 0x440, 0x440, 0x440, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x100, 0x140, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d5], 0xffff, 0x89, 0x1}}, @common=@icmp6={{0x28}, {0x0, "feed"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x7, {0x7f}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff000000, 0x1000000fe], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth0_to_bond\x00', 'bridge_slave_1\x00', {}, {}, 0x8, 0x9, 0x4, 0x4}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@ipv6header={{0x28}, {0x8, 0x92, 0x1}}, @common=@rt={{0x138}, {0x4, [0x8, 0x7f], 0xffffffff, 0x10, 0x6, [@remote, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0xd}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private1, @loopback, @private2, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @empty], 0x6}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf8c, 0xfffd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r1 = getpid() getpgid(r1) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x48340, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0x5) dup(r2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8926, 0x0) tkill(r0, 0x12) ptrace(0x4208, r0) open(&(0x7f0000000040)='./file1\x00', 0x8aabf, 0x186) 1m36.483931603s ago: executing program 5 (id=2289): r0 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000040b7030000000000008500000006000000870000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0xd2, &(0x7f0000000140)=""/210, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) 1m35.993801793s ago: executing program 5 (id=2301): r0 = epoll_create1(0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) syz_open_dev$video4linux(&(0x7f00000001c0), 0xff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa0028000}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa0028000}) 1m35.953976165s ago: executing program 34 (id=2301): r0 = epoll_create1(0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) syz_open_dev$video4linux(&(0x7f00000001c0), 0xff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa0028000}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa0028000}) 26.330572512s ago: executing program 2 (id=3497): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(r0, 0x9) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1a}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x48, "ee4281fd0f87caec917d5ec6d12f40c622068578953a30fcad4727aa911e957484263a7ed271300e8ecbf2a23e11abd6727fc0fc6754af036afea017af71fd53e90e5e201aa61911"}, &(0x7f0000000280)=0x50) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r6, 0xffffff80}, 0x8) r7 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000300), 0x240800, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r7) syz_genetlink_get_family_id$net_dm(&(0x7f0000000380), r2) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r7, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x178, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x13e, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0xf, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7}, @device_a, @device_a, @initial, {0xf, 0xff6}, "", @value={0x7, 0x0, 0x0, 0x0, 0x6}, @value=@ver_80211n={0x0, 0xd, 0x2, 0x3, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_a, 0xf, "3ba918d4e470865c88308963838e83"}, {@device_a, @device_a, 0x87, "f3eb2cadf63fe08df3e91560bdc049a8046c31f1b368e475c38e6405bc1624accc3adbafd953c28117ec721681bbb1f4253a6866905e433ea530571e39bfc1dc33bf2455ff71413a8dca4a7cfc8f279b38ec738b2b644632e5ec22075fcb44cdc27b8861db36ee18602c6697ac4664ed6c3ebf895b1c2a2db0081541136a0d77a2fa9daece6bec"}, {@broadcast, @device_a, 0x55, "9f2b51b0909cae8a2111f7efb8b52c5d55d6fb145103327b14ac61b9e5e3e6c72bf8bc36b416a993facd91d657ba6880bca3906c506fc747076466c3f0cd0c7c69de7f65d7be09d2664b78bdc2e5f6b59bada514e3"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x892f}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x178}, 0x1, 0x0, 0x0, 0x80c3}, 0x20000804) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)=@bridge_setlink={0xc4, 0x13, 0x4, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x400, 0x12460}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0xde}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x2}, @IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0x7f}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}, @IFLA_IPOIB_MODE={0x6, 0x2, 0x1}, @IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0x1}, @IFLA_IPOIB_MODE={0x6, 0x2, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gretap0\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3df81}, @IFLA_LINKMODE={0x5, 0x11, 0x5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10, r7, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x80, &(0x7f00000007c0)=0x2, 0x0, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = socket(0x1f, 0x6, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000800)={'wlan1\x00'}) getsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000f40)={@private, @empty, 0x0}, &(0x7f0000000f80)=0xc) sendmmsg$inet6(r7, &(0x7f00000011c0)=[{{&(0x7f0000000840)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000880)="d5a207796bf8af343d658630025741c2879d8bb60827e14ba6a982151c20f1744f9718d64797971b0d452280b2271c0c035367c5ad2d8e499a2caa749ec4e99ae6369ee24bc9e2ec782cce2342526a35cc8a36615e80cd169bd59ea41f5cae41af2a23", 0x63}, {&(0x7f0000000900)="98cca33cb859a1749702e822a079ddadd37c093dcf5f8dafb22d5ac975a8bf9c207a32ed95c1", 0x26}], 0x2, &(0x7f0000000980)=[@flowinfo={{0x14, 0x29, 0xb, 0x100}}, @dstopts={{0x20, 0x29, 0x37, {0x84, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x5}]}}}, @dstopts_2292={{0x140, 0x29, 0x4, {0xea, 0x24, '\x00', [@generic={0x40, 0x65, "a67807482375194ed8ee22a9d0d6ff4c915ed54b3980956040afd8d988071c5668ac0039d08dea597c1b0405ea28356203bf1bc6074a76168f7d0bd221d55899bc7f41dc2098aea77785195a2198dfe3ebdf64124d1b1fcfcb7b3b1771a5b6615354524502"}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x8, 0x79, "9403013ae4a2ff3f68921569c1ea3a9e6bf870cceb8e1fed587836522af497e2587908bc983b7aed84679531e2cda7fb9c5687b90207e0684ff0838b5d692188b8c941c135fb92c8b1bf70f09a19f07db4055aec063d8fbf152c28aca8ef1be5cd45e4ee6cf75f73095dce61563514fafa0644a23274442a0e"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x2, 0xa, 0xfa, 0x2, [0x4, 0x7f, 0xd, 0x7efc, 0x8]}}, @ra]}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x35}}}}, @flowinfo={{0x14, 0x29, 0xb, 0x101}}, @rthdrdstopts={{0x1a0, 0x29, 0x37, {0x1, 0x30, '\x00', [@hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0x4}, @generic={0x8, 0x62, "f6c3f075191abda956aeff33a205c7d875651eef6f78762427fdcdfaa2d087c353c4172e9080d827f0c344146789abe090b4af0fd3db32f14a1e569b83ab333fb564341dd9ee4d33beb327d923d2502d1b3ecb95ed461696de8eed9b93bbaf0b0421"}, @generic={0x5, 0xff, "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"}, @ra={0x5, 0x2, 0xb0}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x29, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, @rand_addr=' \x01\x00']}}}, @hopopts_2292={{0xf8, 0x29, 0x36, {0x33, 0x1b, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2c}}, @enc_lim={0x4, 0x1, 0x20}, @hao={0xc9, 0x10, @private0}, @generic={0x2, 0xb0, "51389850deea26ba1fe3ef498b373c6eae6954927cfcdd2cc067f8039b7242ee3fe14472e4ef095a384df5dec67207f161578578b2f335ef4516f54d50c692730751c7affa8724540bc05f8acbe56d1abce7ca1f8a6bc9f1ed01a725f6adb70e2438c7cf98b87443437efe06a60ee7aa14d82749e1214e24b88de32e85fae98786b64338445b80d1e7cf9aeea20018bd9f65932548768a8869148a3b2f4d3b9268ecff0ba9d82f04b9fc31743bfd9f24"}]}}}], 0x488}}, {{&(0x7f0000000e40)={0xa, 0x4e21, 0x7, @mcast1, 0xff1}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000e80)="230d7a7dcd5ed95a74b19d05f2402b838359518708c4568e89ec59cbf74e52f19cde33e736eb43f6b651e3870ccf1923a96deca75669efa681474bda3560efb6c6f4f69338a31efd12f8", 0x4a}], 0x1, &(0x7f0000000fc0)=[@hopopts_2292={{0xd8, 0x29, 0x36, {0x0, 0x17, '\x00', [@generic={0xcc, 0xb9, "e3b9c2b58e1249d389f182b434b0bd6dba2a06c3a7c93889613dfe981bfefa11057c74839e2eaaf64c5817c1c9ee2da5b1db0d2d8d2fcb6aef7a7179ff020076673793f9aa16794933da9510759d81f1b2a2f94a9e1f221f5d5d064ba48875abfd07340b937e56186e583d87e456b055758ff540cd2d64deb439ac77b6785bead0f5d2771c7744104d4458f67d57496abfb91de669cda04ee91b66a4049ddd715a548be5c1eecc2a167b81eb79c1083d7c9509f7ffa5f7f2ab"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r14}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @hopopts_2292={{0x30, 0x29, 0x36, {0xe9, 0x2, '\x00', [@ra={0x5, 0x2, 0xe0b}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x21, 0x6, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @pad1, @ra={0x5, 0x2, 0x1}, @pad1, @jumbo={0xc2, 0x4, 0x7b6e5538}, @jumbo={0xc2, 0x4, 0xc}, @jumbo={0xc2, 0x4, 0xc}, @ra={0x5, 0x2, 0x2}, @pad1]}}}, @rthdr={{0x18, 0x29, 0x39, {0x5c, 0x0, 0x1, 0x33}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x89, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @pad1]}}}], 0x1f0}}], 0x2, 0x10) mmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x3, 0x30, r8, 0xd683a000) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000001400)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001280)={0x124, r3, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x90, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9010}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80000000000}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x12aa3}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVKEY={0x54, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3ff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x180000001}]}, 0x124}, 0x1, 0x0, 0x0, 0x400c041}, 0xc800) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001480), r13) sendmsg$L2TP_CMD_SESSION_CREATE(r13, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x24, r15, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r7}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x7c, r9, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x58, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x10}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x2}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x5}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "0d7d0c69432ae105"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x40}]}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}]}, 0x7c}}, 0x4) 26.327421846s ago: executing program 2 (id=3501): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000480)=ANY=[@ANYRES64=r0]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000000300)={0x0, 0x80000003, 0x35}, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000100)={0xdddd1000, 0x102000}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="32188b", 0x3}], 0x1}}], 0x1, 0x4044000) shutdown(r4, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x80}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x74}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x94}}, 0x14b6deac033214c2) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r8, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d3cd1b0f200002000fdf700071400"}) r9 = syz_open_pts(r8, 0x0) r10 = dup3(r9, r8, 0x0) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r6, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xf3f}]}]}, 0x28}}, 0x0) r13 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r13, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0x8000, '\x00', @p_u16=&(0x7f0000000080)=0x1}}) 25.942117262s ago: executing program 2 (id=3510): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000940)={'#! ', './file0', [{0x20, 'eX\x00\x00\x00I\xc0\x03\xf1\x98\xccn\xe1\x12M\xf1r]B\xdc\xca\x90I\x9f\xa6\x1f\x11F\xfd\xbc\xd5\xa7\xd2\xd6\xbb*\xa6\xfd\x8cc\xcb\xda\xc1\xde\xaf\x0e\xd8f=7j\v\xe2\x98\x9a;\xa4\xed\xddr\x8ca\\|J6\xde\x17\x01\t\xeb\x7fK\x8d\xb0G\\Hx\x12G'}, {0x20, ':@J\xb2,D\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xfb\xea\x16\x01^z\xb0\xb04z\xafE\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9cH\x9az\xbfE=)|\x18f6\xd8G\x99o\x02\x12\xd4\x9d\xfd\xb2\xe8\x8f\x06\x00\xc3N\xe3\xb3\xc8\r\xdb\x86\xdd\xd8J\x12&7\r\xf1\xc7a\f\x18n~\xc5\xd7\xc3\x06\x1d\xd5\xa8\x92F\x18\x9a\xb7]\x16\xa2j$\xfc\xaf\t\xdb\x16o\x1fE\xc9r\x97\x9a\xd9\xd5\xb0\x85\xeb\x81\xe7\xcc\xe1\x01\xc0\x18\xb7\xff\x82|\xd9\xc9\xc2&\xb8\xf50\x92\n\xb7\xd5\\\x1f\xba\xb3\x86E39\x9e\x12G\x93\xda\xf2\xa9\xfd\xc7\xc9!A3&\xbf\xe6)\x06\x9e\xe8\x15\x19\x94CF\x16\xdb\xbc\xfe)\x85\xa6\xec\xea\xd7\xa8\xca,\x8a\xe7\x04\xf4\xa3\xfc@j7\xc1f\x1c\v?\x116viRwi\x06\x11\xc0\xb9\xa6\xe8\a\x04X\xfd\x9d\x9d\xf9\xc8\"\xac\xf2|\x9f\xe8|\xd3\xb5D\xa3\x97M|):\xfc>\x93#\xb3/\x98(\xea\x1c\xd3\x1f\x8a5\xe5D\xafGX\x92\t^\xf7I\x9b\x9d\x90\x87\xb1\xf1l\xd5\x0f\n:\x81\t\xdf\x95wx;\x10KNU\xa2\xa4\x18N]\x1d06vaU\xfcr\x1d\x1b\xbb\x98\xdfE\x97\x05\xf1\xf7<\xedB\xda\xab\xdd\xc4\xaej\xfc\x86\x14\xb3s\xd5\xfe8c\x1fHD);F`D\xb6\xda\x87\xfd\xed\xe0\xa1x\x17\xef\xc8\x9d\x01\xd5)Y\x11\f\xa5\xbb\xec\x87\xdf\xa6\xfab\xafnr\xdd\xfbWf\x1d\xc7\xfed\xee\xc3\x82|\xeb\xa5w\xbeN\xbb\x91C\xeb\xe0\x92E\xbez\t\xe8\xda\xda\x0f\xfb\xbad\x1d\x1dbcc(\x85\x8ay\xd7m\xb8\xc5+\xb7\x15\x18@Y\xe8\xb1\xf2U\xa8b\x93\x01f\x9cX*\x9b\x04\xe1\x06\b\xc1\xdf\x99%\x14Ra\x82\xb5\"_\x17\"\x00\x00\x00O\xa2\xff\xdc\xd9\x8dy\xce\xb4\x9cF)A\xe6p?\x03s\xe5-\x1c\xf1\xabM\"\b\x01\x8cr\xf9\f\xab\x1b\xd6\xde\x85\xcc\xa4XSw\x93)L\x84\x99\x9bS\xf2>\x04\xc5\xa30\xfd\rl\x87\xab\x1eYboU\xf5\xd2^u\xb4\x045mD\x897TP\x1fN3\x88\xe3\xd1\xef\xd9F!\x97\xb4g]\xf9N$\xd0\xc7\xa0\t\x1a\xcf\xf3\'\xa8\x93O6\x180\xe8\xf8o\xa0\xe0\xa8\x9f-\x9a\x81U\x83\xeb\xed\xfe,\xdc\xb6\x18\x15sL\xca\xa8\x0f\x97kD\xe2\xea2\xdf\x98\v\x85'}, {0x20, 'tru{ted./verlay.y\xc6per~\v\x17\xd7\x03d.O\xecTU\xa5\x011\xae\xcc\xf7{i8\xbe\x8b\x04\xb8mG\xea\xc0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\xfeEO\xf2\x82f\xf1<\xe8*\xe8\x01/\xec\xd5\x91\xf3\xfb(|\x9f[\x04\xd3#Z\x1e\x7f\xa6(\x9c\x17X\xc4\xc6@\"9\xd7\xe6\x91\xba\x03\xcd\xbaW9#\x15x\xf2\xf2>\x1fR\xcda\x8f<\xa8\xeaL\xc7\x18\xec\x0e\x8f\xd9\xdax\xf8\x81bm-b\x87D?\xa5\tQ\xdc\t\x8fT\xf0\xca\x0e2\xdf+\x91\xda,\x0fQ\xf0\x9a\x14\x19\xebB\\W\x84\x11\xc4\x12\x06\xb8\xac\x02b\xcc}D\xcb\xb4\x8c\x95\xc6\xb61\x99\xf6\xa1\x13\x94\x1cJ\xb5g\x03J\x9eg\x9be\x9f\xff\x96r\xfbF:\x93\b\xf3\x9e\xabk\xad\r\xf2\xc0xv\xe0\x00\x03D\xd5\xae\xbdX\x1b\xfbot\xf7\xeb\xa6{\xed\x9f\xa8\xba\x8e\x12\v\x99\xb8Y^/9#\xcd\xc0\a]@\xc5\x16\xe8&\x89G~M=idO\xfc\x83\x90\x00\xad\rV\x1f\x95\xf4\xd9\x01\xb4\x1a\x1c\x05[\x82\x126\xc15\x99\x06[\xcct\xea\xa0\xc1g\bD\x83\xf7\x96\xe0\xb08h`\xa2i\x8f\x14\x8a~\xe6\xa4\xc4\xa7\x81\xaaK\xc6\x06'}], 0xa, "98ff080076b2b49b014891ae518e00000000db672058faced143a22399a575e2f50ff2388b285e3779a0be938144c48e94c179d2c68e1f20d250a3e75ff033bc2a2f3e7cd589"}, 0x45e) io_uring_enter(r1, 0x5db6, 0xe93f, 0xc138a7a7256f17df, &(0x7f0000000040)={[0x9]}, 0x8) syz_emit_ethernet(0xfdef, &(0x7f0000000040)=ANY=[], 0x0) 25.941813749s ago: executing program 2 (id=3512): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x480000, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000000c0)) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%/,c\xbe\xfbL:', 0x0) (async) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) 25.868059614s ago: executing program 2 (id=3514): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x0, 0x5, 0x1e, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7807, 0x700, 0x8, 0x9}}) connect$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0, 0x1, {0x2, 0x1, 0x2}, 0x1}, 0x18) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x7}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) (async, rerun: 32) r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x2, 0x248840) (rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getqdisc={0x30, 0x26, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0x12, 0x1}, {0xd, 0x2}, {0xd, 0x7}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40090}, 0x84) (async) close(r1) (async) syz_open_dev$MSR(&(0x7f0000000280), 0x3, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000002c0)={@multicast2, @rand_addr, 0x0}, &(0x7f0000000300)=0xc) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x1000, 0x200, 0x400, 0x80, 0x2000200, r3}) (async) write$UHID_INPUT(r2, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) (async, rerun: 64) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) (rerun: 64) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001400)={r2, 0x3, {0x0, 0x0, 0x0, 0x7fff, 0x6, 0x0, 0x1a, 0x1, 0x1d, "13103fa7ce0c3ce92bda72be140b7d7bec68831c4917204114aed3280c88ae3257a781ca74a6a85fbd8988676ee67597d0c04599a9cdddaf25735b08f4ab8c47", "7a2bb6ff868933e3df3aa5afc566c0df24435a1a56d99fcee16d599259f96da929f6624b70611d6b2d07b4785b7b44089896393e6652dcb370aefd22b181e8ce", "7f96ed4f69f0c91ff3ace2f04f53452addc8bf3d5c7ac2829a71ecb5864b74c0", [0xffffffffffffffff, 0x1]}}) (async) close(r1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001540), 0x2) (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, &(0x7f0000001580)={0x7fff, [0x3, 0x100], [{0x400, 0x7f, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x1, 0x1}, {0xd0fc, 0x692, 0x1, 0x1, 0x1}, {0x9, 0x100, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x1ce8, 0x1, 0x1, 0x0, 0x1}, {0x40, 0xf, 0x0, 0x0, 0x1}, {0x1, 0x6, 0x1, 0x1}, {0x101, 0x5ec, 0x1}, {0xfff, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x840f, 0x3, 0x1, 0x1, 0x1}, {0x7fc, 0x23, 0x1, 0x1, 0x1}, {0x7, 0x6, 0x0, 0x1}], 0x7fffffff}) (rerun: 64) write$UHID_INPUT(r2, &(0x7f0000001680)={0x8, {"c7d34ac0d22ecdbcb2e6f1e775b0a45106c88338a2776c7049cc19aaf1608f011a9cf4c2b52b226a663e126c14f246db1b0f100cf428c19541a3d8e3d4cd20caaf88255ce8e0dce2e173a8696f41e21312dc2cf56ac0e6cb474be90c14a4e4059de91505f788a76313639112b1ce3bf4a8eb79efdab27f5444a3dfb48d21d3f6fb7f1d078b53e4e596d2c2bccf4ff6e9a3fe0ba3d5a5f1b0d39f210478a441267956e308c9944f655a85656f234493b157a6d296cd045bf6a81f63da4dcceeecb661043357073b0884f68f110c611f63fa24d072d1eef492c1712d9040ca5e0b020f463a43557b162ccf44f09743294ddfb5c83deb0a609a8b3a1c613f0847d561658eb17c93d4b5fc1fd21f7718c2780f7d56dbebe801d970ca7461ff4db16c0ad8cc983e37b44d7445b8a75f7e4b39a422607cab2df48e49112bf2b352dea335acb027b1294a2214d9489df13e80e896f56eeba6884aabb387d5ab3b993a22e81727fce10f950c3c927fc114ad519a84c8ce80e3c9451898d05210fc84f59f786d7a9437f5c86c2da1ee79f17896b56c93013d0449f1fe72aa6863d100f47a833f6f5edf77f5da4e6f52a97d503a76c423d228a8941179b805e556f7a83e810895ff9c4876bb3156c7bf354453fe4e16110a67c8e958e3ec7805a1ac7c439bd32d0ec0dc364ed3e89f78710a5ad366210563ebd03f5d3813388ee82f4c727f6ad6e76a1a3f92eb2f7c9ed033f753fe80122f442a3ec169b670917ba852fe5648eab849f51e273da54d7863bd242d03c3d22f9b7c0019cde8f23fa02a51dc6d8f43cb56d154eff73e797a45dffdd1ccdafa7b654e96043a8fd05b183c726748bbe0b541197444fd92a46e4b5ce0ea40eb6c50ca734e80ded8553d7021a3ae6c36788a83ab0633ac56ab3c6702426010ae88796ebdf88b0a0f0584c2461242463e92f0ea1ee12bd3721b14d8a5b4130656b035d91ec5433c26387c664e6155d760d929cab04ff724dc49189625339ce76d8284d94ec7caffd5367c4c571749face331895bbaccfeeb6af34d4f0a365e69adfd0e365cee622730aa3f1164b804dbc050e2c7f1fa5b7be78a8b22cc2fdc9253d6db56f75363a0a9257eb9d22e409608445874b6547465f45819eddc7b6f97b195c8938eab0e9afd3deb92e1b2f2f12090c72f0f816459d2de3d6e4549fbb235780b76032ef7a315bdbba4e26d3323169abf8f8224b015a61f0d230feeb76c512bca1291a4eb5c707066e980d4df519b7048e02279bf52391fd9cef6ddc538e96f436b1a0957dbe819defbae1e695bd5faf2a98071aa0e357a27601c7fad83bad7d9772698dde5a47c64f72e0d6fb1e7eac16e9b3d17fcfa5f990149ffcd99f2e5a0d93f56790f52f59151b1ad31454e716bcce1734f7a1c3af6dc4edcdb68ed0711cdfacab42991f1306d5e51de926093db05b5aa83491c5b3204150c244708f2db6c191995dbda3cfa05a6b44055f24d9b52b2aa78c01cac89c3f9b71fb1a6aeb0d71a44934be65e62d1a20638a2689d939bf86be98882844e8130282513475f5dcb24e30297e2b15122256d309920ac29bf6f21d1ef7d02b0eb2a125534561aed537ba8c0171ebdd98252f5533617e5cb2bf5158f303406ac392c51110c74852818f1bf584e7633127edccda6c965aedc58aa098d4f638c77ded8badc19038c4fdc19c42a9713f70dfe9690fb5b9f0ee960bb7661f83c99222305c20c2686e481f656992aad50c161b34c20c32512ab20613c7a2be3b32965c587b2b819ccd56d4b5592143fd2686f68006340c487eba90fe0a801d5dadf8b8bae8eb73995be35b769e97ce6d0e2b01829628221e9a5ade06b8b676a7d63af4d3f652b287e3fd287df52a7cc37d161fb489963f2f3200a6ba4092ffe3f33ad6d07f07fe69f76d3e07a5a931a32b195b34944f3f5642a274fc5705eea127dd42d52020f94700bf31112c2c28b04fbbc83196aa86d88ae8fa3b7e00eb47f389bb60dc28d04dbd07959c703a07c6e1f999dfc2f4241ad3bb4379a56192b2cb39157b8c88fec317114df7791aca2fd2f215a4c1bedf2a3c31bd200d9e9c0b6112a0ddd4dfd5c8759217b05a6c2e2689372a307d523a796cfd4a47015eb53cd3a8058811159bc9466063a7a944603fd922513d3f11e9e04cf8eedccffa059ba09c88bd7adf70b9c5152df98be9da6423fd6a9890e40af14672cc0f481e6673669f3fa17e70c85179a7eed46d49aba500ec550ea60ba7999e9fcc3fb1edcb4072ebdb0d813f2510a04fdf5366832c1ef6f90fbced692e07a6a7c998afda3af7564b5aacf6d8c0cf84f8630695b4c39171c738ad1a257f1d20b5eb5cb8b92ef278ebfb64a291c5f0c398599e84b3bf512d20a3dcc4664e5a26f7c61c5a08c22f0bc90d9b6213299a0faf6d91aacfe0bec7dd5c6c4f961b0985b3083f1597129a5be1a5b6ca150340d9126877ac0f0f87e9fa37cf3308415324275168094e6f6e904dcaf0418e1983ccee8c663c8546196dfb95d2637dacf5b60beb033f7d3b98065610dceb00a121a54aba8b1e796b440b7f85f1cc309961a85b21e45faa6ca3f7452dc6b9534c783a65d736a1f3f3728a81d302adb1c1f3037fbbb5762c84dd3c5d45d03a28a874f073542660f5ebf2c6686be2418e87a3ca314eead383e0d916afb3f8a7610389eb021e67307e47492258cdf1d519f75a2962fe1cbc0b5b9acc659b2f00ccad621b4933e086357cac09979f84fbe2c0f7f06a539a318397b38b04f123e4c2cf45c864fe6cc58cacee4866fda1eaa16a6c3c84acc4979871079c09b37d8c48dd1bc9b7c4356c3d48615524123b6150ed8e29d34de77898560211a55b14f80355fe5ab9c4c1a311155068292d8ce465a8ed3e0f6832c7cf3711538377225a6141c4070403641e09ad0d8b1bfbd19bca2bdd53626ac729bb85cc56ac5d5ad1a2f80ff3c00c7b518ed1f6db2275ab19f3ccb97684acd995572fc71a9009e518497a0853662664fad66b5eff8d9a84e12309f46dde4f242066918b8e4e26e6c1b1474db8f72ad9d3aee804d7804744ddb25249fcb711668596f1ade862fa4c619d6a700218366c6567b15c872174423aa7664c02e888e5ce5276ef98e4a421c320f36147d0beb91d5da28ead9bc0df8c12ca76ed91fdae46ff83023aa313f479ab71ee64a08a41785a2ae2cfd4b7cda30b66fed1b4137dee9b30c14c5088b5cd2640b1268371d19b38e98323b4811f7a465e7bf521d51fca6640201a75c58fa00effb89daba01201a78dffefafefc6b8766ac777104419fc30a308ef30d2c5e79e0b04efbbda17d639426fc78e7c906212f51d36452915cac0fc6243a512b73a337799a802ebe95edb709dc2b0626c62c53e31133f6965e2366f71b40f6a86848345ae3e276a6d9e8caa9d0b1440f3165b12f0a8dadc8a844051df4a054700972a2a8dafd4eeb35979087b2fbc65a8fd23916eefbdcead98ea45eeb9ccf2af6be21b56bf570fe9dbb9443c5803c6e6af4bc3bd9395ba923dfe37b93d61936840909bb5780bf82d2c8d49a65b0894e80d71059a5163bd464dd4f5f6476a03b79a506e824704959ab36b473959ecd584978e1e311c7a1da25532eb758814d865e24a8c26e0f48d9aab765489871816b0310a7a3c3c497037ab73ae2908a22d7c0f9691337e3b45b0564591f92c016c3415d42c34d73da352af2c3c541422a27494b71150d6fb06cc26df11658c7032f71ce220b5a91035b2b896edc32039d2bdcea389463617a4886e8f44fb8dafe10551af619811a9ef942924580149686e11950e6a05b0b5562d1855362d01c0b060f464e3a1125cad830a8840230b39a17df1782be5d41622c8830448457b5451d4d274d789350e7b2f4f6c45d38b7eea8898f7987cb5bd6f8e4025030e3984a6701a93d9986d8a717ec41e3b31085654f68678e108b288d022aeff307d18bcad3e5e009d706bd0ea63ec295adf1dfe0e98a48af06601da333b00f8c0991048f46477adc07ab7dea2d49a2f798e2c9b0c905ba2f9dfddc78be992d5557dfec070d087759462e892b9344c8606de4ab5b63a5b568653b7480f3e8a99b05f0896421dbbf3330772ac1ad13267002cda5100d3051c9abd614923375a4696dc7310008b33386a01567a30a0b81297332c6075c8a35cb35154ebc0c5cd6c941f8fc6f9d1248b2ca14ad9cb20ee15b87ad21477ea936cfe8ca3fd450c5e7b2503d36ea6034230aa3f243e7b04fff375fd55e6dad557182316b09f7c1abbf90950e8cb7200e3aae741569248f3ce92054d1381853e9a4520886c5b3dcbf8cd996bed6efe511917e6d1c58035690df4ede9490a6b18217a565cc77ab9c51d3165b3e3e3e4bde3684883fcbc6c713a37b1fdfaa3b035f513633985b00ccf62e3d5d596c1831a01613c4b429a0ed8bd88cc9de801770a21f6f8dc667d2c6c9f93c05fcb1f394ec87a88a2cdd5eb6570760e3874e0fc2467471914fbff47c64886f18844f00131de7f58d707d281ceaa086f9f7fa08c1021c46ce93d9b2b87e6490bc43599948b9dd0908b8ef73d70f20ac0a942323a8d8835dc029c51a5f200ff7a44ea050b94cdb422a79dd9affea34b3e463da62b74a7cc76e056c8c6ea9444ef03ad36ec2b85b9b034bf9f34a53e14fb53b957dd070f4db097f6acbf614905bf070ec3e27aa27ee632e41ade485439f0a5a48febf0c945fcbbe8e749b96d5639693d9adf3d8df8048c6b43a908316204f131cd6b7cb57be5fe416b4bac973d45eb82a114cbc8ceacd0c3f72ed0ed9e15de2beab70992e369efd313bdbdd7ed05e4599540d60bbe6663ac51e01895fa73dd5ed9b7ded8b8e1897c0110eb5d310f1f81694574d227c2d1f29ed4e1f5c2151d2350815dd3d85e359f92bb14a400866e5ff0711486b626557bf6cf770ded285579ebd3f0e1232348d49d35c80aa369c83f844ff581bc3c4eafb723d859002b5595ead910b0687283f1c01009443928b1563e315fad12cdcc5b87697efc2c771b6322ff9087390a051f80650211d3348b19b22801933beefb70c1cdad77027f921b85ae76e6a00a8a302a273dc3793cc4144a932e20738420f964ec49ade3538e4f18703656b00eb42ce85e65023bb2edbca3ce4f279cbc3c90895f1a3f9c8b586d08dfaf10e957182c01c3269e8709034c2a3cd12179b52f70097dcab1c4d74fefc4ad6151621b2edd6516fd4afbad57c142979b47213bdd46e9724b230f2f0ac3329e3a8735614881fe6d36c5ca97acdfa76b82bf0f23a1cfad6a789c719d6f6fd7fb920a7e928dd2a7626f0bce4df375b3399b6a69c5f01dbf02a63e19dbdea93ca9b63d9ad0384ef67d6c5f4a896f46971bb78f083f7955738fba12b4d9a752e34e52241afb0b68860e4fc808f0acb4f8ad9c6018c498fc5df1580cd17c76bd5440b1366f3e8b4d16b3cdadf1466a9726197b2a0848a863df28ca8902c07a6a40be3afb9754dbe9c04e818d9ce601c53b44f6ef07e5ce54608d9d79fd8f6c4499abde9cd734b3e950eba91ffea3991c4f82812ef61c3b330b4a17608e2dad92381a06161e349d17bac3eb20ea2d15eace023b5955ee8672876e47604fecdf252cbf4c172d1f7d489296098868fab1abd7fd670934062440b0cf5bd4dba8c39796b1fe6628fff7b58c6a4266a256f704afad065071e23fdfb3c0f86a7eababcd2c9112544bf342f22eab60d74e385d47eeb07bdeff6bc2d722d8722e7468acc0c7f5ef8fee3ddf0c118734bb99223897c3f7d4084b6f", 