last executing test programs: 2m23.228508627s ago: executing program 2 (id=691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x55) ioperm(0x0, 0x1, 0x1bf4) map_shadow_stack(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x4, 0x8, 0x801}, 0x14}}, 0x0) 2m23.226930806s ago: executing program 2 (id=692): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)=""/222, 0xde}], 0x1}, 0x1}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x0, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x100000}}, @common=@inet=@socket3={{0x28}, 0xd79f8e90f63adae1}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000050000003ff63e1d06"], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r4 = inotify_init() inotify_add_watch(r4, 0x0, 0xa000032a) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="1b8408217f05"], 0xffdd) 2m23.037922374s ago: executing program 2 (id=699): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) ioctl$FIOCLEX(r0, 0x5451) syz_io_uring_setup(0xdb1, &(0x7f0000000040)={0x0, 0xeaa6, 0x400, 0x0, 0x1e8, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = syz_io_uring_setup(0xfffffff9, &(0x7f0000000140)={0x0, 0x3ac, 0x1000, 0x2, 0x305, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000001440)=@IORING_OP_WRITEV={0x2, 0x1e, 0x0, @fd=r0, 0x7, &(0x7f0000001400)=[{&(0x7f0000000240)="f1d0e71bb6d0b20c54ec431ea80fd294ee5782666eb4411ddec35dda3fdf61563f4b1a3475389f165f5443d2a744f97053a2587fa9e77abe76ac6bddd2b503416967d2b79733756d1a68dd93886225cbe5c39092babe41731a2c8afa2130f3778d5b316af0ea493bd2dd2f05b5ed80d98739221b4f46554c7f249774c08874e51d9dc3f12b3145b26030b4f0c58e9cd2bbf60975a2168c8d0ba32b728a851bd6822a6e5e673f96c285dab4aa744d5b9bf526174213cd9922ba024c742a38c0521ebdca9347709041120010fbb955b510ec8a596469b0e6ec13d1fa1c41214791857d8d5710ff036b1c44", 0xea}, {&(0x7f0000000340)="f2b46729c101d252451e19cd1e7399a10943904112d2eb48fb7a3b258246f67dc1b2c85e86", 0x25}, {&(0x7f0000000380)="c2fe323a37719625821a941ab4b053ec9ad0fe0dd96f97d759f1dc87a63e093a25ee4c467fdfb1b9ebb64023be6c553c12d9b88a86f4a8e1497d44ff4d5edfc90c7062369e76d04bef57861491cdceb56dcbcaf067bd7f9c703d8a357d79dba2d2635650a8", 0x65}, {&(0x7f0000000400)="34bf335436b99d3526c0a06abddcb9971f14038d1c36f77fe9c05f42a497c6dd0a43bff6bdb87f8b5174f7621ee4b47309fb27b13bff6b6dfb35844ef0917212fa25c43f2ed6859b549550c890996ff3a88e4ac3d17917f9d5609944594c3d4201924c38f8eb8eb3417bddfd009ea36714bc9df9dd0b0abd0fa1928d0635a3c73a218616907b198d2b42f527e55954528de6f423ceba4e338a6498c71144f1ad6b61561280f5af5a5d2b4a28731e06021dbd617f55b05fda0aa4c5417a3e4af86f8568d48121051c7a2202773c949cdc0986caa95b4defe5b34970f57e66bf733c336e14e76814af7c19c44e7abc1fdf1d8345de97f73b82f68baa8e4d42fc5ffec77dd64fb1ef1341e9c2aa937a4dd38ea413d5acb56384afe4364cd69aae6f9a607e6b60d3cd2af557dac82037202902d62882864f733dccc58f24ed1805e467808982e2a6ef56b73708627df6466093d3adfe624a26ccf1a114755f0459f7678eace787c3a5483e88c0caf84912ccded34d42416e8ea440ce87802973282983eb3fc8673b734954d2276d41b1a9f022d617ad2dd38fe6264dfdf8735a848d12df05b1ee6201bfc4cc7699d70dfe46627c4de06be45e60404a3e1c23905f2849ae43df0dacc05ede75c0098415643cacd7ae29d654734b3b93ef21ead536a6209ac7dd7c4795eb60ee6ef23b75e480260592f551f6cdd7aeae53fbc010e2a2f9b29dfa8eeae4d553f59883fde5195550db4e241559ec15018e2f42894534388acec7d14201f1755e676fbd417e7cf8ecde60cbc93f9dda9a578d783ef083108189ebb94f5505e10897b5f6e16cb57622f2b506fcbd48c2ba0d87b0070c8b7b1fc628e3b7ff7f4c8c910cd151199b780c6a1cc81d7f438f089eca6462bf271c109dc90afbc1fae0193830a665dde63224aa9c7bc7d3a96f7fd82117feb4c3a416e7164583b36fe47b77158e92e24d2c1c5ca3d72b065cd71f5e10d0e51550ffd8aeb446ccf9989fdc1e483ebac6f774e5e6a720eb1769d0007003c73f27dc9f5e33ed3fa4efe19f8e31bad57a3f27c38c14be9697cb7b204ff8b680372c224fe17c1713ea01502b02f8d7c71ac613ff605b31f3abeec5ef79193713c247dd89dbb8b0d0451b76663804056bd726213ebf5578231e32e7a5bfce5ced2300f2b82c5bf34734deef1af35fa607355dcfa193c66883b18bd7fb6cb3250339decbb33da0c805b8ecd18aab7db71b2a55e0191f329cd5991b842f30c2dde26c008836d98ad57c9ceaa938e6e366ea9c83e929f33820505a6efec7a6a85d1ebf6ac24eb2ad2d7f21b72960a6873b9f0e44145777c3e5798fa97f608590ec7592ecdab4bbc9432b9ad04e9b5fe0280919f7e12fd226f1f6b45b9ed96d639f71b2e3f07a5f24ae0e5c5e61bea327dd4578e918ff7575e01b1234d508ed8b2a2e2ffecc3aa392c6adf9998a3fecc6928e8e367384cb2f5d83f8496191764014fa577aef5caea33a3f9f6c4da3643a23bb2826848a6089e18724b866b1fa2725ef410dcd42d88632f46ab31d48942dc19862078118bdbf50453d02b69dc9475b661817ffc95331c1f76e96602bf1053623e852341c8f8bc4dd5ea501d218dbbf41605f8d6ae8e703dfd78b91e2979f7f1f61e8f8751539569fbc3ac54490745ca5db20936ab2def270a55f4f075f5b9f3e8a74e0e54068b4293d6a7ae46e2e3743ab99c0341ea0a79d780ef50bf192623d8e2e65e71fd89161aadd5f573a2a458bc84014f1cd9c30ecb7ae3bb8119e0a044f99151525fb9f76e106cee097c43fdbf93c8d2fe68cba64cf8118517f031abc117c2be9964769f1b35571aa9efc9678a3de354b3380752a7c90e83dafbf7fcfc14feed44355c32657093c4e14680162e205c6e2bd4dc886760557f4e2b5fca02e68d15956961dc9c0e6d46d414baef9c584576395d5d23b468e2eb996a00e762d2b175f2485246ce53385da452819f86bc6db0fd43f5b09f9d40b39d71e479668829d4dbf600b2211bf3150b1f48da31f53a025d008818b7eac54b8a4367b9102aac226311b61a4fb7d5bbcba845fd81d56281d86086e6d150ef42561264a62988bb2df66bb7541b8fd3e26cecf74ce3e17643e72f5552e4c5415463ba015e20eb26a072aedec8b5bb675e1616fbcc96e12e7c8c3527ac02e0b677568d2634e200e9404f3cc05490d4ee29de16b78aca8ec31e7b2da7203c202f0d08ac706b06f840e087124762a851b6a56a14e3032b3b1c94df8f2642085b8c7df76f2ad7a4cfa043c579d69dbba4c0e45800ce32b9ffba374eb1d4416634a25c033d3d93d2f38092392f258ca84a71fa4f9ab9a65f01c88c6025fc4c4d833d7ea1568e3411fef513b98b6c680c25f850661fd0d88a335c475d3f15576d62e07c67e728cefaba16c5ee4204dbe8d35491dff009d94a902731658f212cf3a5ca84cc2f0a8482b5172b7a94ae6cc1217e00c012068abc126f69ac76a9a4ccd4ae0d5c64eeed6b6368c7978c89511681198a5ba9746f002a11c1de61d5e91ebabbdd43d00ae473e4ff82731777cb72aa8f0d5a49f150ee8e142b2a59a6a7e58035ad43043a907db0dd351bf443b1ce021592bfbcf52cff18476dba4a2102dd9c1d37cf4ab5280cbc9c6ee499768462653995ea4b5cea6b7d929ebc81101385dd39d8d489bc9f4a8cbe539bb550ef76cd4f5c4bdca4b7c1b64833ca3081cd55b6de5ce63797b5bb4dff0cc1bc6851ccd1582eb5217cbc647e5d10e89613d3d861a5468bb5d9d3cf1748f1b0cf1bb155caa9b48112c6b517403040133b65b944cbbeee0bd0d76cac0c161989b7c5ff802c037ee75dbe9130f066047f70554dfa11e51b82a48b7d02e5f73b5fbd28dac0bfe9a91c953f10e29575c5c82f95314bdbcc93ddc3529489ac5c84d3847c15a0f466778599dd9cb9e676d7e309fe492c51fce51fcee02ad9a9bc0a96d1adc227b962a28a4a412e71e404c454714728770f66795cc10b260815b8ca1c9902d6ce34ea334ebb175c193b2918941c35897518dc801310703efb54bde1cb7cd5b0f873f717ff9c14771e0dab297132d58d1f95da57f8cc37abb01296cf5611933a2f0c5c3861d94ab2e0d7e2ce8be80e60ad495f5f8ddff9117c14b2128acf33cf889945fd5749e893d3794e97b3950071e60826acf1bea699b8a7e2697f48b81e03b6c60e88c587366e7488764f76040382cdaaa4c56591d08036042f9febd85163f2724b2b538d05a06f2d547a7514963da13c5180456439db095b5407dd0b8e14907dac93d79cad34b0edb20404a16fcb7b8932a6902e5051c101e17c9166cf7a9a62ccf72649ac4d4913688140867a96c5b6cf077937ac81eabbac40edc26da99099c212c1200b4019e7972be27221917a123e13599f8b3118bdac201bd7b833f41636ca14616ecd0f8fe83b7214cb313e113a1c3a2c8237fb42c72dc4f4a39f25388a04fde926b3f7805119871470c64c442b8316f1577f8d36d758027c60d5d6df499adaca649f0eb37ea3aae2b9acb2722a7703e9332081ccda4d0484873f355462899676785ff0ebac9a01160dc4d203ac46107b42845d714a32b7c7c0e4daec5fd63222064eed46ecc5a3bfb0b31948fdf105374c1cf950ee2386366a50d765bd64570a8b7a0b597e9f7d964059c38e898d7b3448a95ada6769ca04319bcefa609055216f40c7d58161c1df60d15fb5f57172934c8244746315aa1b473a807ed364369a1a4207a083cbe61f1e49763467857565b9b79caecb1b98082315f7e197d7e0f64961b7f090a62e64f41a20d935f5ba4f4b18790a16c9d9444c74a3d0ab846d58ae763ccf973864ed7bb2f5ae854b1013f14c7cb19cea2c6dd2b5b07f92d69a731a8298a5daf39d8be189b266f25a0b19b5b94cf07efb895beb2da3ca71b68b8b0740dbab4e1d2291941d098d5d2eb142268af6c031ce3d3b351a210a657590d36c1a772c0d323128651a343a6a3fcf53ae1b010fd1bbf9734859f906a047e9a90ac56b81147333f81c727784677c1af0b3235c64d8b7478b9a071fc2074f04b1a2bd21d119dd7ddd86ff3673bfd62235b19544e7656d4a23436353aae148fe8843abbf98eee82a3048f866d20f18c8606523ad6bb850d76423bec722c84f2212aa6aa54ea2cfcd07d39eaf3a8827f631481a73a96d221ceddf9e7cedc05c3f568c842bd19b674053db123b72e814bc19ea8921d910850ad2970c4cc7c1566b1b641b2403ed8f5c5dff4cc7ee82fc7625b4333044d5e6cb45cfd59fe93106cb69d6b539252bf110449d194eddd6abe31dc2f28392c91311d620b94583824b17e8062e0b47d9c8e2be01716e4c9d8c76e842e9514e840fae91fe4bf97dc544fa33e2bcce7fa38c9eb32ffacc238da4211cd98c9245de1907bb3741c6ea0e0de28350a40f090ed9cd55506c0abc1817ba5736002e7c03d1a53eb261db9649f1f83874aeec31bd192cfad65cac519bf6804aa53d0cadbc751e9491206e2446561343ea707d1bfb25e727cdf73d40a043736abbf5351cb87cd3fea3a2890fcaed5955820ff0050b2f017dcf3f44626f42ff8be8c1089ee73582878e5b910ed71ebed65be239a5a4f6a4191c1d30b45d36cc14d300b9ef2f75978f63f73e6fc663f2cf976c23d0eaf44bcf5fe0bed5deeb4606724fcf5fef05356cc940f9fa6233f48183ffc22adb3e008d892667dace926f093472efa821f626b563b1f0f123280f916aeb8f2c32119b901ba0a2ebc7d05eaffd3fad4d7b3ce879e0c3c54dda193f386da537e05300ba9bc830df1418cf40191e577440c74c15026f71767031