0x1000}}, 0x1006) (async) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000026c0)={0x56, 0x1, 0x1ff, {0x4, 0x1}, {0xe39, 0x81a9}, @rumble={0x400, 0x6}}) (async, rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000002700)={'\x00', 0x400}) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000002740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002780)=0x14) (async) recvmmsg(r2, &(0x7f0000008d00)=[{{&(0x7f00000027c0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002840)=""/144, 0x90}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/34, 0x22}, {&(0x7f0000002a40)=""/76, 0x4c}, {&(0x7f0000002ac0)=""/73, 0x49}, {&(0x7f0000002b40)=""/156, 0x9c}, {&(0x7f0000002c00)=""/248, 0xf8}, {&(0x7f0000002d00)=""/59, 0x3b}], 0x8, &(0x7f0000002dc0)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f0000007140)=[{&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/10, 0xa}, {&(0x7f0000004e00)=""/4096, 0x1000}, {&(0x7f0000005e00)=""/131, 0x83}, {&(0x7f0000005ec0)=""/169, 0xa9}, {&(0x7f0000005f80)=""/123, 0x7b}, {&(0x7f0000006000)=""/212, 0xd4}, {&(0x7f0000006100)=""/6, 0x6}, {&(0x7f0000006140)=""/4096, 0x1000}], 0x9}, 0x743669d3}, {{&(0x7f0000007200)=@nfc, 0x80, &(0x7f0000008380)=[{&(0x7f0000007280)=""/226, 0xe2}, {&(0x7f0000007380)=""/4096, 0x1000}], 0x2, &(0x7f00000083c0)=""/210, 0xd2}, 0x6}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000084c0)=""/62, 0x3e}, {&(0x7f0000008500)=""/188, 0xbc}, {&(0x7f00000085c0)=""/254, 0xfe}, {&(0x7f00000086c0)=""/159, 0x9f}, {&(0x7f0000008780)=""/245, 0xf5}, {&(0x7f0000008880)=""/243, 0xf3}], 0x6, &(0x7f0000008a00)=""/238, 0xee}, 0x3000}, {{&(0x7f0000008b00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000008bc0)=[{&(0x7f0000008b80)=""/56, 0x38}], 0x1, &(0x7f0000008c00)=""/237, 0xed}, 0x5}], 0x5, 0x0, &(0x7f0000008e40)) (async) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000008e80)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000008f80)=0xe8) quotactl_fd$Q_QUOTAON(r1, 0x7fffffffc0000101, r5, &(0x7f0000008fc0)='./file0\x00') (async) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000009000)='./file0\x00', &(0x7f0000009040)={0x8000, 0x0, 0x2}, 0x18) renameat(r6, &(0x7f0000009080)='./file0\x00', r2, &(0x7f00000090c0)='./file0/file0\x00') (async) mknod(&(0x7f0000009100)='./file0\x00', 0x8000, 0x3) (async) bind$can_j1939(r2, &(0x7f0000009140)={0x1d, r4, 0x0, {0x2, 0xf0, 0x2}, 0xfd}, 0x18) (async, rerun: 64) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) (async, rerun: 64) syz_open_dev$MSR(&(0x7f0000009180), 0x9, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000091c0)) 25.596813901s ago: executing program 2 (id=3527): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x3, 0x800, {0x0}, {}, 0x5, 0x5}) r1 = syz_open_procfs(r0, &(0x7f0000000040)='fd/3\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8}) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r3, &(0x7f0000001440)=""/126, 0x7e, 0x0) (async) getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) getdents(r1, 0x0, 0x0) 25.474439361s ago: executing program 35 (id=3527): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x3, 0x800, {0x0}, {}, 0x5, 0x5}) r1 = syz_open_procfs(r0, &(0x7f0000000040)='fd/3\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8}) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r3, &(0x7f0000001440)=""/126, 0x7e, 0x0) (async) getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) getdents(r1, 0x0, 0x0) 19.799139736s ago: executing program 7 (id=3635): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @ioapic={0x2, 0x81, 0xa, 0xcc6, 0x0, [{0xd5, 0x5, 0x7, '\x00', 0x3}, {0x4, 0x1, 0x81}, {0x40, 0x7, 0x36, '\x00', 0x67}, {0x2, 0x61, 0x4, '\x00', 0x1}, {0x2d, 0x7f, 0x9, '\x00', 0x5}, {0x5, 0xb, 0x8, '\x00', 0x3}, {0xab, 0x6, 0x1, '\x00', 0xf}, {0xfe, 0x1, 0x8, '\x00', 0x9}, {0x6, 0x6, 0x4, '\x00', 0x5a}, {0x2, 0x6, 0xf6, '\x00', 0xfd}, {0xf, 0xf3, 0x1, '\x00', 0x81}, {0x6c, 0x5, 0x7, '\x00', 0x6}, {0x2, 0x5, 0x4, '\x00', 0x9}, {0xd, 0x8, 0x6, '\x00', 0x1}, {0x6, 0x1, 0x11, '\x00', 0xc}, {0x4, 0x5, 0x8}, {0x86, 0xf, 0x87, '\x00', 0x15}, {0x2, 0x3, 0x6, '\x00', 0x1f}, {0x1, 0x5, 0xa, '\x00', 0x10}, {0x4, 0x40}, {0x0, 0x6, 0x50, '\x00', 0x8}, {0x48, 0x80, 0x9, '\x00', 0x6}, {0x8, 0x3, 0xd, '\x00', 0xff}, {0x5, 0x3, 0x2, '\x00', 0xc}]}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0x8000000, 0x3, 0xffffff78, 0x8, 0x0, [{0xb, 0x1, 0xff, '\x00', 0x7}, {0x8, 0x80, 0xff}, {0x8, 0x9, 0x80, '\x00', 0x1}, {0xcf, 0x3, 0x2, '\x00', 0x80}, {0x1, 0x48, 0x83, '\x00', 0x6}, {0x3, 0x2, 0xa8, '\x00', 0x2}, {0x8, 0xf1, 0x22, '\x00', 0x15}, {0x1, 0x7, 0x81, '\x00', 0x4}, {0x0, 0x7, 0xc, '\x00', 0xe}, {0x5, 0x4, 0x16, '\x00', 0xf4}, {0x4, 0xfc, 0x6, '\x00', 0x3}, {0x2, 0x8, 0x1, '\x00', 0x1}, {0x81, 0x1, 0x81, '\x00', 0x7}, {0x9, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x1, 0x2, '\x00', 0x8}, {0x5, 0x8, 0x0, '\x00', 0x7}, {0x9, 0x1, 0x2, '\x00', 0x3}, {0x8, 0x9, 0x5, '\x00', 0xfe}, {0x1, 0x3, 0x9, '\x00', 0x10}, {0x0, 0x9, 0xcd, '\x00', 0x5}, {0x6, 0x1, 0x9, '\x00', 0xc8}, {0xf, 0x40, 0x5, '\x00', 0x2}, {0x9, 0xe, 0x8, '\x00', 0x17}, {0x2, 0x0, 0x33, '\x00', 0x3}]}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x206002, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000500)={0x1, 'macvlan1\x00', {}, 0x7}) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000540)) quotactl_fd$Q_SYNC(r2, 0xffffffff80000101, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000580), 0x20842) write$qrtrtun(r4, &(0x7f00000005c0)="3048eb42d97c744ad25c515f857bf030e62aabfe2bd90f65e919bf372e3e24eb990770019f8039", 0x27) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000640)={0x8, 0x0, [{0x4b564d03, 0x0, 0x5}, {0xa3b, 0x0, 0x40}, {0x8ac, 0x0, 0x9}, {0x40000091, 0x0, 0x6}, {0xb82, 0x0, 0x7}, {0x400000b7, 0x0, 0xffffffff}, {0xb28, 0x0, 0x2}, {0x487, 0x0, 0x8}]}) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000740)={0x2020}, 0x2020) r8 = accept4$unix(0xffffffffffffffff, &(0x7f0000002780)=@abs, &(0x7f0000002800)=0x6e, 0x800) getpeername$unix(r8, &(0x7f0000002840)=@abs, &(0x7f00000028c0)=0x6e) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0xffffffff) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000002900)={0x4, 0x0, &(0x7f0000ffa000/0x4000)=nil}) write$proc_mixer(0xffffffffffffffff, &(0x7f0000002940)=[{'PHONEIN', @void}], 0x8) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000002980)={0x0, 0x0, '\x00', @raw_data=[0x8, 0x0, 0xfffffffe, 0x6, 0x7, 0x8000, 0x0, 0x2, 0x2, 0x3, 0x4, 0x8, 0xfffffffe, 0x5, 0xfffffffa, 0x6, 0x3afb, 0x400, 0xb1, 0x3ff, 0x2, 0x9, 0x7ff, 0x5, 0x1, 0x1, 0x8, 0x80000001, 0x2, 0x9, 0xfffffff6, 0x51]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002a80)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000002a40)="cc96b67f4538d9", 0x7, r1}, 0x68) timer_create(0x7, &(0x7f0000002bc0)={0x0, 0x33, 0x0, @thr={&(0x7f0000002b00)="1398cfa58d400f231402bcdad49ebb0d2b08aabf74cb3762b6219697f0258474e6573559020b174ac0111e53", &(0x7f0000002b40)="08f054c8a417bb2e2087da536c418d4f02b761f65299e033e721650415e15fb548f8f4282071ad28227e02f25b03dd41d81741638e2115eb8873645e372d0f3063f60ff4e910603ec8d02abc80401998d5fd432ed8b354ef5d611c"}}, &(0x7f0000002c00)=0x0) timer_delete(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000002c80), r5) sendmsg$TIPC_CMD_SET_NODE_ADDR(r10, &(0x7f0000002d40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x24, r11, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4008045) 19.798665263s ago: executing program 7 (id=3636): socket(0x2, 0x800, 0x9) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x206, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x22, 0x2, 0x0, "b43d70dde5dbbbe40f00f401bbe6c9008000c67f09000000080000000200"}) 19.713445196s ago: executing program 7 (id=3637): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x29, 0x87, 0x3, 0x757, 0x41, @private2, @local, 0x7, 0x40, 0x5, 0x2}}) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, r2}, 0xc) mkdir(&(0x7f0000000300)='./file0\x00', 0x2) lremovexattr(&(0x7f00000043c0)='./file0\x00', &(0x7f0000000080)=@random={'user.', '\\$+\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867", 0xe}, {&(0x7f0000000040)="d7ec", 0x2}], 0x2, &(0x7f0000001800)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/36, 0x24}], 0x1}, 0x7}], 0x1, 0x10000, 0x0) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000180)=0x1, 0x4) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000a40)=""/65, 0x41}], 0x1, 0xfffffffc, 0x104) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_AIE_OFF(r0, 0x7002) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, @loopback, @empty, 0x0, 0x0, 0x10000}}) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f00000002c0)) r7 = socket$inet(0x2, 0x3, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000001ec0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000001900], 0xff00, 0x0, &(0x7f0000001900)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002900), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r9, &(0x7f0000002940)={0x18}, 0x18) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x68, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000aaaaaaaaaaaa86dd6001070000321100fc000000000000000000000000000001ff02080000000000000000000000000100000e2200329078ab550f22d9be0ee087406036a7f6797aea76aa0e4a3397e64c50edeea6533180d5000000000000000000"], 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d, @void, @value}, 0x94) 18.814476698s ago: executing program 7 (id=3648): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) fdatasync(0xffffffffffffffff) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r2, &(0x7f000000a900)=[{{0x0, 0xa00, 0x0}}], 0x1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 17.84243579s ago: executing program 7 (id=3664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48000, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x98, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x98}}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8401) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$USBDEVFS_CONNECTINFO(r8, 0x40085511, &(0x7f0000000340)) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd700000000000020000005000000c0003002300000000000000080001000100000008000200000000000800020001000200080002000700000008000200050000000c00240008000000000000000000a600000000000000000000002e7ddb6eaef3360cab9385952184841795e5b5e09f611a71659dee138f03240aa759d4cf6c18d9e08f0db4f8019d4450b3e65b"], 0x64}}, 0x0) 17.005796767s ago: executing program 7 (id=3669): r0 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000) (async, rerun: 64) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) (async, rerun: 64) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) syz_usb_connect(0x5, 0x45f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x6d, 0xac, 0xcc, 0xff, 0x421, 0x1d4, 0x4469, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44d, 0x3, 0x7, 0x3, 0x10, 0x5b, [{{0x9, 0x4, 0x15, 0x7f, 0x0, 0x2, 0x2, 0xff, 0x2, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "092ab167"}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0x4, 0x8}, {0x6, 0x24, 0x1a, 0x7f, 0xb}}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4448aaac"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5, 0x3ff, 0x44}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x3, 0x3, 0x40, 0xad, 0xb}]}]}}, {{0x9, 0x4, 0x3a, 0xb2, 0x5, 0x3e, 0x85, 0xef, 0x9, [], [{{0x9, 0x5, 0xa, 0x8, 0x40, 0x29, 0x6}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0x5, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xd535}]}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x3, 0xc8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x28, 0x4699}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xfd, 0xb3}]}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x3, 0x0, 0x7, [@generic={0x7c, 0xc, "02237339ac3d431412d14d4057c011bc86a24586ae2de8add836a45e36db1a187a995a8661355a30d95bd25ab38c5642f536b2300556785827ffc6fee829da6c7b5d1956d8bf3b2257d80e33267fc7172f54011e9d8770b44c790071e41fe7f7ea46e6961e1a7516d49bfb869534c4cdfe6764b37b654d24ad3a"}, @generic={0x14, 0x23, "98d26a474d9d2cfa504f084a18b7eb386670"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x6, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xc, 0x2}, @generic={0xb7, 0xc, "38e22235eb83e3e6dad98c6edc9e8e04485d0ac090aba1e496fce23a88aea8c8fd3767efff301947e35eafc5afb4317a8d4ef0ceedff80c6c86d2ac1104a827178a7b812e93bedc4a1d5c4ecaf65e6bb56e1be03be215c6def28e66e61c8dd5724b3031ef9096260168aeb8c1db9bf2e8ef3b1a25f9b2169e77124fab332c652cc433f8b1f663be6281b39211f7c7315779e4527b21dec7bcacb60dc9680666f645d5e089b0e67464e958410810d09dd695c2410db"}]}}]}}, {{0x9, 0x4, 0x83, 0x5, 0x7, 0x94, 0x5, 0xfa, 0x81, [], [{{0x9, 0x5, 0x2, 0x0, 0x40, 0xb, 0xcf, 0x1}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x80, 0x0, 0x6a}}, {{0x9, 0x5, 0x4, 0x0, 0x8c4ad7f451f8d05c, 0x3, 0x4f, 0x3b, [@uac_iso={0x7, 0x25, 0x1, 0xc1, 0x4, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xe3, 0x2}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x40, 0x39, 0xff}}, {{0x9, 0x5, 0x5, 0x4, 0x40, 0x40, 0xfd, 0x5, [@generic={0x59, 0x31, "fb968b9010f8cb89e7771c54269dbb9022d7a9659b108e0df186bf6d4e5c82f9abe87659c7767be99b138f95334f564d3dd582c74e2f0e280314e65cff8c7bba9a5216c0220f44fa0884b7b1bddd2ffc462a3b336971ef"}, @generic={0xf5, 0x5, "cdca3b50149f0a98062baa8b4a3998337ea2275a658d6a014a04b8c16bd5612c210ae090b29b23215039e3a04d0627d9bcfc9608930e5d32ad1e34da659e4a5bbdaf4909aaebf0230c89cae58bf32c468c518d9cb1cd9f0968241a55f369667a94de3675761bbf250b5063344b31c1bded18f74728e7bcd4cacb5a01e24136e523809739c93eb0e0fe167ea7aba19cab173f821840218053eacf63a7a3a67aceaed4e5bd2a918172012710f1be834c70fd3eb6ec6c4f13b7ece65566453b94fe836d7afb5c68b9099870529d4a58da793cb8da76690a69d5160a05fa00b92d0289148fa2c606da4e7463e93d029621acf72daf"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x0, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x9}, @generic={0xaf, 0x2, "31f2160581f66d39402a329815cf5073845461b679f670b4676cc5317b7088d480faa7092c6f6984552fcbe2a041534b7fdf0cc064e96b488f1b6cd8f56bebac838988a108ffc3ae7920229069e72eda7340a9ec840a43b145eb79ca9dec0395c12526e7f8c85dd36e311c29eeda324dfb8d40457804a331c7eb68de476419eeef5b98b6449fd2d664fb0893e7b16e3e2c57ccb462a1b06ccdbf0051bd3d36b5405cbe447446bbe982c7a90b28"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x9, 0x3, 0x3}}]}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x310, 0x3, 0x0, 0x7, 0x0, 0x5}, 0x5, &(0x7f0000000540)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x844}}, {0x6a, &(0x7f00000005c0)=@string={0x6a, 0x3, "aa0f29b59fc719dbf8a81a0f8acf6600618ff424b68d0f101e8b0ab2db240fe924fbcecef68de49a7116e333afde7e370ffd60dff9078a243e528fe3e8055cbfee5b43317ba48539098758aef59886d3ed65f9ca906d1e35cbbe0369e510f2d22805e0ea2ca823e0"}}]}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$alg(r2, &(0x7f0000000240)=""/4096, 0xfffffdef) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) 16.988908943s ago: executing program 36 (id=3669): r0 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000) (async, rerun: 64) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) (async, rerun: 64) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) syz_usb_connect(0x5, 0x45f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x6d, 0xac, 0xcc, 0xff, 0x421, 0x1d4, 0x4469, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44d, 0x3, 0x7, 0x3, 0x10, 0x5b, [{{0x9, 0x4, 0x15, 0x7f, 0x0, 0x2, 0x2, 0xff, 0x2, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "092ab167"}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0x4, 0x8}, {0x6, 0x24, 0x1a, 0x7f, 0xb}}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4448aaac"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5, 0x3ff, 0x44}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x3, 0x3, 0x40, 0xad, 0xb}]}]}}, {{0x9, 0x4, 0x3a, 0xb2, 0x5, 0x3e, 0x85, 0xef, 0x9, [], [{{0x9, 0x5, 0xa, 0x8, 0x40, 0x29, 0x6}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0x5, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xd535}]}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x3, 0xc8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x28, 0x4699}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xfd, 0xb3}]}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x3, 0x0, 0x7, [@generic={0x7c, 0xc, "02237339ac3d431412d14d4057c011bc86a24586ae2de8add836a45e36db1a187a995a8661355a30d95bd25ab38c5642f536b2300556785827ffc6fee829da6c7b5d1956d8bf3b2257d80e33267fc7172f54011e9d8770b44c790071e41fe7f7ea46e6961e1a7516d49bfb869534c4cdfe6764b37b654d24ad3a"}, @generic={0x14, 0x23, "98d26a474d9d2cfa504f084a18b7eb386670"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x6, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xc, 0x2}, @generic={0xb7, 0xc, "38e22235eb83e3e6dad98c6edc9e8e04485d0ac090aba1e496fce23a88aea8c8fd3767efff301947e35eafc5afb4317a8d4ef0ceedff80c6c86d2ac1104a827178a7b812e93bedc4a1d5c4ecaf65e6bb56e1be03be215c6def28e66e61c8dd5724b3031ef9096260168aeb8c1db9bf2e8ef3b1a25f9b2169e77124fab332c652cc433f8b1f663be6281b39211f7c7315779e4527b21dec7bcacb60dc9680666f645d5e089b0e67464e958410810d09dd695c2410db"}]}}]}}, {{0x9, 0x4, 0x83, 0x5, 0x7, 0x94, 0x5, 0xfa, 0x81, [], [{{0x9, 0x5, 0x2, 0x0, 0x40, 0xb, 0xcf, 0x1}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x80, 0x0, 0x6a}}, {{0x9, 0x5, 0x4, 0x0, 0x8c4ad7f451f8d05c, 0x3, 0x4f, 0x3b, [@uac_iso={0x7, 0x25, 0x1, 0xc1, 0x4, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xe3, 0x2}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x40, 0x39, 0xff}}, {{0x9, 0x5, 0x5, 0x4, 0x40, 0x40, 0xfd, 0x5, [@generic={0x59, 0x31, "fb968b9010f8cb89e7771c54269dbb9022d7a9659b108e0df186bf6d4e5c82f9abe87659c7767be99b138f95334f564d3dd582c74e2f0e280314e65cff8c7bba9a5216c0220f44fa0884b7b1bddd2ffc462a3b336971ef"}, @generic={0xf5, 0x5, "cdca3b50149f0a98062baa8b4a3998337ea2275a658d6a014a04b8c16bd5612c210ae090b29b23215039e3a04d0627d9bcfc9608930e5d32ad1e34da659e4a5bbdaf4909aaebf0230c89cae58bf32c468c518d9cb1cd9f0968241a55f369667a94de3675761bbf250b5063344b31c1bded18f74728e7bcd4cacb5a01e24136e523809739c93eb0e0fe167ea7aba19cab173f821840218053eacf63a7a3a67aceaed4e5bd2a918172012710f1be834c70fd3eb6ec6c4f13b7ece65566453b94fe836d7afb5c68b9099870529d4a58da793cb8da76690a69d5160a05fa00b92d0289148fa2c606da4e7463e93d029621acf72daf"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x0, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x9}, @generic={0xaf, 0x2, "31f2160581f66d39402a329815cf5073845461b679f670b4676cc5317b7088d480faa7092c6f6984552fcbe2a041534b7fdf0cc064e96b488f1b6cd8f56bebac838988a108ffc3ae7920229069e72eda7340a9ec840a43b145eb79ca9dec0395c12526e7f8c85dd36e311c29eeda324dfb8d40457804a331c7eb68de476419eeef5b98b6449fd2d664fb0893e7b16e3e2c57ccb462a1b06ccdbf0051bd3d36b5405cbe447446bbe982c7a90b28"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x9, 0x3, 0x3}}]}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x310, 0x3, 0x0, 0x7, 0x0, 0x5}, 0x5, &(0x7f0000000540)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x844}}, {0x6a, &(0x7f00000005c0)=@string={0x6a, 0x3, "aa0f29b59fc719dbf8a81a0f8acf6600618ff424b68d0f101e8b0ab2db240fe924fbcecef68de49a7116e333afde7e370ffd60dff9078a243e528fe3e8055cbfee5b43317ba48539098758aef59886d3ed65f9ca906d1e35cbbe0369e510f2d22805e0ea2ca823e0"}}]}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$alg(r2, &(0x7f0000000240)=""/4096, 0xfffffdef) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) 3.377981135s ago: executing program 8 (id=3865): syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x10, 0x2, 0x10) fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = syz_io_uring_setup(0x7733, &(0x7f0000000700)={0x0, 0xdc23, 0x400}, &(0x7f0000000240), 0x0) r4 = syz_io_uring_setup(0x1868, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)) close_range(r0, r4, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x2, 0xc) r6 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r7, r6, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000000000010000000", @ANYRES32=0x1, @ANYBLOB="00000000000000008500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) capset(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x2}, 0x60}], 0x1, 0x42, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x12d8) syz_io_uring_setup(0x16a1, &(0x7f0000000480)={0x0, 0xacab, 0x8000, 0x4, 0x114, 0x0, r3}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x4, 0x0, 0x4}]}, 0x10) 3.376421331s ago: executing program 8 (id=3867): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010004b040000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a8ffff0500070007000000"], 0x44}}, 0x4008080) mremap(&(0x7f0000909000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x6c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000300)="1cbb103ffe1b3b7c7e694a08e89ca62cc1300d2f8dc5b7a48aaa1d60acd04a8067bb370e79d619dae886ebf3108642354c49723a5e145226c446e92e49a92089469bc00f31ee5cf6c931b1d1c0e1aa8bc266e192b7950928cbcbf8cffb4936dce37ea7af19e890958919626e2433051999aa796090c4ccc4f5b49230936f53eb9dde13e3df814db9df080998249bc59080d1ad7123a1dae12153766d0d9b2cdd5dfa7ee9c08dba360100c2a5fad8", &(0x7f00000003c0)=@buf="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"}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001540)={@multicast2, @local, 0x0}, &(0x7f0000001580)=0xc) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f00000015c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x125, 0x125, 0x8, [@func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x7, 0x1}, {0x1, 0x5}, {0x10, 0x2}, {0xc, 0x1}, {0x6, 0x3}, {0x1, 0x3}, {0x2, 0x5}, {0x7, 0x2}, {0xe, 0x3}, {0xa, 0x3}]}, @datasec={0x9, 0x7, 0x0, 0xf, 0x1, [{0x3, 0x0, 0x1}, {0x3, 0x9, 0x101}, {0x3, 0x7, 0x1}, {0x2, 0x0, 0x40}, {0x3, 0x9, 0x7}, {0x2, 0x1, 0xfffffff3}, {0x3, 0x7ff, 0x1ff}], "b8"}, @var={0xf, 0x0, 0x0, 0xe, 0x4}, @enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0x7, 0xffff0001}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x3, 0x2}, {0xb, 0x4}]}, @func={0x10, 0x0, 0x0, 0xc, 0x5}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x3}, @var={0xf, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x68d1160d4dccf1df, 0x61, 0x61, 0x2e, 0x0, 0x61]}}, &(0x7f0000001740)=""/39, 0x148, 0x27, 0x0, 0x3, 0x10000, @value}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b00)={r4, 0xe0, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001840)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000001880)=[0x0], &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6d, &(0x7f0000001900)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001940), &(0x7f0000001980), 0x8, 0xa2, 0x8, 0x8, &(0x7f00000019c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x1d, 0x1d, &(0x7f00000013c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0xc, 0x8, 0x1, 0xbb, 0x800}, @map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000014c0)='syzkaller\x00', 0x1, 0x33, &(0x7f0000001500)=""/51, 0x0, 0x0, '\x00', r5, @fallback=0x1d, r6, 0x8, &(0x7f00000017c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000001800)={0x0, 0x8, 0x4, 0x6}, 0x10, r7, r4, 0x0, &(0x7f0000001b40)=[r3, r3, r3], 0x0, 0x10, 0x3ff, @void, @value}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r8, 0x0, 0x1}, 0x18) syz_open_dev$hiddev(&(0x7f0000000140), 0xe3, 0x6b4040) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 3.163687841s ago: executing program 8 (id=3872): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x0, 0x43, 0xa0, 0x90, 0x98, 0x1c0, 0x178, 0x178, 0x1c0, 0x178, 0x49, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'bond_slave_0\x00', 'wlan1\x00'}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0xfff}}, @common=@icmp={{0x28}, {0x0, "84a2"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) syz_usb_connect(0x0, 0xa47, &(0x7f0000001240)={{0x12, 