a8fb1661bd3c3bae44fa0a48e69c35c61955a64385aecdedb69c6544df634ca9859f8b1000ce1120e06d3b0708a4c5905156c66746d545c332b1812eddc9348fb4f52617edc65efa264a5aedda1648d5fd130aeac6f76562455244e112da35bb6ddb3337a869f7771175cb7ff53d90279f8f13f9f95de2068c6ac7c7d33008f37f59668f885f5cbeec8d6b1e1321c687bca53ada0b0580f2f7d22b5ddcde8f321e41d29a9e215ac73f59107ef4b3d21f1e5def0ab5d8d2bfd600a789c5ee292139bdd3245886cd278e4416023ba073ed995db3c4ab2055030d675b75bb99d3e2833a35653654c94e8b7185932fa19be9bd26f22af14800f374d6db551dc4516f20b74647199f5e09b9fa2683ddce040ca8814e0fb2fbb04b5cd6e8563264617ac04d385301f5524a8c69cc6010f2e0f0daa27917a2469c3a28aba48cddf2a2c382e4a77a665fe42f909801ed3999d15c4a0c3b263669da209f64fcccb970604ade2597b9d708b47e9f4028a19d64762c3ba870703446166c95b616fbde1973f63ad3798467054917fda428cf0513e04c76da156bc49517c982eb210da712fcb3d112274aca1000b00475915aa24f3dc221aa3aa3a32d089049b6d77c10039af0cde4a9c1446b8dd953ff2cb4ca8a3b6fed5e90d3de37b642bf0db81d409b66e7e058e52fe87c0b495edcc74c249178cf3899bc85248643de73e83ac68d2a03dfee3ebaf1fd2c134ef3f25ff1bce892f3ce39ebc936b1c154206f6dd874cee12c1c39fc298eef3dd1d6fcf298f92e3c31d9703a68005f608f32f65a80255edd0a2003001e4f82a99cf4b463e55be20b7213abf2feeea727304493078363b9cb7a47607de85272181f2aa9bde358ff46899084791d5894f66b1af4850814ea1dfbcbc6b8713e556706d9c0cd1f90a3a9d54d014ab069bcd88bc97ed3068839a395319ce20322139f3e1", 0x1000}], 0x4, 0x1e, 0x1, {0x2, r4}}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001480), 0x800, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r2, {0x400}}, './file0\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001500)='./cgroup/syz0\x00', 0x200002, 0x0) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000002880)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002840)={&(0x7f0000001580)={0x12b4, 0x0, 0x5, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [{{0x254, 0x1, {{0x2, 0x3}, 0x4, 0x7f, 0x0, 0x2, 0xc, 'syz0\x00', "a21223df16650861e73c00981a9bd413c2959e30c9e4cb0d12a6b16d54167b67", "030e412bd64f602fff047ca6a06d6c8e78b12baef72d4d754a60af5eae89e34d", [{0x1, 0x8, {0x3, 0x209}}, {0x5, 0x6, {0x0, 0x3c}}, {0xf, 0x8, {0x2, 0x2}}, {0xef, 0x8, {0x1, 0x6}}, {0x4, 0xc, {0x1, 0x1}}, {0x8, 0x7, {0x1, 0x5}}, {0x2, 0xff, {0x3, 0xfffffa65}}, {0x7ff, 0x9f, {0x1, 0x101}}, {0xf7, 0x48d0, {0x2, 0x4a6e}}, {0x49, 0x7, {0x1, 0x80000000}}, {0x2, 0xb0ab, {0x2, 0x5}}, {0x9, 0x2, {0x3, 0x3}}, {0x1, 0x9, {0x3, 0x9}}, {0x7ff, 0x0, {0x2, 0x9}}, {0x7, 0x9, {0x0, 0x6c2}}, {0x2, 0x400, {0x0, 0x9a6}}, {0x2, 0x2, {0x2, 0xa760}}, {0x0, 0x3, {0x0, 0x1}}, {0x9a3, 0xa67}, {0x0, 0x35f, {0x2, 0x19}}, {0xfffe, 0x5, {0x1, 0x6}}, {0xa, 0x7, {0x0, 0x81}}, {0x1, 0x5, {0x1, 0x7}}, {0x2, 0x4, {0x0, 0xfff}}, {0x10, 0x7, {0x3, 0x9}}, {0x4, 0x4e1, {0x0, 0x2}}, {0x2, 0x40, {0x3, 0x762}}, {0xea, 0x1, {0x2, 0xfffff3c3}}, {0x8001, 0x3, {0x3, 0xfffffffb}}, {0x3, 0x0, {0x2, 0x7}}, {0x7, 0x6, {0x1, 0x4}}, {0x4, 0x7, {0x0, 0x5}}, {0xb54e, 0x392, {0x0, 0xfffffff9}}, {0x9022, 0x1, {0x1, 0x3}}, {0x6, 0xc, {0x0, 0xdc}}, {0xfff, 0xd, {0x3, 0x4}}, {0x7, 0x2, {0x2, 0x1eb}}, {0x8001, 0x1, {0x3, 0x6}}, {0x6, 0x4, {0x1, 0x9}}, {0x0, 0x3, {0x3, 0x2}}]}}}, {{0x254, 0x1, {{0x1}, 0x2, 0x9, 0x4, 0x4, 0x1b, 'syz0\x00', "147fa4940dfbe84c2cb4f9de721ad504b2cec4bfa1dc15fbfba3f4005b51aee1", "97607f4c63605c40ad367f9549855af43e3b2f1b57c9a9aa549bb6d61e1bc1fe", [{0x860, 0xe414, {0x2, 0x8}}, {0x9, 0x4, {0x1, 0x3}}, {0x4, 0x8001, {0x3, 0xbbd6}}, {0x8, 0xb, {0x0, 0x8}}, {0x7, 0xa, {0x3, 0x401}}, {0x6, 0x0, {0x3, 0x1}}, {0x6, 0x7, {0x2, 0x1}}, {0x6f, 0x4, {0x0, 0x6}}, {0x81, 0x3, {0x3, 0x3}}, {0xfff9, 0x2, {0x2, 0x4}}, {0x2c, 0x2, {0x2, 0x8}}, {0x971, 0x5, {0x3, 0x9}}, {0x7, 0x3, {0x2, 0xdad}}, {0xe4, 0x3, {0x2, 0x5}}, {0x4, 0xff, {0x0, 0x80000001}}, {0x7169, 0x9, {0x3, 0x9}}, {0x0, 0x9, {0x1}}, {0x3, 0x5, {0x0, 0xa395}}, {0xfffa, 0x0, {0x3, 0xfffffffa}}, {0x0, 0x7, {0x2, 0xfff}}, {0x2, 0x5, {0x3, 0xf576}}, {0x7, 0x1, {0x2, 0xc8}}, {0x6, 0x7, {0x0, 0x4}}, {0x4, 0xffff, {0x3, 0x6}}, {0x9aaa, 0x4, {0x1, 0x8}}, {0x6, 0xfffc, {0x0, 0x8001}}, {0x8, 0x6a5e, {0x3, 0x1}}, {0x4, 0x9, {0x2, 0x2}}, {0x8, 0x2, {0x3, 0x10001}}, {0x7ad3, 0xff7f, {0x1}}, {0x401, 0x0, {0x1, 0x8001}}, {0x5, 0x7, {0x3, 0xfffffff6}}, {0xe39, 0x5, {0x3}}, {0x7a45, 0x2e6b, {0x2, 0x6}}, {0x8001, 0x6, {0x1, 0x10000}}, {0x2, 0x101, {0x1, 0x5d2}}, {0x9, 0x5, {0x1, 0xd078}}, {0x6, 0x40, {0x3, 0x9}}, {0x800, 0x1, {0x1, 0xfffffaa4}}, {0xa, 0x9, {0x0, 0xd}}]}}}, {{0x254, 0x1, {{0x2, 0x80000001}, 0x2, 0x7f, 0x0, 0x5, 0x24, 