0x1, 0x110, 0x14, 0xfd, 0xee, 0x10, 0xcf3, 0x4, 0xb2e2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa35, 0x4, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb8, 0x1c, 0xe, 0x6c, 0x32, 0xec, 0x4, [@hid_hid={0x9, 0x21, 0x7a, 0x0, 0x1, {0x22, 0xd48}}], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0x4, 0x4c, 0x8, [@generic={0xd8, 0xb, "02ba8966018c8e01bbaf15f47cfa3a7618906328b14ca5f90f5771dc434e7a5944832f668eeb3de88f8a7f2e53ecac847cfc0b51ed455e769c209c6092c355e0e1a154be8f0e718b8ee56689bf8de6fbb4b9d0d436d2f635814703d29ab31d1ad2d24a1a378763216b1fd3de0c3261b3737418e474c0ac561b6ff1c0769c64f0f72bd3a997a5236b179981039b16ce31394bc62249cdbe8c32a920d320fa892a3ebfaa2043430e7d89ba413340ff7e2caa7bd18ae71dc882fc9f9ba4beffd5de10b7536dcfa521b06a94a76c7bbc94992778ee372083"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x20, 0x5, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x7}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x2, 0x48, 0x9}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x9, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0xfff4}, @generic={0xa1, 0xc, "38d89b4eeec6e71e52fd4b52cee141b50f024036a61db3ec68aeb17ecec4ca2787e8435ab203983e5f356f11a598a87ad7da82d362bb09549c71f0ade7019fbfc4dddd752266c8cd8bb11b9f342b94f1264d9bdc9a97e9d884252deeb56d162de2f98d3e139b62e8e39e6889da84418bcf10c4dfe33ed71b9eb68dd01daceafc6a0e7a814e87353683f90726a63588114f45544dd102ccd8fb0aa4049847c6"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x8, 0x82, 0xf}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x80, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0x1, 0x5}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x6, 0xf8, 0x8, [@generic={0x45, 0x11, "a8321bbc9a5d034bc1d578752da2d14f23359ff1f9c5f28739fd3866e8f45ff1a06fdd5bfed6a99bba6f94fbb0d3aba3aecba0266438ba06fdde0b5ed5fefe06b7bcb7"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x10, 0x2, 0x1}}, {{0x9, 0x5, 0x8, 0x0, 0x420, 0x0, 0x9, 0x76, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x5}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x1, 0x2, 0x6}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x5, 0xc1, 0xa}}, {{0x9, 0x5, 0xe, 0x16, 0x200, 0x8, 0x6, 0x21, [@generic={0xf0, 0xe, "c9e5fbd9247f4107e1ab471a1872729e0fb18bc216a3f36f689149722cfcfec338a031f34830499e9a93c200c8ec78331afcbb0de04c957b1cb1f31f6a680f26536c4f6a1754b16d3d2e6d6a89186be065234c86efb73917a2544f74c90fe7b45ea116bc8dfc29fd9fd54ebc06254428bce5d61c80cd6f22fab4334132392bbe91466fa5911cf309831fe7dcebde2de417e05c329b7efcf6159c1a7b2610033985c24188128d1647fedd8d198ef5057e9cfccf3627533126c5958f2a1843e58881d7291a8b4f2b3db5acc55e53dba6847e6aad49c6e13701b3579df6c4f00ee19bb86d3347c06cd1b2159ffa96b5"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x10, 0xb, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x5}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x8, 0xa5, 0x4}}]}}, {{0x9, 0x4, 0xd8, 0x0, 0xa, 0xff, 0xff, 0xff, 0x2, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "127114"}, {0x5, 0x24, 0x0, 0xcf0}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xdf, 0xc3, 0x9}, [@obex={0x5, 0x24, 0x15, 0x4}]}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "4da1efe26b5d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x4, 0x5, 0x6}, {0x6, 0x24, 0x1a, 0x6, 0x34}, [@country_functional={0x8, 0x24, 0x7, 0x80, 0x4, [0x0]}, @mdlm={0x15, 0x24, 0x12, 0x2421}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x1fe, 0x8, 0x6, 0x3, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x1ff, 0xb, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x7, 0x1, 0x3d}]}], [{{0x9, 0x5, 0x6, 0x10, 0x110, 0x3, 0x4, 0x5}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x1, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x4}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x37, 0x3, 0x4}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0xf3, 0x7, 0x5}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x2, 0x2, 0x3}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x3, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x6}, @generic={0xf1, 0x0, "3aadaece39d2b0b2b4c3d5d591e0f75d3ae9ffd5c28bbb09258ae4192e428725b11390e563d1ce9a1b0bed302d184da86741cd0ede8835f3b6613782deedb7851e4b437a63bd184d93c57c01e2e6add9aae342c9007a9c2f8b5e306b7dca9becdd6754013b6ca31eab60645e5d24dfc4be372b2206f0cbdd5740f25a8e10d4615c5f5d832fe854d1aa064002ab4276f6131f3804072257dc7e5a3662639f42c4eb4deceb7fa77713f082fbcae88d660008eaaff3c663f79f05e877d57fe62e482e72eac74c937a255423e57f8e80e6f668c37374f9c382ad032aade119f521307affbdd1cc3076f51ab1558088ff6e"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x6, 0x33, 0x4}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x40, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x101}]}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x9, 0x4, 0xf}}, {{0x9, 0x5, 0xd, 0x8, 0x10, 0x7f, 0x9, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5d, 0x6}, @generic={0xf7, 0x21, "90f3d7e8ecef3568039e2eadc33eac8df374ec8ae957b90e317d7fe5cf5f520b5057db45b5e0b45fd03f0ef5dd6be46b84ce0c8f1b3efbaa60f67aa71a3f6422b186aec71e64f764ddcb79814a222ee143c44543d0eb601c3e7c01a8ed8e1ee047de1ea45e7c71973122a1750e621223b01c040b96c301509aff134e617af0132df31a99a2f20105e1294591fcc6c3a44b37d482c6183300f17810b997fe4860909305c00268437a606411d5a0fc9cff8d7e4a5347051d4e9e5f8969db4f041c25e2a73bfb6751600b21664b6f8bf663ee4dc5e014f35ec505be7d6056ecdb47387450bcf3dcd50de18fd061e8d190722b32ff89d2"}]}}]}}, {{0x9, 0x4, 0x15, 0x5, 0xd, 0x4d, 0x91, 0xb2, 0x4, [], [{{0x9, 0x5, 0x80, 0x0, 0x10, 0xbd, 0x6, 0x22, [@generic={0x3f, 0x6, "af481ad2adc7a60d8bc37f64614118bd2d63edba9ca20f8d8abfd86c727fee05ef074e08769ec1a6e16f0298c86b3866880eef775e4167e64be79d1f4f"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x6, 0x6}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0xf7, 0xf4, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xdd, 0x7af0}]}}, {{0x9, 0x5, 0x8c, 0x0, 0x3ff, 0x0, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x3}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x9, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x80}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x46, 0x5, 0x5}}, {{0x9, 0x5, 0x1, 0x10, 0x70a19f49218add7a, 0x7, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x9}]}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0x7, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x18, 0xfffa}]}}, {{0x9, 0x5, 0xa, 0x1, 0x400, 0x1c, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xce, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x4}]}}, {{0x9, 0x5, 0x5, 0x4, 0x200, 0xe, 0x95, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x80, 0x18}, @generic={0x3f, 0x31, "23be26a55a67cb3db1874befc1525cf73a7ff456e44c731a659b4ed820030dd48a1d158c3b4fa274de1157bd12fd60cb6aaa6e07191d4115400ac30a12"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x20, 0xf0, 0xc3, 0x6, [@generic={0x8d, 0xb, "712f7482bf3c2b97c4b00d8d003bb97a57dabbca83e2506ebee40506b7e5f80128e7666653e5c703dd2750725071d54a2c7ea8a0d4c458b2931d8c3fc4faffeeb3ef8178ff3b63ab66cbe017c777641aa55e271fc6408674f9162e0c00eceab112f8e0633788bdeb35afaf32877a0b89180562122f8821afe8c5f6cc5d3f89c01bd6cc69a0b3fe4133284f"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x0, 0x40, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xa4, 0xdee9}]}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x9, 0x4, 0x4, [@generic={0x3b, 0x8, "4e7233e539e312402b9b9f6cb6e9a41b6dccb2d9f3d8669f6485e1f1fdd734abc80f0b1011ccdaf4069babcc20458d2f37546fb5d1461923e7"}]}}]}}, {{0x9, 0x4, 0x9, 0x1, 0x9, 0x85, 0x5, 0xd0, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x9}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x5, 0x6, 0x9, 0x9, 0x4, 0x80}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x3, 0x5c, 0xff80, 0x0, 0x4}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x8, 0xff}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xb, 0x1, 0x6, 0x8}, @as_header={0x7, 0x24, 0x1, 0x3, 0x2}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x3, 0x5, 0x4, "26da"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xc, 0x2, 0x3, 0x1, 'm', "a9"}, @as_header={0x7, 0x24, 0x1, 0x74, 0x6, 0x1002}]}], [{{0x9, 0x5, 0x8c, 0x0, 0x3ff, 0x3, 0x1, 0x8}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0xff, 0x40, 0x8}}, {{0x9, 0x5, 0x8, 0x1, 0x50, 0xff, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xfc1b}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x0, 0x0, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x3}, @generic={0x66, 0x24, "2391ac96d13d00545f3235bfe5c700457a54fc8d08f7234721c34764a50c6a4b5b04aeb78514931f3d7b37481155a6a37f70f7ac3e5cca9f37089cb2bf14c184ab6d22be7bf06029d26b8e1d88e2513709331d4d5a9a03c3d5662183d4dc9247cc69f5a1"}]}}, {{0x9, 0x5, 0x79008c000263a9cd, 0x4, 0x10, 0xe, 0xc, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x4}, @generic={0x32, 0x10, "7f3b34636936f8ceb19b44fd07d454e2cd0c2dff85c8af76932689860b78663d506927598d2815fb2965d5851a1fd9ff"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x400, 0x20, 0x7, 0x8}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x53, 0x3, 0x75, [@generic={0x21, 0xd, "62e142e68338551de1d500e12b7b48f20d695e8af90c50d9082710a3ecf861"}, @generic={0x5f, 0x23, "5d1fedec90e4a88459f6f187e52293ccc955223f66cda647e3205895a03d783bc8ee39872281e7a637c8647e23777435178175b0465e14e4a76bc540e499eb49f08a741ba0ec337bca7e2b9ea3fea740f87a6b396f13aff3d0bb1784cc"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x400, 0x3, 0x2, 0x80}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0xcf, 0x40, 0x5}}]}}]}}]}}, 0x0) getrandom(&(0x7f0000000080)=""/79, 0x4f, 0x3) 1.773707126s ago: executing program 8 (id=3884): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b00"], 0x30}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001a80)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002c001280110001006272696467655f736c617665000000001400058005002b0001"], 0x4c}, 0x1, 0x0, 0x0, 0x4000081}, 0x1) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x22) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xffcd}], 0x1, 0x0, 0x0, 0x10000000}, 0x0) 1.58004253s ago: executing program 3 (id=3890): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20080a0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r1, 0xe65bc375a2b46f59, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000035c21b1b132535f43b6b21c1f40addb1b3baadb24c66845a312591834b1955b3a6bb402edf8f3e0dd2a811d7d0ee6baeeb609f088f123648b6f7b618160cc18553475a14ffb78a938f58877ce52980651430cde722943e93179eb2ebd484c3034f2436f765fdc6165fda1e0d964c7c0d533150c431090643f47bc74525078587db24b8aec4dd4f61f689e8bb644bd4a3b7f56c567b2e53d1a8faeb1d3d0c507efcd39d4c2acf", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf25090000000c000600010000000100000008000300", @ANYRES32=r5, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r6, &(0x7f0000000280)={0xea94, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000843000/0x2000)=nil, 0x2000, 0x2000007, 0x20010, r8, 0x3b060000) r9 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf25140000000c000600030000000000000008001d00", @ANYRES32=r6, @ANYBLOB="8b0cf875498166e1684e9a0530026bb8f6a6b262b04eff69eada42bd8605b84020b7159c8dd8906bb811782a9326220e12057609708ac4ee", @ANYRES32=r8, @ANYBLOB="0c000600020000000200000008000100000000000c000600030000000000000008001d00", @ANYRES32=r9, @ANYBLOB="0c0006000100000001000000"], 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYRES8=r8, @ANYRES16=r3, @ANYBLOB="040025bd7000fbdbdf251200000008000300", @ANYRES32=r5, @ANYRES16=r1], 0x54}}, 0x4000000) r10 = landlock_create_ruleset(&(0x7f0000000000)={0x1408}, 0x10, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r11, 0xfffffffffffffffd, 0x20000000) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r10, 0x1, &(0x7f00000000c0)={0x8, r10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYRES16=r8], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc2, &(0x7f0000000300)=""/194, 0x0, 0x27, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000840), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000740)={0x70, r4, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_OPT={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040}, 0x4042095) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r12) sendmsg$IEEE802154_ASSOCIATE_RESP(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r13, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0xfa}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) 1.504258105s ago: executing program 3 (id=3891): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000000c0)={'raw\x00', 0xff, "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"}, &(0x7f0000000200)=0x123) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000001fc0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '[\x00', 0x38, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x2, '\x00', {0x1, 0x6, "33a85c", 0x0, 0x6c, 0xfe, @remote, @mcast2, [], "c1f72d1db31b0b85"}}}}}}}, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, &(0x7f0000000040)) 1.503733478s ago: executing program 3 (id=3892): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r1 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0xffffffffffffcfff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbbf, {}, [{0x4}]}, 0x18}}, 0x40054) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000700)='./file1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0xf, 0x6}}, './file1/file0\x00'}) (async) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, 0x0, 0x3, {0x2, 0xf0, 0x1}, 0xff}, 0x18) (async) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, 0x0, 0x0, 0x4) r5 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) rt_sigqueueinfo(r5, 0x3d, 0x0) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x2, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x76581527, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x401, 0x2, 0x4, 0x0, 0x8}) (async) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_fd={0x7ffffffb, 0x2, 0x4, 0x100, 0x2, {}, {0x4, 0x2, 0x78, 0x1d, 0x23, 0x3, "d9e73abc"}, 0x1fa, 0x4, {&(0x7f0000000200)=[{0xfff, 0x4, {r2}, 0x40}, {0x7fffffff, 0x20002, {}, 0x1000}]}, 0x8}) 1.431937568s ago: executing program 3 (id=3893): mkdir(&(0x7f00000002c0)='./file0\x00', 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={[{@mode={'mode', 0x3d, 0x10000}}, {@gid={'gid', 0x3d, r2}}], [{@euid_eq={'euid', 0x3d, r1}}]}) r3 = socket(0x11, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r7, @ANYBLOB="bf4400000000000000000c0000008000058014000280080001000000000008000100090000002c0002800800020001000000080004005fbe0000080001001b00000008000200000000000800020009000000070001"], 0x2ac}}, 0x0) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r4], 0x20}, 0x1, 0x0, 0x0, 0x2404c8d1}, 0x4000001) 1.378491753s ago: executing program 8 (id=3896): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/44, 0x10b8c}], 0x1}}], 0x1, 0x2001, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r8, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f0000000640)=@delqdisc={0x1c8, 0x25, 0x8, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xfff1, 0xfff1}, {0x6, 0x4}, {0xffed, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7f}, @qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x18}, @TCA_PIE_ALPHA={0x8, 0x4, 0xf}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6b}, @TCA_RATE={0x6, 0x5, {0xf4, 0xf7}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0xf}}, @TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x2, 0x8, 0x2, 0xfffffffb, 0x8, 0x3}}, {0xa, 0x2, [0x316, 0x3, 0x2]}}, {{0x1c, 0x1, {0xf4, 0x7, 0x5, 0x5, 0x1, 0x10000, 0x5, 0x2}}, {0x8, 0x2, [0x3, 0x7]}}, {{0x1c, 0x1, {0x1, 0xa, 0xfe01, 0x4, 0x2, 0x2, 0x1ff, 0x5}}, {0xe, 0x2, [0x5, 0x729e, 0xf195, 0x7, 0x4]}}]}, @TCA_STAB={0xdc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x69f8, 0xffffffcb, 0x1, 0x1ff, 0xc, 0x8}}, {0x14, 0x2, [0x800, 0x8, 0x2, 0xfff8, 0x0, 0x2239, 0xbfb, 0x7]}}, {{0x1c, 0x1, {0x9, 0x2, 0x8, 0x8001, 0x1, 0x14, 0xbd4, 0x5}}, {0xe, 0x2, [0x800, 0x7, 0xaa, 0xb, 0xc8]}}, {{0x1c, 0x1, {0x2, 0x8, 0x3, 0xee, 0x0, 0x8, 0x8, 0x3}}, {0xa, 0x2, [0x1, 0x2, 0x5]}}, {{0x1c, 0x1, {0x0, 0xfa, 0x3, 0xd4, 0x0, 0x8, 0x0, 0x8}}, {0x14, 0x2, [0x2c5, 0x4, 0x8, 0xbcf, 0xfff, 0x7f, 0x348, 0xad3]}}, {{0x1c, 0x1, {0x8, 0x8, 0x6, 0x4, 0x1, 0xedef, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_RATE={0x6, 0x5, {0xad, 0x7f}}]}, 0x1c8}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r10}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r12 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r11}, 0x8) close(r12) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r11, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001b80)={r12, 0x0, 0x0}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$KVM_SET_GUEST_DEBUG(r9, 0x4048ae9b, &(0x7f0000000180)={0xb0000, 0x0, [0x3ff, 0x10001, 0x6, 0x40, 0x1, 0x8, 0x5, 0xcd]}) 1.377609372s ago: executing program 3 (id=3897): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x3, 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x5) setsockopt(r2, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r2, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000c00)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800303afffe8000000000000000000000000000aaff0200000000000000000000000000018700907800000000fe8000000000000000000000000000aa0e02000000000000000000000000e40001012025b07f3c58"], 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDDISABIO(r3, 0x4b37) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='befs\x00', 0x200000, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_GETSTATE(r4, 0x5603, &(0x7f0000000040)={0x1, 0x8, 0xfffa}) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000000)={0x0, 0x0, {0xefffffff, 0x4, 0x7ff}}) 833.613455ms ago: executing program 6 (id=3906): r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x1) (async) flock(r2, 0x2) (async) r3 = dup3(r2, r1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095", @ANYRESDEC=r3, @ANYRES64=r3, @ANYRESOCT=r1, @ANYRES32=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x219b, 0x4) (async) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000001340)=@x25, 0x80, &(0x7f0000000140)}, 0x40040000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='mm_collapse_huge_page\x00', r4, 0x0, 0x9}, 0x18) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x20000094, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ff80000}]}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xc8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\x16\x82\xe8=\xa3\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\xba\x89#=2G0x0}, 0x40) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x25, 0x22, @void}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@fallback, r0, 0x4, 0x2001, r2, @value=r4, @void, @void, @void, r3}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0xe4ffffff, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000000040)) getpid() r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x8, 0x70bd2d, 0x25dfdbfd, {0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40880}, 0x4000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x4800, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) write$UHID_CREATE(r1, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) (async) write$UHID_INPUT(r1, &(0x7f0000000580)={0x8, {"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", 0x1000}}, 0x1006) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="0557f0ff0800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086f300049500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x7, 0x3, 0xf8}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000340)=[{0x3, 0x2, 0x9, 0x5}, {0x2, 0x3, 0x10, 0x5}, {0x0, 0x3, 0x10, 0x1}, {0x0, 0x5, 0x6, 0xc}, {0x2, 0x2, 0xa, 0xa}, {0x1, 0x2, 0x7, 0x2}, {0x2, 0x5, 0xa, 0x2}], 0x10, 0xe, @void, @value}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback, 0x13, 0x0, 0x6, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x25, 0x22, @void}, 0x10) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@fallback, r0, 0x4, 0x2001, r2, @value=r4, @void, @void, @void, r3}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0xe4ffffff, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000000040)) (async) getpid() (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_TTY_SET(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x8, 0x70bd2d, 0x25dfdbfd, {0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40880}, 0x4000) (async) 458.595031ms ago: executing program 3 (id=3911): r0 = socket$inet6(0xa, 0x1, 0xa1) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}, 0xa}, 0x1c) semctl$GETZCNT(0xffffffffffffffff, 0x2, 0xf, &(0x7f00000002c0)=""/228) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @void}}}]}) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) 384.798155ms ago: executing program 8 (id=3912): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r2 = socket(0x10, 0x3, 0x0) socket(0x3e, 0x80000, 0x7) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7}, [@IFLA_LINK={0x8, 0x2e}]}, 0x28}}, 0x0) read$FUSE(r1, &(0x7f0000001840)={0x2020}, 0x2020) 277.503253ms ago: executing program 0 (id=3914): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x49920d862a92153b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12005, 0x20002}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x20008090) 224.361237ms ago: executing program 0 (id=3915): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f00000001c0)={0x18, r2, 0x2, 0x0, &(0x7f0000000040)=[{0x2, 0x5}, {0x3, 0x7}]}) 224.016507ms ago: executing program 0 (id=3916): getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x91, "88ff831a719aadfff2cb15f6aa7852bde76549e0c9350009d8b1f0f542a82c0b88009fafb250f6358294c54f76f9e340dd8cea2f0db9be88654264d2b47fdf56520bfa26ee1a5fd49a233cb59e744cbf256462bd119016e5cce053ab62bf6e43ad9439d6235dd4da552696e40cd6640d56691fca637bd3136268cd44582b102dacaf51c2b2e6fbaeb84f56867bcd51f29d"}, 0x0) r0 = socket(0x3d, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@private1, @private0, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0xb, 0x0, 0x100, 0x4, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@mcast2, @empty, @private0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x150042, r4}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000380)={"7df3e6186928d1870f315dddae2e94c5", 0x0, 0x0, {0x3, 0x800}, {0x3, 0x3}, 0x3, [0x1, 0x10001, 0x6, 0x8, 0x7, 0x1, 0xfffffffffffffffc, 0x9, 0x10000, 0x8, 0x3, 0x6, 0xffffffffffffffff, 0x10000, 0x6, 0xfffffffffffffff8]}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704640180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4001}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc040080}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='netpci0\x00') 160.256641ms ago: executing program 0 (id=3917): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000004c0)) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40}, 0x4) (async) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000980)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4000}, 0x14) (async) recvmmsg(r2, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)=""/117, 0x75}, {&(0x7f0000000880)=""/81, 0x51}], 0x2}, 0x2}], 0x1, 0x2022, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) 159.92577ms ago: executing program 0 (id=3918): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x482000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r5) read$FUSE(r5, &(0x7f0000008100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, r6, {0x7}}, 0x18) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000240)=0x6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x64, r4, 0x1, 0x0, 0x25dddbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="3861da4e1b320377409d956b5b300d89"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eba19b43226076fbd609d355f3bd48d3"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6e93a0e4773f32474ac0b0656f3b9e59"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r4, 0x404, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xff, 0x20}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4010) 96.005903ms ago: executing program 0 (id=3919): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r4, &(0x7f0000001300)='7', 0x1) syz_usb_disconnect(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000003680)={0x28, 0x3, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x48}]}]}, 0x28}}, 0x20040890) syz_usb_connect$cdc_ncm(0x0, 0x84, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x1, 0x50, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "935eb2"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8000, 