'syz1\x00', "882136660f64191460a356c70dea174f4131e195935e285d82ec4faad6d62254", "0efab05383ebd74a48f8404e5a1aec8e0ac5a422b334fa849c6521f39df6a9b7", [{0x6, 0x1, {0x0, 0x45}}, {0x5, 0x0, {0x3}}, {0x3, 0xee, {0x1, 0x3}}, {0x5, 0x8, {0x2, 0x5}}, {0x7ff, 0x8, {0x3, 0x2}}, {0x8, 0xff81, {0x2, 0x9}}, {0xef8, 0x10, {0x1, 0x5}}, {0x1, 0x1, {0x0, 0x9f9b}}, {0xffff, 0x9, {0x2, 0x9c3}}, {0xfffb, 0x0, {0x0, 0x82c8}}, {0x0, 0x800, {0x1, 0x73}}, {0x1, 0x5, {0x2, 0x3}}, {0x9, 0x0, {0x1, 0xe345}}, {0x8, 0xd}, {0xcf37, 0x2, {0x2, 0x40000000}}, {0x4, 0x1, {0x2, 0x7f}}, {0x2, 0x6, {0x2, 0xa}}, {0x8000, 0xdee, {0x0, 0xff}}, {0x4, 0xafdf, {0x3, 0xc}}, {0x8, 0x8, {0x4, 0x1ff}}, {0x5, 0x401, {0x3, 0x303b}}, {0x6b, 0xffff, {0x3, 0x2}}, {0x9, 0x8001, {0x3, 0xfffffffd}}, {0xd, 0x8001, {0x0, 0x9}}, {0xfff, 0x0, {0x0, 0xb}}, {0x8, 0x7, {0x3, 0x5}}, {0x9, 0x8, {0x0, 0x6}}, {0xca, 0xad, {0x3}}, {0xfff8, 0x8001, {0x3, 0x7}}, {0x1, 0xfff, {0x0, 0x71}}, {0xff01, 0x8, {0x3, 0x3}}, {0x9, 0x9, {0x2, 0x10000}}, {0x57, 0x81, {0x3, 0x1}}, {0x1, 0x9, {0x1, 0x6}}, {0xa, 0x5241, {0x0, 0xb}}, {0x8, 0xa, {0x0, 0x2966d814}}, {0x8, 0x7f, {0x3, 0x8}}, {0x9, 0x7fff, {0x1, 0xfffff801}}, {0x10, 0x100, {0x1, 0x6}}, {0x81, 0x5, {0x0, 0xde}}]}}}, {{0x254, 0x1, {{0x2, 0x9}, 0x3, 0xf9, 0x8, 0x100, 0x17, 'syz0\x00', "5b3c18c9fb8d8f54c294a9d66408b3868b11024282f80b3925f94d7f86246af0", "79545b78be5690fbc433e2d7ab8ac273614f968d305217ac248e0f694accb044", [{0x0, 0x0, {0x2, 0xf}}, {0xfffc, 0x3, {0x1, 0xd9ab}}, {0xd0, 0x61, {0x2, 0x10001}}, {0x5c, 0x5, {0x0, 0x8f4}}, {0xf801, 0xc, {0x2, 0x9}}, {0x6, 0xf, {0x2, 0xe4d}}, {0x1, 0x4, {0x2, 0x3}}, {0x1, 0xff, {0x3, 0x7fffffff}}, {0x6ea, 0x3, {0x1, 0x2}}, {0xe, 0x2, {0x0, 0x2}}, {0x1000, 0xfff, {0x1, 0x2}}, {0xa510, 0x9, {0x1, 0x3}}, {0x10, 0x6, {0x3, 0xfffeffff}}, {0x7, 0x1, {0x1, 0x1}}, {0x3, 0x0, {0x2, 0x80000001}}, {0xfff, 0x2, {0x2, 0xc}}, {0x5, 0x8001, {0x3, 0x10}}, {0x5, 0x1, {0x1, 0x1}}, {0x8, 0x1, {0x0, 0xa46}}, {0x4, 0x4, {0x0, 0x9}}, {0x8000, 0x881f, {0x0, 0x1}}, {0x4, 0x9, {0x3, 0xbf}}, {0x9, 0x9, {0x0, 0xb431}}, {0xc, 0xfffb, {0x2, 0xe22}}, {0x3, 0x8, {0x3, 0x7}}, {0x10, 0x0, {0x0, 0x9}}, {0x3, 0x0, {0x2, 0x7}}, {0x3, 0xb2, {0x2, 0x5}}, {0x4, 0xe, {0x2, 0x1ff}}, {0x6, 0x5, {0x3, 0x10000}}, {0x2, 0x6, {0x1, 0x10000}}, {0x1, 0x80, {0x0, 0x9}}, {0x9, 0x8867, {0x3, 0x7}}, {0x8, 0x4, {0x1, 0x10000}}, {0x4, 0x81, {0x0, 0x1}}, {0x4, 0x48a, {0x0, 0x3}}, {0xc215, 0xd0, {0x2}}, {0xc000, 0x5, {0x0, 0x10001}}, {0x8a5c, 0x1, {0x2, 0xa26}}, {0x1, 0xc000, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x3, 0xfff}, 0x6, 0x3, 0x6, 0x7ff, 0x24, 'syz1\x00', "5b5be5a9b1c7368abe7b1bf9570bfcb1bd8a3772e719f055a0a8e5f5d998310a", "7d2e80c1566efc5966f08e6ce9e7a06fdd18f5feadaf589d8285695bfd4712a2", [{0xfff9, 0x1, {0x3}}, {0x4, 0x0, {0x0, 0x80000000}}, {0x4, 0x9, {0x2, 0x7fffffff}}, {0x2, 0x5, {0x1}}, {0xab, 0x2, {0x0, 0x9d}}, {0x5, 0x1, {0x0, 0x35896503}}, {0xe58, 0xf001, {0x1, 0x8000}}, {0xfbff, 0x240, {0x0, 0x6}}, {0x1, 0xbb8, {0x1, 0x81}}, {0x40, 0x8001, {0x3, 0x3}}, {0x0, 0x5}, {0x9, 0x2, {0x0, 0x6}}, {0x9, 0x7}, {0x0, 0x1, {0x0, 0x4}}, {0x6, 0x0, {0x1, 0x1}}, {0x40, 0x4, {0x1, 0x4}}, {0x8, 0x9, {0x3, 0x1}}, {0x4, 0xf5, {0x0, 0xffffe01b}}, {0x3, 0x7, {0x3, 0x2800}}, {0x8, 0xfc00, {0x2, 0xe}}, {0x8, 0x3, {0x0, 0x5}}, {0xc000, 0x1ff, {0x3, 0x6}}, {0x7, 0x4, {0x0, 0x5}}, {0xfffc, 0x6, {0x0, 0x8}}, {0xffff, 0x6, {0x5, 0xfffffff5}}, {0x3, 0x1000, {0x3, 0x7}}, {0x8, 0x8, {0x2, 0x9}}, {0x5b5, 0x2, {0x2, 0x634}}, {0x7fff, 0x5, {0x3, 0xb}}, {0x1, 0x40, {0x2, 0x7}}, {0x100, 0x0, {0x1, 0x2}}, {0x3, 0x2, {0x3, 0x7}}, {0xfff, 0xd16, {0x3, 0x6}}, {0x9, 0x5, {0x3, 0x100}}, {0x0, 0x8, {0x1, 0x3}}, {0xfff9, 0x2, {0x2, 0x4}}, {0x2, 0x9, {0x2, 0x3}}, {0x5, 0x5, {0x0, 0x1}}, {0x9, 0x93, {0x2, 0x5}}, {0x689e, 0xa6cf, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x101}, 0x9, 0x9, 0xe52e, 0x4, 0x1c, 'syz1\x00', "c48dc55fc22b440a527bf1cd406eefdefc29172d3c6e738e6a8bef57a3425fe0", "161cccb22b6414c1bb78f4ce1a3fdae2aec08c5349674b0a5f865a246c39cc23", [{0x6, 0x3, {0x1, 0x8001}}, {0x3, 0xe, {0x0, 0xffff}}, {0x2, 0x9, {0x3, 0x81}}, {0x4, 0x2, {0x3, 0x3}}, {0x9, 0x4, {0x0, 0x5}}, {0x7, 0x61, {0x1, 0xdade}}, {0xffff, 0x0, {0x3}}, {0x200, 0xfffd, {0x0, 0x10000}}, {0x1, 0x6, {0x2}}, {0x9, 0x1, {0x1, 0x3}}, {0x7, 0x200, {0x1, 0x3}}, {0x1, 0xfff9, {0x2, 0x8}}, {0x1, 0xcf77, {0x2, 0x5}}, {0x1c00, 0x1fe4, {0x0, 0x3}}, {0x1000, 0x1, {0x3, 0x8}}, {0xd0fd, 0x1, {0x0, 0x3}}, {0x3, 0xb1d4, {0x0, 0x6}}, {0x8000, 0x1ff, {0x1, 0x9}}, {0x3, 0x7fff, {0x3}}, {0xffff, 0xe8, {0x3, 0xff}}, {0x3000, 0x1, {0x0, 0x10}}, {0x6, 0xb, {0x2, 0xffff}}, {0xc, 0x3778, {0x3, 0x2}}, {0x8, 0x1, {0x3, 0x4}}, {0xfffb, 0x9}, {0xfff8, 0x7, {0x2, 0x3}}, {0xc, 0xf4, {0x1, 0xb}}, {0x8, 0x814, {0x1, 0xe}}, {0x9, 0x9, {0x1, 0x6}}, {0x4, 0x2, {0x2, 0x4}}, {0x8, 0x3, {0x3}}, {0x6, 0x9, {0x3, 0x81}}, {0x1, 0x8001, {0x0, 0x60}}, {0x4, 0x7, {0x1, 0x2}}, {0x0, 0xdfe, {0x2, 0xb61}}, {0x8, 0x4, {0x0, 0x1}}, {0xdb4, 0x401, {0x1, 0x88}}, {0x40, 0x4, {0x0, 0x2}}, {0xe, 0xc7c, {0x0, 0xb}}, {0x4, 0x0, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x4, 0x7f, 0x0, 0x8, 0x17, 'syz0\x00', "d8e538a88224e50b2d5fd705ac5b70be364ae313ce645b9bd3e6fb842b6566ac", "9bd499481329290c9db00d4f25b475ded6d29a0812e7e8333531221356268670", [{0x1, 0x9, {0x3, 0xfffffffb}}, {0x2, 0x5, {0x0, 0xfffffff8}}, {0x1, 0xf84e, {0x1}}, {0x7, 0x6, {0x1, 0x80}}, {0x2, 0xa2a4, {0x1}}, {0x8, 0x7, {0x3, 0xe}}, {0x3, 0x6, {0x3, 0x79}}, {0x93, 0x5, {0x2, 0xc}}, {0x6, 0x5, {0x1, 0xfff}}, {0x6, 0x7, {0x1, 0x1ff}}, {0x0, 0x5, {0x1, 0x6}}, {0x7ff, 0xe2, {0x3, 0x40}}, {0xffff, 0x4, {0x0, 0xf8}}, {0x0, 0x5, {0x1, 0xbe}}, {0xe5cf, 0x4, {0x1, 0x65a}}, {0x3, 0x0, {0x1, 0x2}}, {0x4, 0x2, {0x3, 0x81}}, {0x7ff, 0x9, {0x0, 0x9}}, {0xe211, 0x3ff, {0x2, 0x7}}, {0xb, 0xfa6b, {0x0, 0x7f}}, {0x9, 0x3, {0x3, 0x7fff}}, {0x0, 0x8, {0x1, 0x1}}, {0xdb1, 0x2, {0x2, 0x1}}, {0x2, 0x0, {0x1}}, {0x4, 0x8, {0x0, 0x10}}, {0x6a7, 0x200, {0x2, 0x10000}}, {0x7, 0x7, {0x1, 0x93a}}, {0x7, 0x90, {0x3, 0x3}}, {0x4, 0xa4e6, {0x3, 0xffffffff}}, {0x1, 0x0, {0x2, 0xd799}}, {0x27, 0xfffd, {0x3}}, {0xef63, 0x1, {0x0, 0x400}}, {0x7, 0x2, {0x1, 0x8}}, {0x0, 0x7, {0x1, 0x6}}, {0x8, 0x2, {0x1, 0xe}}, {0xc, 0x6, {0x1, 0x8001}}, {0x0, 0xeaca, {0x3, 0xff}}, {0x40, 0x3, {0x2, 0x7125}}, {0x5, 0x1, {0x3, 0x8}}, {0x1, 0x3, {0x3, 0xe}}]}}}, {{0x254, 0x1, {{0x2, 0x9}, 0x8, 0x7, 0xa, 0x9, 0xd, 'syz1\x00', "a1a303a7ad8f5647aef8923115f8d804ecf554e28e29f4a072ca50926a50be02", "4bbefc696f1641370c752687547bf96596be67eec7b6695a2b3251f3e351919d", [{0x0, 0xee, {0x2, 0x6}}, {0xd, 0xb1e4, {0x1}}, {0x101, 0x3, {0x2, 0x100}}, {0x8, 0x1, {0x2, 0x9}}, {0x28b, 0x3, {0x2, 0x8}}, {0x8, 0x1199, {0x3, 0xffffffff}}, {0x1, 0xdc6, {0x1, 0x1}}, {0xf, 0x8, {0x1, 0x2}}, {0x2, 0x60, {0x3, 0x2}}, {0x8000, 0x80, {0x0, 0x5}}, {0x2, 0x4, {0x0, 0x101}}, {0x0, 0x4, {0x3, 0x8}}, {0x828, 0x3, {0x3, 0x5}}, {0x8, 0x0, {0x0, 0x10}}, {0x8, 0x4c, {0x1, 0x6}}, {0x1, 0x9, {0x0, 0x3}}, {0x2, 0xffff, {0x3, 0xe771}}, {0xfff7, 0xfe01}, {0x8, 0x1ff, {0x2, 0xdd}}, {0x13c5, 0x8, {0x3, 0x2}}, {0x4, 0x2, {0x3, 0x8}}, {0x3, 0xf5, {0x2, 0x5}}, {0x7, 0x0, {0x0, 0x8001}}, {0xff, 0xcd, {0x0, 0x8}}, {0xb50, 0xf, {0x0, 0x9}}, {0x5, 0x1, {0x0, 0x9}}, {0x800, 0x1ffc, {0x1, 0x9}}, {0x53, 0x3, {0x1, 0x5}}, {0x5, 0xc8, {0x2, 0xfffffffa}}, {0x1, 0x81, {0x0, 0xfff}}, {0x0, 0x9, {0x0, 0xf6}}, {0xe, 0xffff, {0x2, 0x2}}, {0x4, 0xd, {0x0, 0x1}}, {0x0, 0xe9c, {0x1, 0x3}}, {0x8, 0x1, {0x1, 0x5}}, {0x5, 0x200, {0x2, 0x9}}, {0x0, 0x6, {0x3, 0x5}}, {0x3, 0x7, {0x0, 0x4}}, {0x5, 0xe4fc, {0x0, 0x3}}, {0x400, 0x1, {0x3, 0x2}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x4000}, 0x20008804) r7 = syz_open_dev$hiddev(&(0x7f00000028c0), 0x5d69, 0x2) ioctl$HIDIOCGFIELDINFO(r7, 0xc038480a, &(0x7f0000002900)={0x3, 0x200, 0x4, 0x2, 0x6, 0x8, 0xffff, 0x8, 0x3, 0x4, 0x4, 0x9, 0xfff, 0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000002940), 0x244140, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000002980)=""/186) preadv2(r2, &(0x7f0000003cc0)=[{&(0x7f0000002a40)=""/5, 0x5}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/61, 0x3d}, {&(0x7f0000003ac0)=""/33, 0x21}, {&(0x7f0000003b00)=""/179, 0xb3}, {&(0x7f0000003bc0)=""/93, 0x5d}, {&(0x7f0000003c40)=""/72, 0x48}], 0x7, 0x10, 0x0, 0x3) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000003d40)={0xffffffffffffffff, 0x1, 0x40, 0x0, 0x1000}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$mptcp(&(0x7f0000003d80), r6) syz_open_dev$video4linux(&(0x7f0000003dc0), 0x1, 0x401) ioctl$KVM_PRE_FAULT_MEMORY(r0, 0xc040aed5, &(0x7f0000003e00)={0xf000, 0x114000}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000003fc0)={'syztnl0\x00', &(0x7f0000003e80)={'tunl0\x00', 0x0, 0x10, 0x20, 0x3, 0x5, {{0x39, 0x4, 0x1, 0x8, 0xe4, 0x68, 0x0, 0x0, 0x4, 0x0, @remote, @multicast1, {[@ra={0x94, 0x4}, @cipso={0x86, 0x16, 0x3, [{0x5, 0x10, "3f27e8cc514065eb57a84c4389e8"}]}, @timestamp_prespec={0x44, 0x34, 0xcb, 0x3, 0x6, [{@multicast2, 0xd583}, {@loopback, 0xf49}, {@rand_addr=0x64010101, 0x6}, {@broadcast, 0x6}, {@loopback, 0xc}, {@multicast2, 0x7fffffff}]}, @generic={0x94, 0x6, "e24feb2c"}, @cipso={0x86, 