0x100, 0x4}, {0x6, 0x24, 0x1a, 0x4, 0x2}, [@acm={0x4, 0x24, 0x2, 0x1}, @dmm={0x7, 0x24, 0x14, 0x3, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x81, 0x40}]}, {{0x9, 0x5, 0x81, 0x3, 0xe58, 0x0, 0x2, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0x1, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x6, 0x7}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x6a, 0x1, 0xa7, 0xff, 0x6}, 0x19, &(0x7f0000000280)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xf, 0x2, 0x7f, 0xf000, 0x8000, [0xf, 0x3fc0]}]}, 0xa, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1409}}, {0x4b, &(0x7f0000000340)=@string={0x4b, 0x3, "77b81885d013ef91b7dd3adb460c1aaac1c1d469555f3abfbe98b6c21d98c74460751b5e445021d67bdea320d7817598fb4b1cfc51a64694d894959fd0795e900f1a729fbc41471e7f"}}, {0x50, &(0x7f00000003c0)=@string={0x50, 0x3, "3f8b618986846f642fc745cdd060c33acfa95ea4d0d9347119f268c4d1fb29d7fe47f5be84befdf3505b31fc9564f40a3695da569c7e6308f5f72603ce9237d1478cc79d4d1707e1f8b0790e2f16"}}, {0xfe, &(0x7f0000000440)=@string={0xfe, 0x3, "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"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1001}}, {0x95, &(0x7f0000000800)=ANY=[@ANYBLOB="950379fe2677a9abd0ab7d7ce0801cb5f4a6eb4a686378b0f94074beaf22fd5303f73140f9eaa87d1da920a0dfb17d56716d109e58ec28c716f798bb7ae0bd6748906a24badf39d9cb7e91f7a4bf9731fa7ee24693290f57363aa208b59706b27a2ae9781a02cc4e30d248c4b0f1844ea6543fcd67c8e92dc374702adddc6d40158cf41fe39e250954eef23cf7ff628bf7e286dd5fad164dae35f3c7a4eef5df13f8ffbc1f42b9734d9771de308fbe7054dd94e6d381c1b617c29e9a3ba867766167ca9a79e1bc293a0bb7b07e6c96"]}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x430}}, {0x77, &(0x7f00000006c0)=@string={0x77, 0x3, "ed22c3c994ff63c796e1d5086bd79c8c8dac36478a19bea9cb635a29eaf81c8ac07b79dfafae48f19c2e01af352c3db610b605ee5f19a81f3d4f4180d1a5a3e2406d22a7e327156b8cd6db813d226322a8bd0547c9576aa1bdbe17750b1b7c9d7c5e8d9cef10b7a8f519901adf495feab278542e50"}}]}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 87.990652ms ago: executing program 6 (id=3920): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00'}, 0x18) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x1, @empty}}, 0x1e) (async) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000140)={0x18, 0x2, {0x1, @loopback}}, 0x1e) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r1, 0x0, 0x2}) (async) r6 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) fcntl$setstatus(r6, 0x4, 0x42400) (async) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000340)=0x2002580) (async) ioctl$int_in(r7, 0x5452, &(0x7f0000000240)=0x200) close(0x3) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfffffd9d) sendfile(r2, r8, 0x0, 0x8000002b) 0s ago: executing program 6 (id=3921): socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000040)) r0 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) read(r3, &(0x7f00000001c0)=""/36, 0x24) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x633fb000) kernel console output (not intermixed with test programs): 5][ T5998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.555070][T15653] __nla_validate_parse: 10 callbacks suppressed [ 238.555082][T15653] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2895'. [ 238.590141][T15655] IPv6: addrconf: prefix option has invalid lifetime [ 238.612982][T15653] lo speed is unknown, defaulting to 1000 [ 238.746293][T15659] IPv6: addrconf: prefix option has invalid lifetime [ 238.824747][T15653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=15653 comm=syz.2.2895 [ 238.834027][T15663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2897'. [ 238.850293][T15666] xt_hashlimit: size too large, truncated to 1048576 [ 239.025464][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 239.025480][ T40] audit: type=1400 audit(2000005137.390:7334): avc: denied { remove_name } for pid=15675 comm="syz.6.2901" name="file0" dev="9p" ino=36831322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.037067][ T40] audit: type=1400 audit(2000005137.400:7335): avc: denied { unlink } for pid=15675 comm="syz.6.2901" name="file0" dev="9p" ino=36831322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 239.051917][T15674] lo speed is unknown, defaulting to 1000 [ 239.385301][T15697] kvm: kvm [15696]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x6161616161616021 [ 239.388594][T15697] netlink: 'syz.6.2907': attribute type 29 has an invalid length. [ 239.405619][T15699] bridge3: entered promiscuous mode [ 239.407700][T15699] bridge3: entered allmulticast mode [ 239.495106][T15705] program syz.6.2910 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.562758][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2913'. [ 239.592525][ T40] audit: type=1400 audit(2000005137.960:7336): avc: denied { name_connect } for pid=15712 comm="syz.0.2914" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 239.676865][T15723] netlink: 'syz.0.2917': attribute type 1 has an invalid length. [ 239.679114][T15723] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2917'. [ 239.716481][T15728] sg_write: data in/out 43/14 bytes for SCSI command 0x9-- guessing data in; [ 239.716481][T15728] program syz.0.2918 not setting count and/or reply_len properly [ 239.776455][T15737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2921'. [ 239.795826][T15737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2921'. [ 239.881297][T15744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2923'. [ 239.887124][T15746] random: crng reseeded on system resumption [ 240.010438][T15752] netlink: 'syz.0.2926': attribute type 1 has an invalid length. [ 240.030060][T15752] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.045558][T15752] bond1: (slave ip6erspan0): making interface the new active one [ 240.050676][T15752] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 240.112146][T15746] Unrecognized hibernate image header format! [ 240.114204][T15746] PM: hibernation: Image mismatch: architecture specific data [ 240.291195][T15760] input: syz1 as /devices/virtual/input/input28 [ 240.339098][T15762] program syz.0.2930 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.362165][T15762] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2930'. [ 240.400208][ T40] audit: type=1400 audit(2000005138.760:7337): avc: denied { getopt } for pid=15764 comm="syz.6.2931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 240.486079][T15776] netlink: 'syz.2.2935': attribute type 1 has an invalid length. [ 240.515115][T15779] tipc: Started in network mode [ 240.516621][T15779] tipc: Node identity 4, cluster identity 4711 [ 240.518448][T15779] tipc: Node number set to 4 [ 240.549725][ T5945] Bluetooth: hci5: unknown advertising packet type: 0x72 [ 240.659029][T15791] netlink: 'syz.3.2939': attribute type 3 has an invalid length. [ 240.664204][T15791] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2939'. [ 240.811912][ T7886] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 240.822324][T15796] atomic_op ffff888050201998 conn xmit_atomic 0000000000000000 [ 240.981858][ T7886] usb 7-1: Using ep0 maxpacket: 32 [ 240.992801][ T7886] usb 7-1: config 1 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 240.997041][ T7886] usb 7-1: config 1 interface 0 altsetting 11 bulk endpoint 0x3 has invalid maxpacket 1023 [ 241.000643][ T7886] usb 7-1: config 1 interface 0 has no altsetting 0 [ 241.005318][ T7886] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.008484][ T7886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.011466][ T7886] usb 7-1: Product: é•è“¤å¸ƒâ‘Œç²©ì£­è¥Œà¼–èžã°¦â¾’飼뙼篧䪈쎰礱꡵滒칰ϳ⌖⣎虡ꧡé¾ç„•éŒ³ë®»ç¢„⶛ë¸ì¾±ã°¨áŠ…⑱쓜⡃ꪑ愻ë몞怬렙㼲잋䃤ë±áª«ï”…î©…ï«»éœà¡™èµˆæ†ªí˜Šä€˜çž¦äŸ®ê¹­å¦é¯žå¼£å¿¿è‘”逅룩뙻䌾䷢æ›î‹èº‰ì±®à¥¯ê±ì°¤ä‘•éŒ„馾闙脨ꣿè‰î¹µç‹§áŠ± [ 241.022900][ T7886] usb 7-1: Manufacturer: Є [ 241.024612][ T7886] usb 7-1: SerialNumber: ã­‚è¨ê놷煨⩳୦븜ã á…¯ìæŠã¯¸æ…뺮窒躘⬥íŽà¶„滸î¤ï™·è‘¯æ•¼ê©ƒä˜‚诪ꑤãºç»Žë€…ꫀ圀ꌋ [ 241.033672][T15788] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 241.258184][ T7886] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 241.272651][ T7886] usb 7-1: USB disconnect, device number 31 [ 241.594359][T15827] overlayfs: cannot append lower layer [ 241.596921][T15827] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 241.817682][ T40] audit: type=1326 audit(2000005140.180:7338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15833 comm="syz.6.2954" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ce698d169 code=0x0 [ 241.919792][T15838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2955'. [ 241.995662][T15847] futex_wake_op: syz.0.2958 tries to shift op by -1; fix this program [ 242.001593][T15850] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 242.121347][T15864] netlink: 'syz.3.2965': attribute type 7 has an invalid length. [ 242.159534][ T40] audit: type=1400 audit(2000005140.520:7339): avc: denied { read } for pid=15866 comm="syz.3.2966" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 242.169053][ T40] audit: type=1400 audit(2000005140.530:7340): avc: denied { open } for pid=15866 comm="syz.3.2966" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 242.179035][ T40] audit: type=1400 audit(2000005140.540:7341): avc: denied { ioctl } for pid=15866 comm="syz.3.2966" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 242.451548][T15885] /dev/ndctl0: Can't lookup blockdev [ 242.453454][ T40] audit: type=1400 audit(2000005140.820:7342): avc: denied { append } for pid=15884 comm="syz.3.2972" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 242.463424][T15890] netlink: 'syz.0.2973': attribute type 2 has an invalid length. [ 242.513380][T15892] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0 [ 243.148611][ T40] audit: type=1400 audit(2000005141.510:7343): avc: denied { execute } for pid=15929 comm="syz.2.2986" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 243.653095][T15977] __nla_validate_parse: 1 callbacks suppressed [ 243.653106][T15977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2998'. [ 243.659157][T15977] sp0: Synchronizing with TNC [ 243.690089][T15981] pimreg: entered allmulticast mode [ 243.698014][T15981] pimreg: left allmulticast mode [ 243.745821][T15985] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 243.748438][T15985] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 243.843828][T15989] tmpfs: Unknown parameter 'ÿÿÿÿhÏ#"' [ 244.772902][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 244.772926][ T40] audit: type=1400 audit(2000005143.130:7348): avc: denied { getopt } for pid=16042 comm="syz.3.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 244.987477][T16063] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4017050179 (64272802864 ns) > initial count (43813986880 ns). Using initial count to start timer. [ 245.046395][T16076] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 245.049072][T16076] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 245.188161][T16097] netlink: 'syz.2.3030': attribute type 3 has an invalid length. [ 245.191243][T16097] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3030'. [ 245.250858][T16102] geneve3: entered promiscuous mode [ 245.438417][T16113] netlink: 'syz.2.3034': attribute type 1 has an invalid length. [ 245.443383][T16105] 9pnet_fd: Insufficient options for proto=fd [ 245.587420][T16116] program syz.0.3036 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.691844][ T65] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 245.770964][T16130] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 245.854183][ T65] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 245.857356][ T65] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 245.860966][ T65] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 245.864668][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.870286][T16113] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 245.879062][ T65] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 245.936156][T16142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3043'. [ 246.081034][ T65] usb 7-1: USB disconnect, device number 32 [ 246.134208][T16152] netlink: 'syz.3.3046': attribute type 3 has an invalid length. [ 246.136498][T16152] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3046'. [ 246.169222][T16154] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3047'. [ 246.277680][T16157] usb 1-1: USB disconnect, device number 2 [ 246.455407][T16172] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3051'. [ 246.539507][T16175] netlink: 'syz.3.3052': attribute type 39 has an invalid length. [ 246.711833][ T5945] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 246.853197][T16190] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3056'. [ 246.903817][T16194] syz.2.3058: attempt to access beyond end of device [ 246.903817][T16194] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 246.907709][T16194] syz.2.3058: attempt to access beyond end of device [ 246.907709][T16194] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 246.911372][T16194] Mount JFS Failure: -5 [ 246.917502][T16194] jfs_mount failed w/return code = -5 [ 246.933383][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3057'. [ 246.940122][T16185] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 247.061868][T16211] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3061'. [ 247.262671][T16246] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 247.269018][T16247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3071'. [ 247.320542][ T40] audit: type=1400 audit(2000005145.680:7349): avc: denied { setattr } for pid=16250 comm="syz.3.3074" name="TIPC" dev="sockfs" ino=72114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 247.357300][ T40] audit: type=1400 audit(2000005145.720:7350): avc: denied { ioctl } for pid=16254 comm="syz.2.3076" path="socket:[73086]" dev="sockfs" ino=73086 ioctlcmd=0x9410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 247.377083][ T40] audit: type=1400 audit(2000005145.740:7351): avc: denied { append } for pid=16254 comm="syz.2.3076" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 247.379219][T16255] RDS: rds_bind could not find a transport for fe80::41, load rds_tcp or rds_rdma? [ 247.490206][ T40] audit: type=1400 audit(2000005145.850:7352): avc: denied { recv } for pid=5924 comm="syz-executor" saddr=127.0.0.1 src=38068 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 247.497533][ T40] audit: type=1400 audit(2000005145.860:7353): avc: denied { read write } for pid=13665 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.508626][ T40] audit: type=1400 audit(2000005145.860:7354): avc: denied { open } for pid=13665 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.515308][ T40] audit: type=1400 audit(2000005145.860:7355): avc: denied { ioctl } for pid=13665 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.537425][ T40] audit: type=1400 audit(2000005145.870:7356): avc: denied { append } for pid=5333 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 247.543900][ T40] audit: type=1400 audit(2000005145.890:7357): avc: denied { read } for pid=16264 comm="syz.3.3080" dev="nsfs" ino=4026533181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 247.677561][T16275] syz.2.3081: attempt to access beyond end of device [ 247.677561][T16275] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 247.692504][T16275] syz.2.3081: attempt to access beyond end of device [ 247.692504][T16275] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 247.817813][T16290] netlink: 'syz.2.3086': attribute type 21 has an invalid length. [ 247.822261][T16290] netlink: 'syz.2.3086': attribute type 20 has an invalid length. [ 247.826727][T16290] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.886950][T16293] xt_hashlimit: size too large, truncated to 1048576 [ 247.944989][T16295] IPv6: addrconf: prefix option has invalid lifetime [ 248.468794][T16336] netlink: 'syz.6.3099': attribute type 2 has an invalid length. [ 248.520747][T16339] input: syz1 as /devices/virtual/input/input29 [ 248.533938][T16339] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 248.541849][T16339] CIFS mount error: No usable UNC path provided in device string! [ 248.541849][T16339] [ 248.546197][T16339] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 248.789446][T16361] SELinux: Context system_u:object_r:ssh_agent_exec_t:s0 is not valid (left unmapped). [ 248.862858][T16363] lo speed is unknown, defaulting to 1000 [ 249.291298][T16388] /dev/nullb0: Can't open blockdev [ 249.316357][T16390] overlayfs: failed to resolve './file1': -2 [ 249.438384][T16404] __nla_validate_parse: 2 callbacks suppressed [ 249.438400][T16404] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3122'. [ 249.444702][T16404] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3122'. [ 249.545146][T16415] netlink: 'syz.3.3126': attribute type 7 has an invalid length. [ 249.548084][T16415] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3126'. [ 249.710087][T16432] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 249.760684][T16439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 249.762797][T16439] IPv6: NLM_F_CREATE should be set when creating new route [ 249.774031][T16442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.777012][T16442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.788908][ T40] kauditd_printk_skb: 140 callbacks suppressed [ 249.788919][ T40] audit: type=1400 audit(2000005148.150:7498): avc: denied { append } for pid=16422 comm="syz.3.3130" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.797508][ T40] audit: type=1400 audit(2000005148.150:7499): avc: denied { bind } for pid=16422 comm="syz.3.3130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 249.926947][ T40] audit: type=1400 audit(2000005148.290:7500): avc: denied { write } for pid=16444 comm="syz.6.3137" path="socket:[73909]" dev="sockfs" ino=73909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 249.937706][ T40] audit: type=1400 audit(2000005148.290:7501): avc: denied { nlmsg_read } for pid=16444 comm="syz.6.3137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 250.002974][ T40] audit: type=1400 audit(2000005148.370:7502): avc: denied { ioctl } for pid=16447 comm="syz.2.3138" path="socket:[73977]" dev="sockfs" ino=73977 ioctlcmd=0x9410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 250.126432][ T40] audit: type=1400 audit(2000005148.490:7503): avc: denied { bind } for pid=16460 comm="syz.6.3142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 250.179463][ T40] audit: type=1400 audit(2000005148.540:7504): avc: denied { bind } for pid=16460 comm="syz.6.3142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 250.185852][ T40] audit: type=1400 audit(2000005148.540:7505): avc: denied { name_bind } for pid=16460 comm="syz.6.3142" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 250.193476][ T40] audit: type=1400 audit(2000005148.540:7506): avc: denied { node_bind } for pid=16460 comm="syz.6.3142" saddr=::ffff:0.0.0.0 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 250.199646][ T40] audit: type=1400 audit(2000005148.550:7507): avc: denied { write } for pid=16460 comm="syz.6.3142" laddr=::ffff:0.0.0.0 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 250.330215][T16478] netlink: 'syz.6.3147': attribute type 1 has an invalid length. [ 250.349603][T16478] 8021q: adding VLAN 0 to HW filter on device bond5 [ 250.363378][T16486] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 250.642700][T16504] netlink: 412 bytes leftover after parsing attributes in process `syz.2.3154'. [ 250.808357][T16512] futex_wake_op: syz.6.3157 tries to shift op by 32; fix this program [ 250.897341][T16514] FAULT_INJECTION: forcing a failure. [ 250.897341][T16514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.900983][T16514] CPU: 2 UID: 0 PID: 16514 Comm: syz.6.3158 Not tainted 6.14.0-rc7-syzkaller #0 [ 250.900996][T16514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.901002][T16514] Call Trace: [ 250.901006][T16514] [ 250.901010][T16514] dump_stack_lvl+0x16c/0x1f0 [ 250.901037][T16514] should_fail_ex+0x50a/0x650 [ 250.901061][T16514] _copy_to_user+0x32/0xd0 [ 250.901072][T16514] simple_read_from_buffer+0xd0/0x160 [ 250.901093][T16514] proc_fail_nth_read+0x198/0x270 [ 250.901108][T16514] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 250.901123][T16514] ? rw_verify_area+0xcf/0x680 [ 250.901137][T16514] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 250.901151][T16514] vfs_read+0x1df/0xbf0 [ 250.901166][T16514] ? __fget_files+0x1fc/0x3a0 [ 250.901176][T16514] ? __pfx___mutex_lock+0x10/0x10 [ 250.901190][T16514] ? __pfx_vfs_read+0x10/0x10 [ 250.901209][T16514] ? __fget_files+0x206/0x3a0 [ 250.901222][T16514] ksys_read+0x12b/0x250 [ 250.901237][T16514] ? __pfx_ksys_read+0x10/0x10 [ 250.901256][T16514] do_syscall_64+0xcd/0x250 [ 250.901270][T16514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.901285][T16514] RIP: 0033:0x7f4ce698bb7c [ 250.901293][T16514] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 250.901302][T16514] RSP: 002b:00007f4ce78bc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 250.901312][T16514] RAX: ffffffffffffffda RBX: 00007f4ce6ba5fa0 RCX: 00007f4ce698bb7c [ 250.901318][T16514] RDX: 000000000000000f RSI: 00007f4ce78bc0a0 RDI: 0000000000000004 [ 250.901323][T16514] RBP: 00007f4ce78bc090 R08: 0000000000000000 R09: 0000000000000000 [ 250.901329][T16514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.901334][T16514] R13: 0000000000000000 R14: 00007f4ce6ba5fa0 R15: 00007ffe45eb2978 [ 250.901346][T16514] [ 250.964228][ C2] vkms_vblank_simulate: vblank timer overrun [ 251.315228][T16544] netlink: 'syz.6.3160': attribute type 1 has an invalid length. [ 251.332930][T16544] netlink: 'syz.6.3160': attribute type 39 has an invalid length. [ 251.562726][T16558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3164'. [ 251.761772][T16575] netlink: 'syz.6.3170': attribute type 1 has an invalid length. [ 252.101382][ T5945] Bluetooth: hci5: unexpected event for opcode 0x080b [ 252.142573][T16611] netlink: 'syz.2.3179': attribute type 1 has an invalid length. [ 252.428727][T16628] 9pnet_fd: p9_fd_create_tcp (16628): problem connecting socket to 127.0.0.1 [ 252.459268][T16626] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3185'. [ 252.463887][T16626] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048) [ 252.849801][T16643] vlan3: entered allmulticast mode [ 253.261901][T16626] syz.6.3185 (16626) used greatest stack depth: 19024 bytes left [ 253.417734][T16682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3202'. [ 253.438790][T16686] fuse: Unknown parameter 'rootyode' [ 253.519618][T16692] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 253.626783][T16702] dccp_v6_rcv: dropped packet with invalid checksum [ 254.555877][T16728] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3219'. [ 254.558445][T16728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3219'. [ 254.587540][T16731] vivid-002: ================= START STATUS ================= [ 254.590650][T16731] vivid-002: Radio HW Seek Mode: Bounded [ 254.590695][T16728] can: request_module (can-proto-5) failed. [ 254.595167][T16731] vivid-002: Radio Programmable HW Seek: false [ 254.598833][T16731] vivid-002: RDS Rx I/O Mode: Block I/O [ 254.601148][T16731] vivid-002: Generate RBDS Instead of RDS: false [ 254.604018][T16731] vivid-002: RDS Reception: true [ 254.605535][T16731] vivid-002: RDS Program Type: 0 inactive [ 254.607149][T16731] vivid-002: RDS PS Name: inactive [ 254.608622][T16731] vivid-002: RDS Radio Text: inactive [ 254.610266][T16731] vivid-002: RDS Traffic Announcement: false inactive [ 254.612923][T16731] vivid-002: RDS Traffic Program: false inactive [ 254.614704][T16731] vivid-002: RDS Music: false inactive [ 254.616584][T16731] vivid-002: ================== END STATUS ================== [ 254.712336][T16739] tmpfs: Invalid uid '0x00000000ffffffff' [ 255.326277][T16743] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 255.348186][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 255.348198][ T40] audit: type=1400 audit(2000005409.705:7567): avc: denied { unlink } for pid=16744 comm="syz.3.3225" name="#45" dev="tmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 255.357125][ T40] audit: type=1400 audit(2000005409.715:7568): avc: denied { mount } for pid=16744 comm="syz.3.3225" name="/" dev="overlay" ino=1284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 255.373984][T16747] netlink: 'syz.6.3226': attribute type 10 has an invalid length. [ 255.376200][T16747] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3226'. [ 255.378698][T16747] batadv0: entered promiscuous mode [ 255.380224][T16747] batadv0: entered allmulticast mode [ 255.382207][T16747] bridge0: port 3(batadv0) entered blocking state [ 255.384070][T16747] bridge0: port 3(batadv0) entered disabled state [ 255.386722][T16747] bridge0: port 3(batadv0) entered blocking state [ 255.390039][T16747] bridge0: port 3(batadv0) entered forwarding state [ 255.395118][ T40] audit: type=1400 audit(2000005409.755:7569): avc: denied { setopt } for pid=16746 comm="syz.6.3226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 255.404906][T16748] batman_adv: batadv0: Adding interface: dummy0 [ 255.406953][T16748] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.408930][ T40] audit: type=1400 audit(2000005409.765:7570): avc: denied { nlmsg_write } for pid=16744 comm="syz.3.