0x1f, 0xffffffffffffffff, [{0x1, 0xf, "55585435342d590ccc3a9066cb"}, {0x6, 0xa, "e8e2819c22ce0cda"}]}, @ssrr={0x89, 0x7, 0x4, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x2c, 0x3c, 0x3, 0x2, [{@empty, 0x2}, {@remote, 0x401}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd}, {@remote, 0x5}]}, @timestamp={0x44, 0x28, 0x12, 0x0, 0x3, [0x0, 0xe8, 0x4, 0x6, 0x3, 0x9, 0xffffffff, 0x3841, 0xf]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000004080)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004040)={&(0x7f0000004000)=@newqdisc={0x2c, 0x24, 0x2, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x9, 0xffff}, {0x8, 0x10}, {0xf}}, [@TCA_RATE={0x6, 0x5, {0xf, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2c000084}, 0x24000000) syz_extract_tcp_res$synack(&(0x7f00000040c0), 0x1, 0x0) pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_TIMEOUT(r9, 0x0, 0x486, &(0x7f0000004140), &(0x7f0000004180)=0xc) close(r0) r10 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r10, &(0x7f00000041c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004200)=0x14) io_uring_enter(r5, 0x49e7, 0x4315, 0x12, &(0x7f0000004240)={[0x2]}, 0x8) 2m23.036079642s ago: executing program 2 (id=701): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, r1, 0x3, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) (async, rerun: 32) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x102410, &(0x7f0000000000)=ANY=[@ANYRES8]) (async, rerun: 32) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2100) (async) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80000, 0x0) 2m22.963396631s ago: executing program 2 (id=702): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049e9) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000002003e0000000000000000000000000040000000000000000000000000000000000000000000380002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000020000000000000000000000000000000000000000000000008"], 0xb0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff) 2m22.766481171s ago: executing program 2 (id=708): r0 = socket(0x23, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) io_pgetevents(0x0, 0x921, 0x0, 0x0, &(0x7f0000000040), 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) recvmsg$can_bcm(r0, &(0x7f0000001a00)={&(0x7f0000000040)=@phonet, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/231, 0xe7}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/209, 0xd1}, {&(0x7f00000000c0)=""/20, 0x14}, {&(0x7f0000001440)=""/212, 0xd4}, {&(0x7f0000001540)=""/105, 0x69}, {&(0x7f00000015c0)=""/214, 0xd6}, {&(0x7f00000016c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f00000017c0)=""/220, 0xdc}], 0xa, &(0x7f0000001980)=""/115, 0x73}, 0x10020) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x15) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000008c0)=ANY=[], 0x73) syz_open_dev$sg(0x0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000001a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001a80)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001ac0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x3, '\x00', r6, r2, 0x4, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f0000001b80)=@get={0x1, &(0x7f0000001b40)=""/52, 0xa}) syz_emit_ethernet(0x7e, &(0x7f0000001dc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86a4b2e473f0666a0f299029b9cbd07140dd60e9011000483a00fe8000000000000000000000000000bbff0200000000000000000000000000010100907800000000db271e4600003300fe8000000000000000000000000000aafe8800000000000000000000000000012902000000000000fc020000000000000000000000000000a6e0d9f90368ef4235bdcb1d6e2d856081fda5dd25286e288da85dbb0d2890554e3d39cfaec1f50633cd59dc4475ec876b2f3ec8b5dc615572834b9101542b6cdc528597009b6ccb2f67217fb7d089cb629e6f977e"], 0x0) listen(r0, 0x3) 2m22.69534088s ago: executing program 32 (id=708): r0 = socket(0x23, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) io_pgetevents(0x0, 0x921, 0x0, 0x0, &(0x7f0000000040), 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) recvmsg$can_bcm(r0, &(0x7f0000001a00)={&(0x7f0000000040)=@phonet, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/231, 0xe7}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/209, 0xd1}, {&(0x7f00000000c0)=""/20, 0x14}, {&(0x7f0000001440)=""/212, 0xd4}, {&(0x7f0000001540)=""/105, 0x69}, {&(0x7f00000015c0)=""/214, 0xd6}, {&(0x7f00000016c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f00000017c0)=""/220, 0xdc}], 0xa, &(0x7f0000001980)=""/115, 