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 255.415547][T16748] batman_adv: batadv0: Interface activated: dummy0 [ 255.443758][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.447344][T16750] 9pnet: Could not find request transport: -8ð«íµF=0x0000000000000006 [ 255.452688][T16750] misc userio: Begin command sent, but we're already running [ 255.465706][ T40] audit: type=1400 audit(2000005409.825:7571): avc: denied { setopt } for pid=16744 comm="syz.3.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 255.491190][ T5945] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 255.528636][ T40] audit: type=1400 audit(2000005409.885:7572): avc: denied { load_policy } for pid=16752 comm="syz.6.3227" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 255.533717][T16753] SELinux: failed to load policy [ 255.538679][T16753] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3227'. [ 255.573137][ T40] audit: type=1804 audit(2000005409.925:7573): pid=16761 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.3225" name="/newroot/239/bus/file1" dev="overlay" ino=1291 res=1 errno=0 [ 255.582816][ T6386] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 255.586134][ T6386] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 255.624102][T16771] can0: slcan on ptm0. [ 255.662424][T16770] can0 (unregistered): slcan off ptm0. [ 255.679635][ T40] audit: type=1400 audit(2000005410.035:7574): avc: denied { unmount } for pid=12646 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 255.722631][T16785] xt_hashlimit: size too large, truncated to 1048576 [ 255.730351][T16785] syz.2.3233: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 255.737522][T16785] CPU: 1 UID: 0 PID: 16785 Comm: syz.2.3233 Not tainted 6.14.0-rc7-syzkaller #0 [ 255.737542][T16785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 255.737551][T16785] Call Trace: [ 255.737556][T16785] [ 255.737562][T16785] dump_stack_lvl+0x16c/0x1f0 [ 255.737585][T16785] warn_alloc+0x24d/0x3a0 [ 255.737603][T16785] ? __pfx_warn_alloc+0x10/0x10 [ 255.737626][T16785] ? __get_vm_area_node+0x1b0/0x2f0 [ 255.737647][T16785] ? __get_vm_area_node+0x1dc/0x2f0 [ 255.737673][T16785] __vmalloc_node_range_noprof+0x1102/0x1530 [ 255.737693][T16785] ? __pfx___lock_acquire+0x10/0x10 [ 255.737711][T16785] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 255.737731][T16785] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 255.737747][T16785] ? __pfx_lock_release+0x10/0x10 [ 255.737760][T16785] ? trace_lock_acquire+0x14e/0x1f0 [ 255.737775][T16785] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 255.737797][T16785] vmalloc_noprof+0x6b/0x90 [ 255.737812][T16785] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 255.737828][T16785] hashlimit_mt_check_common+0x8b0/0x1450 [ 255.737847][T16785] hashlimit_mt_check+0x71/0x90 [ 255.737861][T16785] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 255.737876][T16785] xt_check_match+0x284/0xa50 [ 255.737890][T16785] ? zero_pmd_populate.isra.0+0x62/0x170 [ 255.737902][T16785] ? __pfx_xt_check_match+0x10/0x10 [ 255.737918][T16785] ? xt_find_target+0x1ee/0x290 [ 255.737934][T16785] ? xt_find_match+0x1f2/0x290 [ 255.737951][T16785] find_check_entry.constprop.0+0x34d/0xa20 [ 255.737969][T16785] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 255.737990][T16785] ? kvfree+0x47/0x50 [ 255.738007][T16785] translate_table+0xd06/0x17b0 [ 255.738026][T16785] ? __pfx_translate_table+0x10/0x10 [ 255.738041][T16785] ? __might_fault+0xe3/0x190 [ 255.738056][T16785] do_ip6t_set_ctl+0x926/0xbf0 [ 255.738070][T16785] ? trace_contention_end+0xee/0x140 [ 255.738085][T16785] ? __mutex_lock+0x1cc/0xb10 [ 255.738099][T16785] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 255.738113][T16785] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 255.738128][T16785] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 255.738148][T16785] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 255.738164][T16785] nf_setsockopt+0x8a/0xf0 [ 255.738179][T16785] ipv6_setsockopt+0x135/0x170 [ 255.738193][T16785] rawv6_setsockopt+0xd7/0x680 [ 255.738206][T16785] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 255.738219][T16785] ? selinux_socket_setsockopt+0x6a/0x80 [ 255.738232][T16785] ? sock_common_setsockopt+0x2e/0xf0 [ 255.738244][T16785] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 255.738255][T16785] do_sock_setsockopt+0x222/0x480 [ 255.738266][T16785] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 255.738276][T16785] ? lock_acquire+0x2f/0xb0 [ 255.738296][T16785] __sys_setsockopt+0x1a0/0x230 [ 255.738313][T16785] __x64_sys_setsockopt+0xbd/0x160 [ 255.738326][T16785] ? do_syscall_64+0x91/0x250 [ 255.738339][T16785] ? lockdep_hardirqs_on+0x7c/0x110 [ 255.738351][T16785] do_syscall_64+0xcd/0x250 [ 255.738365][T16785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.738379][T16785] RIP: 0033:0x7f714158d169 [ 255.738388][T16785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.738398][T16785] RSP: 002b:00007f714238a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 255.738407][T16785] RAX: ffffffffffffffda RBX: 00007f71417a6080 RCX: 00007f714158d169 [ 255.738413][T16785] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 255.738418][T16785] RBP: 00007f714160e2a0 R08: 0000000000000588 R09: 0000000000000000 [ 255.738424][T16785] R10: 00004000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 255.738430][T16785] R13: 0000000000000000 R14: 00007f71417a6080 R15: 00007ffc763be7c8 [ 255.738442][T16785] [ 255.738445][T16785] Mem-Info: [ 255.861509][T16785] active_anon:7548 inactive_anon:23 isolated_anon:0 [ 255.861509][T16785] active_file:5516 inactive_file:16996 isolated_file:0 [ 255.861509][T16785] unevictable:1768 dirty:49 writeback:0 [ 255.861509][T16785] slab_reclaimable:12103 slab_unreclaimable:93476 [ 255.861509][T16785] mapped:29536 shmem:2485 pagetables:1435 [ 255.861509][T16785] sec_pagetables:306 bounce:0 [ 255.861509][T16785] kernel_misc_reclaimable:0 [ 255.861509][T16785] free:430897 free_pcp:4378 free_cma:0 [ 255.874687][T16785] Node 0 active_anon:30192kB inactive_anon:92kB active_file:22064kB inactive_file:67948kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:118124kB dirty:196kB writeback:0kB shmem:6404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:15152kB pagetables:5736kB sec_pagetables:1224kB all_unreclaimable? yes [ 255.883188][T16785] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:36kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:4kB sec_pagetables:0kB all_unreclaimable? no [ 255.891610][T16785] Node 0 DMA free:14744kB boost:2048kB min:2388kB low:2472kB high:2556kB reserved_highatomic:0KB active_anon:64kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 255.899346][T16785] lowmem_reserve[]: 0 1240 1240 1240 1240 [ 255.900976][T16785] Node 0 DMA32 free:128504kB boost:16384kB min:43992kB low:50892kB high:57792kB reserved_highatomic:0KB active_anon:30128kB inactive_anon:92kB active_file:22064kB inactive_file:67948kB unevictable:3536kB writepending:196kB present:2080628kB managed:1270128kB mlocked:0kB bounce:0kB free_pcp:10300kB local_pcp:2248kB free_cma:0kB [ 255.909969][T16785] lowmem_reserve[]: 0 0 0 0 0 [ 255.911376][T16785] Node 1 Normal free:1580340kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:36kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:7304kB local_pcp:0kB free_cma:0kB [ 255.921779][T16785] lowmem_reserve[]: 0 0 0 0 0 [ 255.923656][T16785] Node 0 DMA: 14*4kB (UM) 14*8kB (UM) 19*16kB (UM) 28*32kB (UM) 11*64kB (UM) 5*128kB (UM) 5*256kB (UM) 3*512kB (U) 5*1024kB (UM) 0*2048kB 1*4096kB (M) = 14744kB [ 255.929995][T16785] Node 0 DMA32: 38*4kB (ME) 81*8kB (UME) 155*16kB (ME) 127*32kB (UME) 153*64kB (UME) 132*128kB (UME) 92*256kB (UM) 52*512kB (UM) 29*1024kB (UM) 5*2048kB (UM) 1*4096kB (U) = 128240kB [ 255.936738][T16785] Node 1 Normal: 71*4kB (UME) 29*8kB (UME) 83*16kB (UME) 172*32kB (UME) 132*64kB (UME) 95*128kB (UME) 50*256kB (UM) 43*512kB (UME) 28*1024kB (UME) 7*2048kB (UM) 360*4096kB (UM) = 1580340kB [ 255.943650][T16785] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 255.947160][T16785] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 255.951118][T16785] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 255.954600][T16785] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 255.958068][T16785] 24999 total pagecache pages [ 255.959967][T16785] 0 pages in swap cache [ 255.961542][T16785] Free swap = 124260kB [ 255.963121][T16785] Total swap = 124996kB [ 255.964688][T16785] 1048443 pages RAM [ 255.966131][T16785] 0 pages HighMem/MovableOnly [ 255.967892][T16785] 281590 pages reserved [ 255.969816][T16785] 0 pages cma reserved [ 256.062103][ T40] audit: type=1400 audit(2000005410.393:7575): avc: denied { append } for pid=16799 comm="syz.2.3238" name="dlm-monitor" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 256.094257][ T40] audit: type=1400 audit(2000005410.430:7576): avc: denied { create } for pid=16802 comm="syz.6.3240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 256.146085][T16808] netlink: 'syz.6.3241': attribute type 12 has an invalid length. [ 256.190116][T16814] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3243'. [ 256.254881][T16817] tipc: New replicast peer: 0.0.0.0 [ 256.259202][T16817] tipc: Enabled bearer , priority 10 [ 256.261309][T16817] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 256.268105][T16823] veth0_to_batadv: entered promiscuous mode [ 256.270644][T16823] veth0_to_batadv: entered allmulticast mode [ 256.273939][T16805] overlayfs: conflicting lowerdir path [ 256.318203][T16829] overlayfs: missing 'workdir' [ 256.340431][T16831] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 256.437631][T16817] tipc: Enabling of bearer rejected, already enabled [ 256.451747][T16836] overlay: ./file0 is not a directory [ 256.461655][T16836] xt_hashlimit: size too large, truncated to 1048576 [ 256.637461][T16859] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 256.639572][T16859] IPv6: NLM_F_CREATE should be set when creating new route [ 256.693479][T16870] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 256.728365][T16875] sctp: [Deprecated]: syz.6.3264 (pid 16875) Use of int in maxseg socket option. [ 256.728365][T16875] Use struct sctp_assoc_value instead [ 256.789653][T16886] bridge_slave_0: left allmulticast mode [ 256.791353][T16886] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.798094][T16886] bridge_slave_1: left allmulticast mode [ 256.800318][T16886] bridge_slave_1: left promiscuous mode [ 256.807370][T16886] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.822276][T16886] bond0: (slave bond_slave_0): Releasing backup interface [ 256.826088][T16886] bond_slave_0: left promiscuous mode [ 256.826529][T16893] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3271'. [ 256.827636][T16886] bond_slave_0: left allmulticast mode [ 256.832438][T16886] bond0: (slave bond_slave_1): Releasing backup interface [ 256.838501][T16886] bond_slave_1: left promiscuous mode [ 256.840145][T16886] bond_slave_1: left allmulticast mode [ 256.847474][T16886] team_slave_0: left promiscuous mode [ 256.849076][T16886] team_slave_0: left allmulticast mode [ 256.865207][T16886] team0: Port device team_slave_0 removed [ 256.871773][T16886] team_slave_1: left promiscuous mode [ 256.873356][T16886] team_slave_1: left allmulticast mode [ 256.879533][T16886] team0: Port device team_slave_1 removed [ 256.881412][T16886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.881772][T16897] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3271'. [ 256.883528][T16886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.889325][T16886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.891402][T16886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.902147][ T1025] lo speed is unknown, defaulting to 1000 [ 256.966141][T16894] /dev/sr0: Can't open blockdev [ 256.998166][T16912] program syz.0.3277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.274008][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3285'. [ 257.276528][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3285'. [ 257.326895][ T5840] tipc: Node number set to 43690 [ 257.385667][T16956] Invalid source name [ 257.386889][T16956] UBIFS error (pid: 16956): cannot open "ubifs", error -22 [ 257.461168][T16962] netlink: 'syz.0.3291': attribute type 21 has an invalid length. [ 257.465681][T16962] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3291'. [ 257.724010][T16880] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 257.978494][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 257.980614][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 257.982394][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 257.984178][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 257.985985][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 257.987743][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 257.989736][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 257.991828][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 257.993610][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 257.995370][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 257.997181][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 257.998962][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 258.001721][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 258.003929][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 258.005798][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 258.007682][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 258.009585][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 258.011493][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 258.013325][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 258.015627][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 258.017521][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 258.020634][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 258.023672][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 258.025552][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 258.027396][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 258.029320][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 258.031172][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 258.034557][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 258.036498][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 258.038417][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 258.040295][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 258.042089][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 258.043991][T17002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 258.075880][T17006] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 258.815101][T17057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=17057 comm=syz.6.3321 [ 259.254101][T17071] netlink: 'syz.6.3325': attribute type 5 has an invalid length. [ 259.482278][T17075] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17075 comm=syz.6.3329 [ 259.490159][T17075] bridge0: port 3(batadv0) entered disabled state [ 259.496318][T17075] bridge_slave_1: left allmulticast mode [ 259.498141][T17075] bridge_slave_1: left promiscuous mode [ 259.499811][T17075] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.505820][T17075] bridge_slave_0: left allmulticast mode [ 259.507439][T17075] bridge_slave_0: left promiscuous mode [ 259.512048][T17075] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.585278][T17090] xt_NFQUEUE: number of total queues is 0 [ 259.587012][T17091] xt_NFQUEUE: number of total queues is 0 [ 259.591148][T17089] delete_channel: no stack [ 259.677802][T17088] geneve2: entered promiscuous mode [ 259.679445][T17088] geneve2: entered allmulticast mode [ 259.752995][ T5945] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 259.766717][T17098] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 259.768531][T17098] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 259.770308][T17098] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 259.772123][T17098] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 259.774404][T17098] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 259.832767][T17114] xt_hashlimit: size too large, truncated to 1048576 [ 259.850622][T17115] input: syz1 as /devices/virtual/input/input33 [ 260.112872][T17131] lo speed is unknown, defaulting to 1000 [ 260.138490][ T5945] Bluetooth: hci0: command tx timeout [ 260.676323][ T40] kauditd_printk_skb: 7951 callbacks suppressed [ 260.676336][ T40] audit: type=1326 audit(2000005414.715:15528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.2.3344" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714158d169 code=0x7ff00000 [ 260.684913][ T40] audit: type=1326 audit(2000005414.715:15529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.2.3344" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714158d169 code=0x7ff00000 [ 260.691252][ T40] audit: type=1326 audit(2000005414.715:15530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.2.3344" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714158d169 code=0x7ff00000 [ 260.697981][ T40] audit: type=1326 audit(2000005414.715:15531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.2.3344" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714158d169 code=0x7ff00000 [ 260.704444][ T40] audit: type=1326 audit(2000005414.715:15532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.2.3344" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714158d169 code=0x7ff00000 [ 260.713770][ T40] audit: type=1326 audit(2000005414.715:15533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.2.3344" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714158d169 code=0x7ff00000 [ 260.720278][ T40] audit: type=1326 audit(2000005414.715:15534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.2.3344" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714158d169 code=0x7ff00000 [ 260.727242][ T40] audit: type=1326 audit(2000005414.715:15535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.2.3344" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714158d169 code=0x7ff00000 [ 260.733537][ T40] audit: type=1326 audit(2000005414.715:15536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.2.3344" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714158d169 code=0x7ff00000 [ 260.740102][ T40] audit: type=1326 audit(2000005414.715:15537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.2.3344" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714158d169 code=0x7ff00000 [ 260.817257][T17166] bond0: entered promiscuous mode [ 260.818736][T17166] bond_slave_0: entered promiscuous mode [ 260.820438][T17166] bond_slave_1: entered promiscuous mode [ 260.822133][T17166] team0: entered promiscuous mode [ 260.823796][T17166] team_slave_0: entered promiscuous mode [ 260.825981][T17166] team_slave_1: entered promiscuous mode [ 260.829019][T17166] batadv0: entered promiscuous mode [ 260.831522][T17166] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 261.098098][T17186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17186 comm=syz.0.3358 [ 261.102547][T17186] __nla_validate_parse: 11 callbacks suppressed [ 261.102555][T17186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3358'. [ 261.136244][T17194] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3361'. [ 261.138865][T17194] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.141078][T17194] IPv6: NLM_F_CREATE should be set when creating new route [ 261.143242][T17194] IPv6: NLM_F_CREATE should be set when creating new route [ 261.149438][T17192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=17192 comm=syz.0.3361 [ 261.153112][T17192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=17192 comm=syz.0.3361 [ 261.157687][T17192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=17192 comm=syz.0.3361 [ 261.161837][T17192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=17192 comm=syz.0.3361 [ 261.167569][T17192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=17192 comm=syz.0.3361 [ 261.171831][T17192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=17192 comm=syz.0.3361 [ 261.175899][T17192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=17192 comm=syz.0.3361 [ 261.196901][T17198] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3363'. [ 261.206490][T17198] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3363'. [ 261.233236][T17204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3366'. [ 261.349954][T17204] lo: left promiscuous mode [ 261.351296][T17204] lo: left allmulticast mode [ 261.358845][T17204] tunl0: left promiscuous mode [ 261.360249][T17204] tunl0: left allmulticast mode [ 261.362835][T17204] gre0: left promiscuous mode [ 261.368213][T17204] gre0: left allmulticast mode [ 261.372158][T17204] gretap0: left promiscuous mode [ 261.373589][T17204] gretap0: left allmulticast mode [ 261.386955][T17204] erspan0: left promiscuous mode [ 261.388381][T17204] erspan0: left allmulticast mode [ 261.391261][T17204] ip_vti0: left promiscuous mode [ 261.392697][T17204] ip_vti0: left allmulticast mode [ 261.402333][T17204] ip6_vti0: left promiscuous mode [ 261.403839][T17204] ip6_vti0: left allmulticast mode [ 261.406648][T17204] sit0: left promiscuous mode [ 261.408000][T17204] sit0: left allmulticast mode [ 261.412219][T17204] ip6tnl0: left promiscuous mode [ 261.421345][T17204] ip6tnl0: left allmulticast mode [ 261.426030][T17204] ip6gre0: left promiscuous mode [ 261.427550][T17204] ip6gre0: left allmulticast mode [ 261.432748][T17204] ip6gretap0: left promiscuous mode [ 261.434255][T17204] ip6gretap0: left allmulticast mode [ 261.437395][T17204] bridge0: left promiscuous mode [ 261.438823][T17204] bridge0: left allmulticast mode [ 261.441722][T17204] vcan0: left promiscuous mode [ 261.446772][T17204] vcan0: left allmulticast mode [ 261.450855][T17204] bond0: left promiscuous mode [ 261.452223][T17204] bond0: left allmulticast mode [ 261.456605][T17204] team0: left promiscuous mode [ 261.458016][T17204] team0: left allmulticast mode [ 261.461070][T17204] dummy0: left promiscuous mode [ 261.462521][T17204] dummy0: left allmulticast mode [ 261.465859][T17204] nlmon0: left promiscuous mode [ 261.467305][T17204] nlmon0: left allmulticast mode [ 261.469511][T17204] caif0: left promiscuous mode [ 261.470939][T17204] caif0: left allmulticast mode [ 261.513400][T17204] bridge_slave_0: left promiscuous mode [ 261.607337][T17204] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.613931][T17204] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.616478][T17204] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.618991][T17204] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.633041][T17204] xfrm1: left allmulticast mode [ 261.696893][ T65] lo speed is unknown, defaulting to 1000 [ 261.913204][ T5945] Bluetooth: hci4: command 0x0c1a tx timeout [ 261.913300][ T5941] Bluetooth: hci2: command 0x0c1a tx timeout [ 261.913740][ T5950] Bluetooth: hci5: command 0x0c1a tx timeout [ 263.239324][T17123] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 263.393644][T17242] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3376'. [ 263.967742][T17249] SELinux: policydb magic number 0x64697262 does not match expected magic number 0xf97cff8c [ 263.971723][T17249] SELinux: failed to load policy [ 263.986273][T17252] netfs: Duplicate cookie detected [ 263.988502][T17252] netfs: O-cookie c=00000009 [fl=5088 na=1 nA=0 s=-] [ 263.991022][T17252] netfs: O-cookie V=00000013 [9p,syz,] [ 263.993042][T17252] netfs: O-key=[8] '6f01320200000000' [ 263.995081][T17252] netfs: N-cookie c=0000000a [fl=8 na=0 nA=0 s=-] [ 263.997540][T17252] netfs: N-cookie V=00000013 [9p,syz,] [ 263.999776][T17252] netfs: N-key=[8] '6f01320200000000' [ 264.052496][T17246] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 