0x73}, 0x10020) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x15) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000008c0)=ANY=[], 0x73) syz_open_dev$sg(0x0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000001a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001a80)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001ac0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x3, '\x00', r6, r2, 0x4, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f0000001b80)=@get={0x1, &(0x7f0000001b40)=""/52, 0xa}) syz_emit_ethernet(0x7e, &(0x7f0000001dc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86a4b2e473f0666a0f299029b9cbd07140dd60e9011000483a00fe8000000000000000000000000000bbff0200000000000000000000000000010100907800000000db271e4600003300fe8000000000000000000000000000aafe8800000000000000000000000000012902000000000000fc020000000000000000000000000000a6e0d9f90368ef4235bdcb1d6e2d856081fda5dd25286e288da85dbb0d2890554e3d39cfaec1f50633cd59dc4475ec876b2f3ec8b5dc615572834b9101542b6cdc528597009b6ccb2f67217fb7d089cb629e6f977e"], 0x0) listen(r0, 0x3) 2m12.58258621s ago: executing program 1 (id=791): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf405, 0x0, 0xf06) 2m11.620518893s ago: executing program 1 (id=803): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = accept$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) getpeername$unix(r1, &(0x7f0000000280), &(0x7f0000000380)=0x6e) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r2 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000002540)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x9, 0x0, 0xfffffff9, 0x9}, {0x7fff, 0x7, 0x3, 0xd06a}}}, 0x0, 0x600) ioperm(0x0, 0x87, 0x3ff) landlock_restrict_self(0xffffffffffffffff, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r4, 0x0, 0x0, 0x50, &(0x7f0000000f40)={0xa, 0x4e22, 0x4, @mcast1, 0x101}, 0x1c) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r2, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000180)=0x4) 2m11.620334269s ago: executing program 1 (id=804): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000180)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={r4, 0x401, 0x10, 0x5d, 0x5}, &(0x7f0000000080)=0x18) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x403, 0x0, 0x8, {0x0, 0x0, 0x74, 0x0, 0x14040, 0x11203}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m11.55640285s ago: executing program 1 (id=805): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f0000000240)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000001340)=""/136) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read$proc_mixer(r2, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x200, 0xa5e1, {0xffffffffffffffff}, {0xee00}, 0xfffffffffffffc00, 0xfffffffffffffffa}) r6 = geteuid() setresuid(r5, 0xffffffffffffffff, r6) write$P9_RVERSION(r4, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r7 = dup(r4) open$dir(&(0x7f00000002c0)='./bus\x00', 0x705100, 0x7) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xf4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f00000000c0)='./file0\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 2m11.55572055s ago: executing program 1 (id=806): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) (async) fcntl$setsig(r0, 0xa, 0x4) (async) r1 = pidfd_getfd(r0, r0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @empty}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_delvlan={0x30, 0x71, 0x100, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x10) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0], 0x1}) write$P9_RATTACH(r1, &(0x7f0000000280)={0x14, 0x69, 0x1, {0x4, 0x2, 0x8}}, 0x14) (async) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x10000, 0x1) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) fcntl$setlease(r0, 0x400, 0x0) (async) pipe2$9p(&(0x7f00000003c0), 0x4080) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000600)={&(0x7f0000000400)="1a3c9dba57b90fb3cc9030930022f1b42672046a963094a6c344cbd5ade6d87b5f0256e70f32b7ec4fb458ffb9dc3b4e5c", &(0x7f0000000440)=""/156, &(0x7f0000000500)="4f926b12b1a769fd5d78a82eac0f9a07e51a938c25b72495f86aa5ce270c855fecedb64313d4ce8c0b8e9a9dcae59979abbbf0faeac2be103597595d5e1e6ebe9ace8df1fb13347df5aaca4e67126a59fcd0162bca4a5fb9ec68b005b0c4d89b98b856b8e3cc20df1d697b1fb22392c3c48f0daf627e35bf895732b2662d7530b8516335e8631b2bb2970edd8d786a728dc44508f0a549086873d2c86408aa7b9ac62951ad", &(0x7f00000005c0)="ec64c278ae52b16211b5601a549ffcecf239363ce0fba5d2", 