264.139901][ T5941] Bluetooth: hci4: command 0x0c1a tx timeout [ 264.168236][T17279] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 264.210882][T17292] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3392'. [ 264.219740][T17289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3391'. [ 264.304633][T17293] lo speed is unknown, defaulting to 1000 [ 264.411212][T17293] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 264.418536][T17300] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 264.480326][T17300] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 264.637616][T17327] netdevsim netdevsim0: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 264.654074][T17327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3400'. [ 264.657355][T17313] lo speed is unknown, defaulting to 1000 [ 264.747997][T17342] input: syz1 as /devices/virtual/input/input34 [ 264.961015][T17360] random: crng reseeded on system resumption [ 265.045542][T17363] netlink: 'syz.0.3411': attribute type 27 has an invalid length. [ 265.222771][T17373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3414'. [ 265.503711][T17381] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 265.506885][T17381] 0ªX¹¦D: entered allmulticast mode [ 265.508385][T17381] veth0_macvtap: entered allmulticast mode [ 265.510246][T17381] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 265.690792][T17395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.697810][T17395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.700276][T17395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.707055][T17395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.710366][T17395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.713525][T17395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.716123][T17395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.719320][T17395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.722108][T17395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.724923][T17395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.727545][T17395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.731096][T17395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.785260][T17409] geneve2: entered promiscuous mode [ 265.786717][T17409] geneve2: entered allmulticast mode [ 266.016107][T17444] nfs4: Unknown parameter 'Atma' [ 266.060364][T17448] input: syz1 as /devices/virtual/input/input35 [ 266.140378][T17456] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 266.244559][ T40] kauditd_printk_skb: 25122 callbacks suppressed [ 266.244569][ T40] audit: type=1400 audit(2000005419.925:40660): avc: denied { mount } for pid=17454 comm="syz.3.3440" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 266.263373][ T40] audit: type=1400 audit(2000005419.934:40661): avc: denied { execute_no_trans } for pid=17454 comm="syz.3.3440" path="/289/file1" dev="tmpfs" ino=1551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 266.354528][T17474] tipc: Can't bind to reserved service type 2 [ 266.358802][ T40] audit: type=1400 audit(2000005420.028:40662): avc: denied { bind } for pid=17473 comm="syz.6.3443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 266.371297][ T5941] Bluetooth: hci4: command 0x0c1a tx timeout [ 266.468105][T17482] __nla_validate_parse: 2 callbacks suppressed [ 266.468116][T17482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3447'. [ 266.472275][T17482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3447'. [ 266.482009][T17482] usb usb8: usbfs: process 17482 (syz.2.3447) did not claim interface 0 before use [ 266.533551][ T40] audit: type=1400 audit(2000005420.196:40663): avc: denied { name_bind } for pid=17486 comm="syz.2.3448" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 266.539142][ T40] audit: type=1400 audit(2000005420.196:40664): avc: denied { node_bind } for pid=17486 comm="syz.2.3448" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 266.760834][ T40] audit: type=1400 audit(2000005420.402:40665): avc: denied { ioctl } for pid=17502 comm="syz.2.3454" path="socket:[77820]" dev="sockfs" ino=77820 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 266.884686][ T40] audit: type=1400 audit(2000005420.514:40666): avc: denied { write } for pid=17510 comm="syz.2.3457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 266.918641][ T40] audit: type=1400 audit(2000005420.552:40667): avc: denied { read write } for pid=17516 comm="syz.2.3458" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 266.925791][ T40] audit: type=1400 audit(2000005420.552:40668): avc: denied { open } for pid=17516 comm="syz.2.3458" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 266.979467][T17520] xt_connbytes: Forcing CT accounting to be enabled [ 267.007494][ T40] audit: type=1400 audit(2000005420.636:40669): avc: denied { block_suspend } for pid=17529 comm="syz.6.3462" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 267.230861][T17552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3468'. [ 267.300667][T17556] overlay: filesystem on ./bus is read-only [ 267.420294][T17565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3473'. [ 267.423667][T17565] bridge0: port 3(syz_tun) entered blocking state [ 267.425524][T17565] bridge0: port 3(syz_tun) entered disabled state [ 267.427423][T17565] syz_tun: entered allmulticast mode [ 267.429518][T17565] syz_tun: entered promiscuous mode [ 267.431210][T17565] bridge0: port 3(syz_tun) entered blocking state [ 267.433032][T17565] bridge0: port 3(syz_tun) entered forwarding state [ 267.542055][T17578] openvswitch: netlink: Message has 8 unknown bytes. [ 267.872049][T17595] xt_l2tp: unknown flags: 17 [ 267.986077][T17593] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 268.005791][T17602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3485'. [ 268.131474][T17612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3488'. [ 268.135297][T17612] netlink: 'syz.2.3488': attribute type 30 has an invalid length. [ 268.140918][T17612] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.144184][T17612] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.147068][T17612] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.150035][T17612] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.329014][ T5941] Bluetooth: hci2: command 0x0c1a tx timeout [ 268.402462][T17641] sctp: [Deprecated]: syz.2.3497 (pid 17641) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.402462][T17641] Use struct sctp_sack_info instead [ 268.568248][T17660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3504'. [ 268.732391][T17669] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 268.776913][T17673] openvswitch: netlink: IP tunnel TTL not specified. [ 268.813015][T17680] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3511'. [ 268.820730][T17685] kAFS: unable to lookup cell '/,c¾ûL' [ 268.922467][T13202] bridge0: port 3(syz_tun) entered disabled state [ 268.938937][T13202] syz_tun (unregistering): left allmulticast mode [ 268.940797][T13202] syz_tun (unregistering): left promiscuous mode [ 268.942619][T13202] bridge0: port 3(syz_tun) entered disabled state [ 268.948911][T17694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3516'. [ 268.977290][T17699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3517'. [ 268.995006][T17699] 8021q: adding VLAN 0 to HW filter on device bond4 [ 269.002866][T17699] veth1_to_bond: entered allmulticast mode [ 269.005215][T17698] veth1_to_bond: left allmulticast mode [ 269.146731][T17719] openvswitch: netlink: Flow key attr not present in new flow. [ 269.195682][T17724] kAFS: No cell specified [ 269.198085][T17726] kAFS: No cell specified [ 269.304534][ T65] hid-generic 0008:007C:0064.000A: item fetching failed at offset 22/60 [ 269.307047][ T65] hid-generic 0008:007C:0064.000A: probe with driver hid-generic failed with error -22 [ 269.337899][T17736] xt_CONNSECMARK: invalid mode: 0 [ 269.341211][T17736] netlink: zone id is out of range [ 269.342685][T17736] netlink: zone id is out of range [ 269.345410][T17736] netlink: zone id is out of range [ 269.348106][T17736] netlink: zone id is out of range [ 269.349561][T17736] netlink: zone id is out of range [ 269.350984][T17736] netlink: zone id is out of range [ 269.442571][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.446375][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.449145][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.464459][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.466888][ T5945] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 269.469830][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.555886][T17745] lo speed is unknown, defaulting to 1000 [ 269.591069][T17765] xt_hashlimit: size too large, truncated to 1048576 [ 269.648474][T17745] chnl_net:caif_netlink_parms(): no params data found [ 269.681057][T17780] syz.0.3543: attempt to access beyond end of device [ 269.681057][T17780] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 269.686661][T17780] hfsplus: unable to find HFS+ superblock [ 269.746248][T17745] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.748227][T17745] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.751333][T17745] bridge_slave_0: entered allmulticast mode [ 269.753558][T17745] bridge_slave_0: entered promiscuous mode [ 269.757364][T17745] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.759552][T17787] netlink: 'syz.6.3547': attribute type 10 has an invalid length. [ 269.760365][T17745] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.763564][T17745] bridge_slave_1: entered allmulticast mode [ 269.765845][T17745] bridge_slave_1: entered promiscuous mode [ 269.786286][T17787] team0: Device hsr_slave_0 failed to register rx_handler [ 269.815270][T17745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.818951][T17745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.864161][T17745] team0: Port device team_slave_0 added [ 269.867348][T17745] team0: Port device team_slave_1 added [ 269.891538][T17745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.893546][T17745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.901121][T17745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.905067][T17745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.906951][T17745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.914531][T17745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.939273][T17745] hsr_slave_0: entered promiscuous mode [ 269.941228][T17745] hsr_slave_1: entered promiscuous mode [ 269.943380][T17745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.945532][T17745] Cannot create hsr debugfs directory [ 270.070745][T17745] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 270.073932][T17745] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 270.077808][T17745] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 270.081614][T17745] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 270.088843][T17799] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 270.093911][T17799] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 270.107582][T17745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.114819][T17745] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.119224][T17174] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.121287][T17174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.125809][T17175] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.127819][T17175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.146368][T17745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.216319][T17745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.248453][T17801] kvm: kvm [17800]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x80e [ 270.283629][T17801] kvm: kvm [17800]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x4a [ 270.314298][T17745] veth0_vlan: entered promiscuous mode [ 270.318936][T17745] veth1_vlan: entered promiscuous mode [ 270.331209][T17745] veth0_macvtap: entered promiscuous mode [ 270.336698][T17745] veth1_macvtap: entered promiscuous mode [ 270.343458][T17745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.346311][T17745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.349447][T17745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.352994][T17745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.356751][T17745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.361468][T17745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.364198][T17745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.367038][T17745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.369827][T17745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.372642][T17745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.375405][T17745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.378285][T17745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.383329][T17745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.388994][T17745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.391930][T17745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.394657][T17745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.397530][T17745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.400226][T17745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.403161][T17745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.405851][T17745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.408750][T17745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.416399][T17745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.419492][T17745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.422340][T17745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.425646][T17745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.429600][T17745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.433199][T17745] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.435813][T17745] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.438276][T17745] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.440740][T17745] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.493969][T17174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.501570][T17174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.516276][T17175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.518647][T17175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.612754][T17825] netlink: 'syz.7.3553': attribute type 4 has an invalid length. [ 270.660102][T17828] [U] ^H [ 270.680258][T17814] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 270.753733][T17832] input: syz0 as /devices/virtual/input/input36 [ 270.774485][T17838] vlan0: entered allmulticast mode [ 271.034960][T17876] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 271.104585][T17881] ipvlan2: entered promiscuous mode [ 271.109798][T17881] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 271.112456][T17881] team0: Device ipvlan2 is already an upper device of the team interface [ 271.590647][T17903] can0: slcan on ptm0. [ 271.663289][ T5941] Bluetooth: hci1: command tx timeout [ 272.103199][T17907] __nla_validate_parse: 100 callbacks suppressed [ 272.103210][T17907] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3579'. [ 272.116417][T17913] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3581'. [ 272.177435][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 272.177446][ T40] audit: type=1400 audit(2000005425.472:40710): avc: denied { connect } for pid=17915 comm="syz.6.3582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 272.182416][T17916] pim6reg1: entered promiscuous mode [ 272.184530][ T40] audit: type=1400 audit(2000005425.472:40711): avc: denied { name_connect } for pid=17915 comm="syz.6.3582" dest=19998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 272.186370][T17916] pim6reg1: entered allmulticast mode [ 272.239830][T17921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3583'. [ 272.242677][T17920] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3583'. [ 272.433234][T17900] can0 (unregistered): slcan off ptm0. [ 272.625992][T17960] netlink: 'syz.6.3594': attribute type 2 has an invalid length. [ 272.630321][T17960] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3594'. [ 272.732976][ T40] audit: type=1400 audit(2000005425.996:40712): avc: denied { connect } for pid=17962 comm="syz.0.3595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 272.789317][T17973] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3599'. [ 272.820857][ T40] audit: type=1400 audit(2000005426.080:40713): avc: denied { ioctl } for pid=17975 comm="syz.7.3600" path="socket:[81486]" dev="sockfs" ino=81486 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 272.886672][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3602'. [ 272.889148][T17983] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3602'. [ 272.891573][T17983] netlink: 'syz.6.3602': attribute type 7 has an invalid length. [ 272.901158][T17983] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3602'. [ 272.929806][T17985] SELinux: policydb string does not match my string SE Linux [ 272.932617][T17985] SELinux: failed to load policy [ 272.950655][ T5996] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 272.950779][ T5941] Bluetooth: hci2: command 0x0c1a tx timeout [ 272.952579][ T5996] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 272.976353][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3604'. [ 273.163500][ T40] audit: type=1400 audit(2000005426.398:40714): avc: denied { bind } for pid=17996 comm="syz.6.3607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 273.169240][ T40] audit: type=1400 audit(2000005426.398:40715): avc: denied { read } for pid=17996 comm="syz.6.3607" path="socket:[83276]" dev="sockfs" ino=83276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 273.509148][ T40] audit: type=1400 audit(2000005426.716:40716): avc: denied { append } for pid=18034 comm="syz.7.3617" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 273.518013][ T40] audit: type=1400 audit(2000005426.725:40717): avc: denied { map } for pid=18034 comm="syz.7.3617" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 273.524522][ T40] audit: type=1400 audit(2000005426.725:40718): avc: denied { execute } for pid=18034 comm="syz.7.3617" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 273.566692][T18037] IPv6: NLM_F_CREATE should be specified when creating new route [ 273.600316][ T40] audit: type=1400 audit(2000005426.809:40719): avc: denied { append } for pid=18045 comm="syz.7.3620" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 273.870665][T18046] usb usb1: usbfs: process 18046 (syz.7.3620) did not claim interface 0 before use [ 273.873631][T18046] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 273.888822][ T5941] Bluetooth: hci1: command tx timeout [ 274.250096][ T5997] usb 11-1: new low-speed USB device number 6 using dummy_hcd [ 274.413652][ T5997] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 274.416038][ T5997] usb 11-1: config 0 has no interface number 0 [ 274.421600][ T5997] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 274.425943][ T5997] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 274.429672][ T5997] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 274.433210][ T5997] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 274.436308][ T5997] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 274.439284][ T5997] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 274.443073][ T5997] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 274.445603][ T5997] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.449069][ T5997] usb 11-1: config 0 descriptor?? [ 274.450931][T18072] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 274.453002][T18072] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 274.458334][ T5997] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 274.459412][T18074] netlink: 'syz.7.3628': attribute type 10 has an invalid length. [ 274.463093][T18074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.528325][T18074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.816184][T18081] netlink: 'syz.0.3631': attribute type 1 has an invalid length. [ 275.164933][ T7886] usb 11-1: USB disconnect, device number 6 [ 275.169593][ T5996] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 275.171988][ T5996] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 275.173785][ T7886] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 275.523139][T18110] ipvlan2: entered promiscuous mode [ 275.525662][T18110] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 275.528986][T18110] team0: Device ipvlan2 is already an upper device of the team interface [ 275.782344][T18115] netlink: 'syz.3.3643': attribute type 21 has an invalid length. [ 275.785343][T18115] netlink: 'syz.3.3643': attribute type 20 has an invalid length. [ 275.787986][T18115] IPv6: NLM_F_CREATE should be specified when creating new route [ 276.007664][T18144] net_ratelimit: 17 callbacks suppressed [ 276.007674][T18144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.110859][ T5941] Bluetooth: hci1: command tx timeout [ 276.326676][T18155] bpf: Bad value for 'uid' [ 276.785652][T18175] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 276.843693][T18181] netlink: 'syz.6.3663': attribute type 1 has an invalid length. [ 276.854293][T18181] bond9: entered promiscuous mode [ 276.855883][T18181] 8021q: adding VLAN 0 to HW filter on device bond9 [ 276.859500][T18181] netlink: 'syz.6.3663': attribute type 1 has an invalid length. [ 276.873982][T18181] bond10: entered promiscuous mode [ 276.877209][T18181] 8021q: adding VLAN 0 to HW filter on device bond10 [ 276.880894][T18181] netlink: 'syz.6.3663': attribute type 1 has an invalid length. [ 276.888070][T18181] bond11: entered promiscuous mode [ 276.889667][T18181] 8021q: adding VLAN 0 to HW filter on device bond11 [ 276.896267][T18181] netlink: 'syz.6.3663': attribute type 1 has an invalid length. [ 276.904596][T18181] bond12: entered promiscuous mode [ 276.906251][T18181] 8021q: adding VLAN 0 to HW filter on device bond12 [ 276.908548][T18181] netlink: 'syz.6.3663': attribute type 1 has an invalid length. [ 276.918205][T18181] bond13: entered promiscuous mode [ 276.919874][T18181] 8021q: adding VLAN 0 to HW filter on device bond13 [ 276.922107][T18181] netlink: 'syz.6.3663': attribute type 1 has an invalid length. [ 276.932748][T18181] bond14: entered promiscuous mode [ 276.934540][T18181] 8021q: adding VLAN 0 to HW filter on device bond14 [ 276.936798][T18181] netlink: 'syz.6.3663': attribute type 1 has an invalid length. [ 276.954648][T18181] bond15: entered promiscuous mode [ 276.956433][T18181] 8021q: adding VLAN 0 to HW filter on device bond15 [ 276.958693][T18181] netlink: 'syz.6.3663': attribute type 1 has an invalid length. [ 276.965855][T18181] bond16: entered promiscuous mode [ 276.967351][T18181] 8021q: adding VLAN 0 to HW filter on device bond16 [ 276.969647][T18181] netlink: 'syz.6.3663': attribute type 1 has an invalid length. [ 276.977267][T18181] bond17: entered promiscuous mode [ 276.978875][T18181] 8021q: adding VLAN 0 to HW filter on device bond17 [ 276.981096][T18181] netlink: 'syz.6.3663': attribute type 1 has an invalid length. [ 276.988100][T18181] bond18: entered promiscuous mode [ 276.989651][T18181] 8021q: adding VLAN 0 to HW filter on device bond18 [ 277.007387][T18181] bond19: entered promiscuous mode [ 277.009160][T18181] 8021q: adding VLAN 0 to HW filter on device bond19 [ 277.016677][T18181] bond20: entered promiscuous mode [ 277.018295][T18181] 8021q: adding VLAN 0 to HW filter on device bond20 [ 277.025365][T18181] bond21: entered promiscuous mode [ 277.026954][T18181] 8021q: adding VLAN 0 to HW filter on device bond21 [ 277.034241][T18181] bond22: entered promiscuous mode [ 277.035862][T18181] 8021q: adding VLAN 0 to HW filter on device bond22 [ 277.053997][T18181] bond23: entered promiscuous mode [ 277.055558][T18181] 8021q: adding VLAN 0 to HW filter on device bond23 [ 277.074364][T18181] bond24: entered promiscuous mode [ 277.075962][T18181] 8021q: adding VLAN 0 to HW filter on device bond24 [ 277.087458][T18181] bond25: entered promiscuous mode [ 277.089727][T18181] 8021q: adding VLAN 0 to HW filter on device bond25 [ 277.103077][T18181] bond26: entered promiscuous mode [ 277.105358][T18181] 8021q: adding VLAN 0 to HW filter on device bond26 [ 277.112685][T18181] bond27: entered promiscuous mode [ 277.114349][T18181] 8021q: adding VLAN 0 to HW filter on device bond27 [ 277.138065][T18181] bond28: entered promiscuous mode [ 277.140380][T18181] 8021q: adding VLAN 0 to HW filter on device bond28 [ 277.160967][T18181] bond29: entered promiscuous mode [ 277.162729][T18181] 8021q: adding VLAN 0 to HW filter on device bond29 [ 277.170667][T18181] bond30: entered promiscuous mode [ 277.172347][T18181] 8021q: adding VLAN 0 to HW filter on device bond30 [ 277.181245][T18181] bond31: entered promiscuous mode [ 277.182885][T18181] 8021q: adding VLAN 0 to HW filter on device bond31 [ 277.202623][T18181] bond32: entered promiscuous mode [ 277.204302][T18181] 8021q: adding VLAN 0 to HW filter on device bond32 [ 277.225791][T18181] bond33: entered promiscuous mode [ 277.228106][T18181] 8021q: adding VLAN 0 to HW filter on device bond33 [ 277.247337][T18181] bond34: entered promiscuous mode [ 277.248973][T18181] 8021q: adding VLAN 0 to HW filter on device bond34 [ 277.267757][T18181] bond35: entered promiscuous mode [ 277.269338][T18181] 8021q: adding VLAN 0 to HW filter on device bond35 [ 277.279263][T18181] bond36: entered promiscuous mode [ 277.280902][T18181] 8021q: adding VLAN 0 to HW filter on device bond36 [ 277.292797][T18181] bond37: entered promiscuous mode [ 277.294577][T18181] 8021q: adding VLAN 0 to HW filter on device bond37 [ 277.317411][T18181] bond38: entered promiscuous mode [ 277.319391][T18181] 8021q: adding VLAN 0 to HW filter on device bond38 [ 277.338536][T18181] bond39: entered promiscuous mode [ 277.340740][T18181] 8021q: adding VLAN 0 to HW filter on device bond39 [ 277.362626][T18181] bond40: entered promiscuous mode [ 277.364354][T18181] 8021q: adding VLAN 0 to HW filter on device bond40 [ 277.379662][T18181] bond41: entered promiscuous mode [ 277.381450][T18181] 8021q: adding VLAN 0 to HW filter on device bond41 [ 277.393200][ T5996] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 277.395012][ T5996] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 277.397861][T18181] bond42: entered promiscuous mode [ 277.399997][T18181] 8021q: adding VLAN 0 to HW filter on device bond42 [ 277.409016][T18181] bond43: entered promiscuous mode [ 277.410679][T18181] 8021q: adding VLAN 0 to HW filter on device bond43 [ 277.428393][T18181] bond44: entered promiscuous mode [ 277.430451][T18181] 8021q: adding VLAN 0 to HW filter on device bond44 [ 277.455616][T18181] bond45: entered promiscuous mode [ 277.457355][T18181] 8021q: adding VLAN 0 to HW filter on device bond45 [ 277.474315][T18181] bond46: entered promiscuous mode [ 277.475961][T18181] 8021q: adding VLAN 0 to HW filter on device bond46 [ 277.481297][T18228] ip6gretap1: entered promiscuous mode [ 277.526807][T18181] bond47: entered promiscuous mode [ 277.528439][T18181] 8021q: adding VLAN 0 to HW filter on device bond47 [ 277.536061][T18181] bond48: entered promiscuous mode [ 277.537713][T18181] 8021q: adding VLAN 0 to HW filter on device bond48 [ 277.546520][T18181] bond49: entered promiscuous mode [ 277.548174][T18181] 8021q: adding VLAN 0 to HW filter on device bond49 [ 277.567032][T18181] bond50: entered promiscuous mode [ 277.568771][T18181] 8021q: adding VLAN 0 to HW filter on device bond50 [ 277.580871][T18181] bond51: entered promiscuous mode [ 277.582494][T18181] 8021q: adding VLAN 0 to HW filter on device bond51 [ 277.606108][T18181] bond52: entered promiscuous mode [ 277.607970][T18181] 8021q: adding VLAN 0 to HW filter on device bond52 [ 277.626514][T18181] bond53: entered promiscuous mode [ 277.628144][T18181] 8021q: adding VLAN 0 to HW filter on device bond53 [ 277.635949][T18181] bond54: entered promiscuous mode [ 277.637568][T18181] 8021q: adding VLAN 0 to HW filter on device bond54 [ 277.648113][T18181] bond55: entered promiscuous mode [ 277.654559][T18181] 8021q: adding VLAN 0 to HW filter on device bond55 [ 277.664430][T18181] bond56: entered promiscuous mode [ 277.666103][T18181] 8021q: adding VLAN 0 to HW filter on device bond56 [ 277.673725][T18181] bond57: entered promiscuous mode [ 277.675302][T18181] 8021q: adding VLAN 0 to HW filter on device bond57 [ 277.683270][T18181] bond58: entered promiscuous mode [ 277.684857][T18181] 8021q: adding VLAN 0 to HW filter on device bond58 [ 277.693077][T18181] bond59: entered promiscuous mode [ 277.694859][T18181] 8021q: adding VLAN 0 to HW filter on device bond59 [ 277.702273][T18181] bond60: entered promiscuous mode [ 277.704154][T18181] 8021q: adding VLAN 0 to HW filter on device bond60 [ 277.716963][T18181] bond61: entered promiscuous mode [ 277.718606][T18181] 8021q: adding VLAN 0 to HW filter on device bond61 [ 277.726574][T18181] bond62: entered promiscuous mode [ 277.728212][T18181] 8021q: adding VLAN 0 to HW filter on device bond62 [ 277.737649][T18181] bond63: entered promiscuous mode [ 277.739207][T18181] 8021q: adding VLAN 0 to HW filter on device bond63 [ 277.790589][T18251] __nla_validate_parse: 12 callbacks suppressed [ 277.790600][T18251] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3671'. [ 277.798513][ T1248] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.892650][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.900061][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.903458][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.910468][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.913403][ T5945] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.917449][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.931952][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.934017][ T5941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.936265][ T5941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.944279][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.946619][ T5941] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.948835][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.977702][ T1248] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.254986][T18251] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3671'. [ 278.277938][ T1248] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.290185][T18266] futex_wake_op: syz.6.3676 tries to shift op by 32; fix this program [ 278.300043][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 278.300054][ T40] audit: type=1400 audit(2000005431.196:40735): avc: denied { create } for pid=18267 comm="syz.0.3675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 278.307584][ T40] audit: type=1400 audit(2000005431.196:40736): avc: denied { setopt } for pid=18267 comm="syz.0.3675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 278.313624][ T40] audit: type=1400 audit(2000005431.196:40737): avc: denied { connect } for pid=18267 comm="syz.0.3675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 278.319398][ T40] audit: type=1400 audit(2000005431.196:40738): avc: denied { write } for pid=18267 comm="syz.0.3675" laddr=fe80::7c45:40ff:fe24:20ab lport=35917 faddr=ff02::1 fport=20007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 278.333908][ T40] audit: type=1400 audit(2000005431.196:40739): avc: denied { egress } for pid=18267 comm="syz.0.3675" saddr=fe80::7c45:40ff:fe24:20ab src=35917 daddr=ff02::1 dest=20007 netif=eth0 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 278.341192][ T40] audit: type=1400 audit(2000005431.206:40740): avc: denied { sendto } for pid=18267 comm="syz.0.3675" saddr=fe80::7c45:40ff:fe24:20ab src=35917 daddr=ff02::1 dest=20007 netif=eth0 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 278.352789][ T40] audit: type=1400 audit(2000005431.243:40741): avc: denied { create } for pid=18267 comm="syz.0.3675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 278.365304][ T1248] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.367048][T18270] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3677'. [ 278.374229][T18256] lo speed is unknown, defaulting to 1000 [ 278.402679][T18276] PKCS8: Unsupported PKCS#8 version [ 278.444418][T18282] xt_HMARK: spi-set and port-set can't be combined [ 278.455128][T18256] chnl_net:caif_netlink_parms(): no params data found [ 278.481654][T18287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3682'. [ 278.545747][ T1248] bridge_slave_1: left allmulticast mode [ 278.547393][ T1248] bridge_slave_1: left promiscuous mode [ 278.549951][ T1248] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.556456][ T1248] bridge_slave_0: left allmulticast mode [ 278.558070][ T1248] bridge_slave_0: left promiscuous mode [ 278.560266][ T1248] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.598576][ T40] audit: type=1400 audit(2000005431.477:40742): avc: denied { write } for pid=18298 comm="syz.6.3685" path="socket:[84631]" dev="sockfs" ino=84631 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 278.668296][ T40] audit: type=1400 audit(2000005431.542:40743): avc: denied { nlmsg_read } for pid=18300 comm="syz.6.3686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 278.674022][T18301] netlink: 172 bytes leftover after parsing attributes in process `syz.6.3686'. [ 278.697255][T18301] openvswitch: netlink: Invalid VLAN frame [ 278.756042][T18306] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 278.760013][T18306] Error validating options; rc = [-22] [ 278.926384][ T1248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.930322][ T1248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.935540][ T1248] bond0 (unregistering): Released all slaves [ 278.939533][T18256] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.942005][T18256] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.945217][T18256] bridge_slave_0: entered allmulticast mode [ 278.948199][T18256] bridge_slave_0: entered promiscuous mode [ 278.971699][T18256] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.972008][T18308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3688'. [ 278.974498][T18256] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.980647][T18256] bridge_slave_1: entered allmulticast mode [ 278.983616][T18256] bridge_slave_1: entered promiscuous mode [ 279.053932][ T40] audit: type=1400 audit(2000005431.907:40744): avc: denied { watch } for pid=18314 comm="syz.0.3690" path="/255/file0/file0" dev="9p" ino=36831515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 279.059195][T18256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.080950][T18256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.158226][T18320] 8021q: adding VLAN 0 to HW filter on device bond64 [ 279.164655][T18256] team0: Port device team_slave_0 added [ 279.172030][T18256] team0: Port device team_slave_1 added [ 279.177235][T18321] bond64: (slave gretap2): making interface the new active one [ 279.180793][T18321] bond64: (slave gretap2): Enslaving as an active interface with an up link [ 279.190583][T18330] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3696'. [ 279.225486][T18256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.228194][T18256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.228862][T18335] program syz.6.3697 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.248586][T18256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.253060][T18256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.263977][T18256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.271079][T18256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.299242][T18342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3700'. [ 279.302510][T18342] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3700'. [ 279.319801][T18256] hsr_slave_0: entered promiscuous mode [ 279.322702][T18256] hsr_slave_1: entered promiscuous mode [ 279.325286][T18256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.329017][T18256] Cannot create hsr debugfs directory [ 279.331252][T18343] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3698'. [ 279.420940][T18349] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 279.424812][T18349] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 279.476153][ T1248] hsr_slave_0: left promiscuous mode [ 279.478316][ T1248] hsr_slave_1: left promiscuous mode [ 279.480101][ T1248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.482153][ T1248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.530085][ T1248] veth1_macvtap: left promiscuous mode [ 279.531921][ T1248] veth0_macvtap: left promiscuous mode [ 279.533607][ T1248] veth1_vlan: left promiscuous mode [ 279.536808][ T1248] veth0_vlan: left promiscuous mode [ 279.549804][T18360] tmpfs: Bad value for 'mpol' [ 279.552668][T18362] tmpfs: Unknown parameter ' [ 279.552668][T18362] str_len: 2 [ 279.552668][T18362] btf_total_size: 38 [ 279.552668][T18362] [1] PTR (anon) type_id' [ 279.571750][T18354] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 279.846040][T18380] /dev/sg0: Can't lookup blockdev [ 280.130044][ T5941] Bluetooth: hci1: command tx timeout [ 280.454462][ T1248] team0 (unregistering): Port device team_slave_1 removed [ 280.565374][ T1248] team0 (unregistering): Port device team_slave_0 removed [ 281.429065][T18413] bpf: Bad value for 'uid' [ 281.440931][T18256] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 281.446570][T18256] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 281.462340][T18256] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 281.469208][T18256] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 281.526970][T18256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.536097][T18256] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.540073][ T6374] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.542327][ T6374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.548423][T17175] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.550446][T17175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.642357][T18256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.768794][T18256] veth0_vlan: entered promiscuous mode [ 281.776392][T18256] veth1_vlan: entered promiscuous mode [ 281.786186][T18256] veth0_macvtap: entered promiscuous mode [ 281.794247][T18256] veth1_macvtap: entered promiscuous mode [ 281.802155][T18256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.805052][T18256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.807820][T18256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.809548][T18439] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 281.811679][T18256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.813224][T18439] overlayfs: missing 'lowerdir' [ 281.816793][T18256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.816808][T18256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.816845][T18256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.830062][T18256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.833580][T18256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.836743][T18256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.839412][T18256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.842831][T18256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.848123][T18256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.853626][T18256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.856560][T18256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.859251][T18256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.863803][T18256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.866499][T18256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.869349][T18256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.872100][T18256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.875087][T18256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.877807][T18256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.880655][T18256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.883885][T18256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.886740][T18256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.890631][T18256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.895404][T18256] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.898217][T18256] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.901548][T18256] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.905562][T18256] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.943924][T17174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.946164][T17174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.970013][T17168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.973141][T17168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.198206][T18454] lo speed is unknown, defaulting to 1000 [ 282.200735][T18457] validate_nla: 49 callbacks suppressed [ 282.200745][T18457] netlink: 'syz.8.3727': attribute type 13 has an invalid length. [ 282.240118][T18457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.353780][ T5941] Bluetooth: hci1: command tx timeout [ 282.429444][T18464] netlink: get zone limit has 4 unknown bytes [ 282.432321][T18464] xt_cluster: node mask cannot exceed total number of nodes [ 282.492714][T18417] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 282.540625][T18476] selinux_netlink_send: 58 callbacks suppressed [ 282.540636][T18476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=18476 comm=syz.6.3735 [ 282.549771][T18476] gtp0: entered promiscuous mode [ 282.551291][T18476] gtp0: entered allmulticast mode [ 282.781471][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 282.949421][T18533] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 282.959561][T18533] : entered promiscuous mode [ 283.251240][T18546] xt_hashlimit: size too large, truncated to 1048576 [ 283.678611][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 283.678622][ T40] audit: type=1400 audit(2000005436.229:40757): avc: denied { write } for pid=18575 comm="syz.6.3765" laddr=172.20.20.10 lport=47212 faddr=172.20.20.170 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 283.909171][T18594] syz.0.3771: attempt to access beyond end of device [ 283.909171][T18594] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 283.915141][T18594] syz.0.3771: attempt to access beyond end of device [ 283.915141][T18594] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 283.919780][T18594] syz.0.3771: attempt to access beyond end of device [ 283.919780][T18594] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 283.926581][T18594] syz.0.3771: attempt to access beyond end of device [ 283.926581][T18594] nbd0: rw=0, sector=18, nr_sectors = 2 limit=0 [ 283.931218][T18594] syz.0.3771: attempt to access beyond end of device [ 283.931218][T18594] nbd0: rw=0, sector=30, nr_sectors = 2 limit=0 [ 283.935899][T18594] syz.0.3771: attempt to access beyond end of device [ 283.935899][T18594] nbd0: rw=0, sector=36, nr_sectors = 2 limit=0 [ 283.953924][T18590] NILFS (nbd8): device size too small [ 284.170821][T18601] netlink: 'syz.0.3773': attribute type 1 has an invalid length. [ 284.173748][T18601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=18601 comm=syz.0.3773 [ 284.173880][T18602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=18602 comm=syz.0.3773 [ 284.225575][T18605] erspan0: entered allmulticast mode [ 284.304814][ T40] audit: type=1400 audit(2000005436.818:40758): avc: denied { module_load } for pid=18607 comm="syz.0.3775" path="/sys/power/pm_test" dev="sysfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 284.371063][T18612] netlink: 'syz.0.3776': attribute type 1 has an invalid length. [ 284.384428][T18612] 8021q: adding VLAN 0 to HW filter on device bond5 [ 284.387499][T18612] netlink: 'syz.0.3776': attribute type 1 has an invalid length. [ 284.390446][T18612] netlink: 'syz.0.3776': attribute type 1 has an invalid length. [ 284.393345][T18612] netlink: 'syz.0.3776': attribute type 1 has an invalid length. [ 284.397727][T18612] netlink: 'syz.0.3776': attribute type 1 has an invalid length. [ 284.400659][T18612] netlink: 'syz.0.3776': attribute type 1 has an invalid length. [ 284.403621][T18612] netlink: 'syz.0.3776': attribute type 1 has an invalid length. [ 284.406953][T18612] netlink: 'syz.0.3776': attribute type 1 has an invalid length. [ 284.434961][T18612] bond5: (slave gretap1): making interface the new active one [ 284.437878][T18612] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 284.577365][ T5941] Bluetooth: hci1: command tx timeout [ 284.596465][ T40] audit: type=1400 audit(2000005437.089:40759): avc: denied { append } for pid=18619 comm="syz.6.3778" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 284.713044][T18632] Cannot find del_set index 4 as target [ 284.715496][T18632] __nla_validate_parse: 6 callbacks suppressed [ 284.715508][T18632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3780'. [ 284.721167][T18632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3780'. [ 284.723638][T18632] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3780'. [ 284.766279][T18635] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3781'. [ 284.889476][T18645] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3786'. [ 285.001022][T18645] bond0: (slave bond_slave_0): Releasing backup interface [ 285.455507][ T5840] kernel write not supported for file /media0 (pid: 5840 comm: kworker/1:2) [ 285.665845][T18661] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 285.796607][T18673] xt_hashlimit: size too large, truncated to 1048576 [ 285.797224][T18674] xt_hashlimit: size too large, truncated to 1048576 [ 285.814552][ T40] audit: type=1400 audit(2000005438.231:40760): avc: denied { write } for pid=18675 comm="syz.6.3796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 285.899569][ T40] audit: type=1400 audit(2000005438.305:40761): avc: denied { read } for pid=18686 comm="syz.0.3799" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 285.904620][T18688] xt_hashlimit: max too large, truncated to 1048576 [ 285.910801][T18687] xt_hashlimit: max too large, truncated to 1048576 [ 285.913542][T18688] overlayfs: disabling nfs_export due to verity=on [ 285.915448][T18687] overlayfs: disabling nfs_export due to verity=on [ 285.917835][T18688] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 285.936602][ T40] audit: type=1400 audit(2000005438.343:40762): avc: denied { setopt } for pid=18686 comm="syz.0.3799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 285.942560][ T40] audit: type=1400 audit(2000005438.343:40763): avc: denied { read } for pid=18686 comm="syz.0.3799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 286.085239][T18703] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 286.095676][T18690] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.180525][T18690] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.258560][T18690] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.385232][T18714] Driver unsupported XDP return value 0 on prog (id 875) dev N/A, expect packet loss! [ 286.398472][T18690] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.480986][T18690] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.490388][T18690] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.497740][T18690] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.504181][T18690] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.801172][ T5941] Bluetooth: hci1: command tx timeout [ 286.929759][T18730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3810'. [ 286.971336][T18730] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.984692][T18729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3810'. [ 287.019158][T18734] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3811'. [ 287.021643][T18734] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 287.056284][T18730] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.093027][T18724] kvm: kvm [18723]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x79f0 [ 287.098429][T18724] kvm: kvm [18723]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x77ad [ 287.116414][T18724] kvm: kvm [18723]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x936e [ 287.130301][T18730] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.154177][ T40] audit: type=1400 audit(2000005439.484:40764): avc: denied { create } for pid=18736 comm="syz.3.3812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 287.226205][T18730] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.370065][T18730] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.378816][ T40] audit: type=1400 audit(2000005439.690:40765): avc: denied { read } for pid=18756 comm="syz.8.3814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 287.379977][T18730] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.406665][T18761] autofs4:pid:18761:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 287.416050][T18730] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.424352][T18730] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.428089][T18757] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3814'. [ 287.467896][T18766] lo: entered promiscuous mode [ 287.504454][T18761] lo speed is unknown, defaulting to 1000 [ 287.507228][T18769] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3815'. [ 287.915881][ T5976] hid-generic 000D:07FF:0009.000B: item fetching failed at offset 0/118 [ 287.918427][ T5976] hid-generic 000D:07FF:0009.000B: probe with driver hid-generic failed with error -22 [ 288.604034][T18809] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.630452][T18816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.635196][T18816] batadv_slave_0: entered promiscuous mode [ 288.970079][T18838] loop6: detected capacity change from 0 to 524287999 [ 289.831025][ T40] audit: type=1400 audit(2000005441.982:40766): avc: denied { read } for pid=18841 comm="syz.0.3835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 289.935493][ T40] audit: type=1400 audit(2000005442.084:40767): avc: denied { module_load } for pid=18854 comm="syz.0.3839" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 289.943630][T18855] dlm: no locking on control device [ 290.139665][ T40] audit: type=1400 audit(2000005442.271:40768): avc: denied { name_bind } for pid=18869 comm="syz.8.3844" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 290.146144][ T40] audit: type=1400 audit(2000005442.271:40769): avc: denied { read } for pid=18869 comm="syz.8.3844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 290.157899][ T40] audit: type=1400 audit(2000005442.271:40770): avc: denied { ioctl } for pid=18869 comm="syz.8.3844" path="socket:[87783]" dev="sockfs" ino=87783 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 290.169766][T18872] __nla_validate_parse: 2 callbacks suppressed [ 290.169775][T18872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3845'. [ 290.181305][T18875] netlink: zone id is out of range [ 290.182796][T18875] netlink: zone id is out of range [ 290.184244][T18875] netlink: zone id is out of range [ 290.185766][T18875] netlink: zone id is out of range [ 290.187258][T18875] netlink: zone id is out of range [ 290.189415][T18875] netlink: zone id is out of range [ 290.191992][T18875] netlink: zone id is out of range [ 290.193456][T18875] netlink: zone id is out of range [ 290.194901][T18875] netlink: zone id is out of range [ 290.196385][T18875] netlink: zone id is out of range [ 290.321700][T18885] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3849'. [ 290.340669][T18885] dlm: no local IP address has been set [ 290.342588][T18885] dlm: cannot start dlm midcomms -107 [ 290.899132][ T40] audit: type=1400 audit(2000005442.982:40771): avc: denied { view } for pid=18897 comm="syz.6.3853" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 291.097915][T18910] validate_nla: 58 callbacks suppressed [ 291.097927][T18910] netlink: 'syz.0.3857': attribute type 1 has an invalid length. [ 291.102624][T18910] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3857'. [ 291.107298][T18910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3857'. [ 291.110188][T18910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3857'. [ 291.223935][T18922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3861'. [ 291.264654][T18924] sch_tbf: burst 0 is lower than device geneve0 mtu (1464) ! [ 291.280303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 291.305552][T18926] program syz.0.3864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.308393][T18927] program syz.0.3864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.369482][T18935] program syz.0.3866 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.410403][T18939] sp0: Synchronizing with TNC [ 291.492658][T18937] netlink: 'syz.8.3867': attribute type 4 has an invalid length. [ 291.495157][T18937] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3867'. [ 291.502558][T18942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3869'. [ 291.502860][T18937] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3867'. [ 291.612941][T18952] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 291.660725][T18954] xt_hashlimit: size too large, truncated to 1048576 [ 291.775566][T18954] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.777728][T18954] IPv6: NLM_F_CREATE should be set when creating new route [ 291.779749][T18954] IPv6: NLM_F_CREATE should be set when creating new route [ 291.868378][T17750] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 292.039256][T17750] usb 13-1: Using ep0 maxpacket: 16 [ 292.041922][T17750] usb 13-1: config 0 has an invalid interface number: 184 but max is 3 [ 292.044276][T17750] usb 13-1: config 0 has an invalid interface number: 216 but max is 3 [ 292.046554][T17750] usb 13-1: config 0 has an invalid interface number: 21 but max is 3 [ 292.048959][T17750] usb 13-1: config 0 has an invalid interface number: 9 but max is 3 [ 292.051972][T17750] usb 13-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 292.054410][T17750] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.057202][T17750] usb 13-1: config 0 has no interface number 0 [ 292.059448][T17750] usb 13-1: config 0 has no interface number 1 [ 292.062171][T17750] usb 13-1: config 0 has no interface number 2 [ 292.064403][T17750] usb 13-1: config 0 has no interface number 3 [ 292.066622][T17750] usb 13-1: config 0 interface 184 altsetting 28 has a duplicate endpoint with address 0x7, skipping [ 292.069704][T17750] usb 13-1: config 0 interface 184 altsetting 28 has a duplicate endpoint with address 0x3, skipping [ 292.072720][T17750] usb 13-1: config 0 interface 184 altsetting 28 has a duplicate endpoint with address 0x3, skipping [ 292.075744][T17750] usb 13-1: config 0 interface 184 altsetting 28 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 292.078799][T17750] usb 13-1: config 0 interface 184 altsetting 28 has a duplicate endpoint with address 0x8, skipping [ 292.081901][T17750] usb 13-1: config 0 interface 184 altsetting 28 has a duplicate endpoint with address 0x3, skipping [ 292.085076][T17750] usb 13-1: config 0 interface 184 altsetting 28 has a duplicate endpoint with address 0x5, skipping [ 292.088118][T17750] usb 13-1: config 0 interface 216 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 292.091129][T17750] usb 13-1: config 0 interface 216 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 292.094534][T17750] usb 13-1: config 0 interface 216 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 292.097532][T17750] usb 13-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 292.100597][T17750] usb 13-1: config 0 interface 216 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 292.103796][T17750] usb 13-1: config 0 interface 216 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 292.106757][T17750] usb 13-1: config 0 interface 216 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 292.109684][T17750] usb 13-1: config 0 interface 21 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 292.112686][T17750] usb 13-1: config 0 interface 21 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 292.115767][T17750] usb 13-1: config 0 interface 21 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 292.118683][T17750] usb 13-1: config 0 interface 21 altsetting 5 has a duplicate endpoint with address 0x8C, skipping [ 292.121753][T17750] usb 13-1: config 0 interface 21 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 292.124951][T17750] usb 13-1: config 0 interface 21 altsetting 5 endpoint 0xA has an invalid bInterval 70, changing to 7 [ 292.128115][T17750] usb 13-1: config 0 interface 21 altsetting 5 endpoint 0x1 has invalid maxpacket 56698, setting to 64 [ 292.131109][T17750] usb 13-1: config 0 interface 21 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 292.134068][T17750] usb 13-1: config 0 interface 21 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 292.137155][T17750] usb 13-1: config 0 interface 21 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 292.140250][T17750] usb 13-1: config 0 interface 21 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 292.146122][T17750] usb 13-1: config 0 interface 21 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 292.149159][T17750] usb 13-1: config 0 interface 21 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 292.152082][T17750] usb 13-1: config 0 interface 9 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 292.155604][T17750] usb 13-1: config 0 interface 184 has no altsetting 0 [ 292.157995][T17750] usb 13-1: config 0 interface 21 has no altsetting 0 [ 292.159850][T17750] usb 13-1: config 0 interface 9 has no altsetting 0 [ 292.163270][T17750] usb 13-1: New USB device found, idVendor=0cf3, idProduct=0004, bcdDevice=b2.e2 [ 292.165778][T17750] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.168197][T17750] usb 13-1: Product: syz [ 292.169435][T17750] usb 13-1: Manufacturer: syz [ 292.170742][T17750] usb 13-1: SerialNumber: syz [ 292.174866][ T40] audit: type=1400 audit(2000005444.180:40772): avc: denied { wake_alarm } for pid=18962 comm="syz.6.3875" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 292.178289][T17750] usb 13-1: config 0 descriptor?? [ 292.229388][T18967] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3875'. [ 292.269292][T18970] overlayfs: workdir and upperdir must be separate subtrees [ 292.401659][T17750] usb 13-1: Could not find all expected endpoints [ 292.409605][T17750] usb 13-1: Could not find all expected endpoints [ 292.413892][T17750] usb 13-1: Could not find all expected endpoints [ 292.417759][T17750] usb 13-1: Could not find all expected endpoints [ 292.421051][T17750] usb 13-1: USB disconnect, device number 2 [ 292.511204][ T40] audit: type=1400 audit(2000005444.498:40773): avc: denied { getopt } for pid=18977 comm="syz.6.3880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 292.883286][T18984] netlink: 'syz.0.3882': attribute type 10 has an invalid length. [ 293.051229][T18996] overlayfs: missing 'lowerdir' [ 293.140460][ T5945] Bluetooth: hci1: command 0x0405 tx timeout [ 293.175000][ T40] audit: type=1400 audit(2000005445.115:40774): avc: denied { mount } for pid=19002 comm="syz.3.3890" name="/" dev="hugetlbfs" ino=88973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 293.268653][ T40] audit: type=1800 audit(2000005445.199:40775): pid=19008 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3892" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 293.539045][T19040] tipc: Failed to obtain node identity [ 293.540719][T19040] tipc: Enabling of bearer rejected, failed to enable media [ 293.543374][T19040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1031 sclass=netlink_route_socket pid=19040 comm=syz.0.3900 [ 293.562943][T19040] ip6tnl2: entered promiscuous mode [ 293.564502][T19040] ip6tnl2: entered allmulticast mode [ 293.619827][T19044] overlayfs: conflicting lowerdir path [ 293.747279][T19048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=19048 comm=syz.6.3904 [ 293.788189][T19051] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 294.007764][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.010773][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.013741][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.016660][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.026218][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.029387][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.031947][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.034072][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.036190][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.039520][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.042463][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.044977][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.047251][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.051195][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.053700][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.055799][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.057905][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.060431][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.062530][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.064646][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.066719][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.068877][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.072259][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.074780][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.076888][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.078980][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.081694][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.083818][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.085861][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.087881][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.089906][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.093295][ T65] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.098567][ T65] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 294.252426][ T5997] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 294.315149][T19066] tmpfs: Bad value for 'mpol' [ 294.414141][ T5997] usb 11-1: config 0 has no interfaces? [ 294.415797][ T5997] usb 11-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 294.418405][ T5997] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.421624][ T5997] usb 11-1: config 0 descriptor?? [ 294.650602][ T5991] usb 11-1: USB disconnect, device number 7 [ 294.762897][T19102] ================================================================== [ 294.765369][T19102] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x21c5/0x4380 [ 294.767905][T19102] Write of size 3840 at addr ffffc9000669d000 by task vivid-000-vid-c/19102 [ 294.772359][T19102] [ 294.773100][T19102] CPU: 2 UID: 0 PID: 19102 Comm: vivid-000-vid-c Not tainted 6.14.0-rc7-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 294.773113][T19102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 294.773119][T19102] Call Trace: [ 294.773123][T19102] [ 294.773128][T19102] dump_stack_lvl+0x116/0x1f0 [ 294.773144][T19102] print_report+0xc3/0x670 [ 294.773156][T19102] ? __virt_addr_valid+0x5e/0x590 [ 294.773168][T19102] kasan_report+0xd9/0x110 [ 294.773179][T19102] ? tpg_fill_plane_buffer+0x21c5/0x4380 [ 294.773193][T19102] ? tpg_fill_plane_buffer+0x21c5/0x4380 [ 294.773206][T19102] kasan_check_range+0xef/0x1a0 [ 294.773219][T19102] __asan_memcpy+0x3c/0x60 [ 294.773234][T19102] tpg_fill_plane_buffer+0x21c5/0x4380 [ 294.773252][T19102] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 294.773266][T19102] vivid_fillbuff+0x8e0/0x41f0 [ 294.773284][T19102] ? hlock_class+0x4e/0x130 [ 294.773300][T19102] ? __lock_acquire+0x15a9/0x3c40 [ 294.773328][T19102] ? __pfx_vivid_fillbuff+0x10/0x10 [ 294.773349][T19102] ? vivid_thread_vid_cap_tick+0x7ab/0x15d0 [ 294.773376][T19102] ? v4l2_ctrl_request_setup+0x45c/0xa60 [ 294.773393][T19102] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.773406][T19102] ? vivid_thread_vid_cap_tick+0x81b/0x15d0 [ 294.773418][T19102] vivid_thread_vid_cap_tick+0x81b/0x15d0 [ 294.773431][T19102] ? lock_acquire+0x2f/0xb0 [ 294.773445][T19102] vivid_thread_vid_cap+0x5b8/0xb90 [ 294.773458][T19102] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.773470][T19102] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 294.773482][T19102] ? __kthread_parkme+0x148/0x220 [ 294.773492][T19102] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 294.773504][T19102] kthread+0x3af/0x750 [ 294.773517][T19102] ? __pfx_kthread+0x10/0x10 [ 294.773530][T19102] ? __pfx_kthread+0x10/0x10 [ 294.773542][T19102] ret_from_fork+0x45/0x80 [ 294.773555][T19102] ? __pfx_kthread+0x10/0x10 [ 294.773567][T19102] ret_from_fork_asm+0x1a/0x30 [ 294.773587][T19102] [ 294.773592][T19102] [ 294.828663][T19102] The buggy address belongs to the virtual mapping at [ 294.828663][T19102] [ffffc90006661000, ffffc9000669e000) created by: [ 294.828663][T19102] vb2_vmalloc_alloc+0x11e/0x3d0 [ 294.833510][T19102] [ 294.834223][T19102] Memory state around the buggy address: [ 294.835818][T19102] ffffc9000669cf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 294.837994][T19102] ffffc9000669cf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 294.840205][T19102] >ffffc9000669d000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 294.842476][T19102] ^ [ 294.843709][T19102] ffffc9000669d080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 294.845962][T19102] ffffc9000669d100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 294.848227][T19102] ================================================================== [ 294.852541][T19102] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 294.855358][T19102] CPU: 2 UID: 0 PID: 19102 Comm: vivid-000-vid-c Not tainted 6.14.0-rc7-syzkaller #0 [ 294.858944][T19102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 294.863018][T19102] Call Trace: [ 294.864349][T19102] [ 294.865523][T19102] dump_stack_lvl+0x3d/0x1f0 [ 294.867378][T19102] panic+0x71d/0x800 [ 294.868940][T19102] ? __pfx_panic+0x10/0x10 [ 294.870870][T19102] ? irqentry_exit+0x3b/0x90 [ 294.872628][T19102] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.874462][T19102] ? preempt_schedule_thunk+0x1a/0x30 [ 294.876275][T19102] ? preempt_schedule_common+0x44/0xc0 [ 294.878166][T19102] ? check_panic_on_warn+0x1f/0xb0 [ 294.879877][T19102] check_panic_on_warn+0xab/0xb0 [ 294.881527][T19102] end_report+0x117/0x180 [ 294.882982][T19102] kasan_report+0xe9/0x110 [ 294.884502][T19102] ? tpg_fill_plane_buffer+0x21c5/0x4380 [ 294.886355][T19102] ? tpg_fill_plane_buffer+0x21c5/0x4380 [ 294.888286][T19102] kasan_check_range+0xef/0x1a0 [ 294.889674][T19102] __asan_memcpy+0x3c/0x60 [ 294.890952][T19102] tpg_fill_plane_buffer+0x21c5/0x4380 [ 294.892988][T19102] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 294.895047][T19102] vivid_fillbuff+0x8e0/0x41f0 [ 294.896914][T19102] ? hlock_class+0x4e/0x130 [ 294.898372][T19102] ? __lock_acquire+0x15a9/0x3c40 [ 294.899789][T19102] ? __pfx_vivid_fillbuff+0x10/0x10 [ 294.901347][T19102] ? vivid_thread_vid_cap_tick+0x7ab/0x15d0 [ 294.903398][T19102] ? v4l2_ctrl_request_setup+0x45c/0xa60 [ 294.905416][T19102] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.907269][T19102] ? vivid_thread_vid_cap_tick+0x81b/0x15d0 [ 294.909233][T19102] vivid_thread_vid_cap_tick+0x81b/0x15d0 [ 294.911324][T19102] ? lock_acquire+0x2f/0xb0 [ 294.913027][T19102] vivid_thread_vid_cap+0x5b8/0xb90 [ 294.914908][T19102] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.916789][T19102] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 294.918802][T19102] ? __kthread_parkme+0x148/0x220 [ 294.920529][T19102] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 294.922348][T19102] kthread+0x3af/0x750 [ 294.923520][T19102] ? __pfx_kthread+0x10/0x10 [ 294.924814][T19102] ? __pfx_kthread+0x10/0x10 [ 294.926103][T19102] ret_from_fork+0x45/0x80 [ 294.927354][T19102] ? __pfx_kthread+0x10/0x10 [ 294.928641][T19102] ret_from_fork_asm+0x1a/0x30 [ 294.929970][T19102] [ 294.931379][T19102] Kernel Offset: disabled [ 294.932665][T19102] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:53:33 Registers: info registers vcpu 0 CPU#0 RAX=00000000002c8239 RBX=0000000000000000 RCX=ffffffff8b578469 RDX=0000000000000000 RSI=ffffffff8b6cfbe0 RDI=ffffffff8bd36aa0 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c6f85 R10=ffff88806a637c2b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff90626810 R15=0000000000000000 RIP=ffffffff8b57984f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4ce7879f98 CR3=00000000469d6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa179a0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa179a0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa179a0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa179a0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa179a0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa179a0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 68ef198c32522662 5321cfc8d8b7f403 b9921745c8bd394c ccb4f84f4b23afef ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000004074c 98f92cdd5c0a2ec6 772fabe935870004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4974ed609c070000 0101ae6035cd3c4a 0049cbbf1eaea3c6 2f8b3d3523ff0300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 006d493728be2d8f 124a9bfbfb4eea37 a99e5ae70f827fb3 628abe53e2f342b8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45386edbc0aa174c a5d4e9dba6ceb16a 4dbff8d4bb0f5970 ce77d092c090b14a ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 be6cd8c4166dc8c7 318cd303d1f87ccd 60ebe6ab856a22bc 88394a541934b02c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e8b401000000c159 8abda6c358b32a11 7e0c38ea250c22e2 fcb65bc21a99418d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7900cfedeb2fc708 e36effa11e8ac891 0fecc2aaab6577ad 006d493728be2d8f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000005 RBX=1ffff920002f9e51 RCX=ffffc900017cf2c8 RDX=0000000000000002 RSI=ffffffff8e1bd140 RDI=ffff888028958000 RBP=0000000000000002 RSP=ffffc900017cf240 R8 =0000000000000000 R9 =fffffbfff20c4d02 R10=ffffffff90626817 R11=0000000000000001 R12=ffffffff8e1bd140 R13=ffffffff8e1bd140 R14=ffffc900017cf2c8 R15=0000000000000001 RIP=ffffffff8195b96d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd0574d7d60 CR3=0000000024cb8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd05697c6a3 00007fd05697c6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff314f79f0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555948d2595 00005555948d21f0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055559493b8c1 000055559493b450 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800030010001fff ffffffffff040010 0000080015ce0800 0100000008060c01 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010cb3fdc0801000 0100000608062210 0002100001c08010 000ffd8080040c01 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3ec0481000078004 0100000608060601 4e960410000e1000 0004060671dc0023 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f656469762f7665 642f01ffffffffff ffffffe708000300 10001fffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff04001000000800 15ce080001000000 08060c010cf20680 0400000004100600 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8540ab15 RDI=ffffffff9ab847c0 RBP=ffffffff9ab84780 RSP=ffffc9000658f240 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000064 R14=ffffffff9ab84780 R15=0000000000000000 RIP=ffffffff8540ab3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4ce6970f20 CR3=00000000433b8000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000000002 DR2=0000000000000006 DR3=1000000100000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000440040001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000400000000400 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ce6a0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ce6a0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ce6a0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ce6a0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ce6a0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ce6a0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000376f65 6469762f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000144c46 474a550c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000002bc825 RBX=0000000000000003 RCX=ffffffff8b578469 RDX=0000000000000000 RSI=ffffffff8b6cfbe0 RDI=ffffffff8bd36aa0 RBP=ffffed1003b5a910 RSP=ffffc900001b7e08 R8 =0000000000000001 R9 =ffffed100d526f85 R10=ffff88806a937c2b R11=0000000000000000 R12=0000000000000003 R13=ffff88801dad4880 R14=ffffffff90626810 R15=0000000000000000 RIP=ffffffff8b57984f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055556f425808 CR3=0000000027b04000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5dac20f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5dac20f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5dac20f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5dac20f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5dac20f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5dac20f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 134d00204e000401 0000000000000000 000000000002ff02 0000002100000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5dacedd100 00007f5dac37c440 00007f5dac370004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5dac37c498 00007f5dac37c490 00007f5dac37c488 00007f5dac37c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000108 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000