0xfffffffe, r0, 0x4}, 0x38) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000680)={0x0, 0x0, r4, 0x0, 0x0, 0xa, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000700)={0x0, r5, r4, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[0x0]}) (async) timer_create(0x7, &(0x7f0000000740)={0x0, 0x37}, &(0x7f0000000780)=0x0) timer_settime(r6, 0x0, &(0x7f00000007c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) inotify_init() (async) r7 = getuid() (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000800)={{0x1, 0x1, 0x18, r3, {0xee00, 0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r7, r10}}, './file0\x00'}) (async) ioctl$LOOP_CLR_FD(r8, 0x4c01) (async) sendmsg$sock(r1, &(0x7f0000000cc0)={&(0x7f0000000880)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000900)="67ddd275d1059a6ea7ca78e3a94cebd0c130413f80e74a9bca8af9f2ed977d0158cac1bfb72b54b7f1490e40466979e61f2eeef50dc41f193dcc47bb7c1c28489fe2688ceab99f754547c9152a061867b31ae491a846a0ea5764a6d3059eb958f8e5ff6f7ffced15bd152cbc7624c552747cc59ae8a8530af212483e2e008a4f464d7a813b838a34acb3f271d1fb75ce6a9583035fcd964c9bc9920ffecdcfe11fe000653f2e1430ffa01159d0f40d4a8f3f1ff2609cf89fad91bece4533f634498b060779a3bd13cdcde400d0ae8393f52b881b268bd0a9ff972d58db1fce38181a9bd0", 0xe4}, {&(0x7f0000000a00)="b19b16294228b845d0532c44cfd4f02499d6000c9d73d9ab2605c3ef4b06f94011e4", 0x22}, {&(0x7f0000000a40)="a7643968712b23db65764fa2d61b9d", 0xf}, {&(0x7f0000000a80)="f6666a885992ecd88563882f4d71a03f49e0120d2adc13572740aa2b804b21410f4c5e9b88b83b63a2d9a0628c198060c81c41f502a80aa7fab799b15848cce4791a933eea846e2d5cd9966d17fe479b307a4a09060ed90508680257654622d78c40d0938576dce8c6afe0d34649b2d997bdb80213ce6b9996b7c22522a2d029fbc422cbabc9815870d4806a649a98c21ff19cc48b4f6d7c71ca59662f25eb6b7c3a5cd2280e683040aea28a24c973ef2a", 0xb1}, {&(0x7f0000000b40)="16e128b0f3f85e10f2d0db9732fe826b659e8cdd2e2f96416deea25d53c1823a46f41640ff3427571d39b6f99cc9ff4ca21f0964681efe47e82025e988679f1b4280d49cd1632b96527e28e15c94da6187644b55897e1f2946f836e43158ab82419894be563211aaa5e124adcfe517327f9ccbeda4d11a94382b80178e82d874b91ede2194f5add27c78e875442ff9146ad4ada415a28211950195b8b43b4bd47d6b6bb9c9276390600495c49d89450bc8be3a2ebdfab21198", 0xb9}], 0x5, &(0x7f0000000c80)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}], 0x30}, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000d40)={0x2, &(0x7f0000000d00)=[{}, {0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r11, 0xc010641d, &(0x7f0000000e00)={r14, &(0x7f0000000d80)=""/91}) (async) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000ec0)={0x0, 0x0}, &(0x7f0000000f00)=0xc) getgroups(0x2, &(0x7f0000000f40)=[r13, r10]) setxattr$system_posix_acl(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)='system.posix_acl_access\x00', &(0x7f0000000f80)={{}, {}, [{0x2, 0x0, r12}, {0x2, 0x1, r7}, {0x2, 0x4, r15}, {0x2, 0x3, r7}, {0x2, 0x2, r7}, {0x2, 0x6, r9}], {}, [{0x8, 0x1, r13}, {0x8, 0x7, r13}, {0x8, 0x1, r13}, {0x8, 0x3, r16}], {0x10, 0x6}, {0x20, 0x2}}, 0x74, 0x2) (async) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f0000001000)) (async) ioctl(r11, 0x22, &(0x7f0000001040)="958d94ddaf8848935ce9815e0f310e0a053ab5b917e2823b25d57a6615041889c2e5e4c9a1053dfc289a222dfcfb9226af12c4bce2160cb2caba3289fb5e5eded07b41c191011655e58bd28375e2812a85675cf1769776") 2m11.181960841s ago: executing program 1 (id=807): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) connect$bt_sco(r0, &(0x7f0000000080), 0x8) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0xa4, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000100), &(0x7f0000000140)=0x10) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0x0, @sdr={0x50313134, 0x9}}) r2 = accept4$x25(r0, &(0x7f0000000280), &(0x7f00000002c0)=0x12, 0x400) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000300)={0x1000, 0xc, 0xa7, 0x8, 0x5}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000340)=r0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000380)=0x8000000000000001, 0x9, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x48, &(0x7f00000003c0)=[@in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e20, 0x3, @private1, 0x7}, @in6={0xa, 0x4e23, 0xffffffff, @empty, 0x8}]}, &(0x7f0000000480)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000004c0)={0x1ff, 0xd87, 0x4, 0xf, 0x688, 0xfff, 0x0, 0xc351, r3}, &(0x7f0000000500)=0x20) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x11a3fc) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000580)={0x48, 0x7, r0, 0x0, 0x0, 0x0, 0x7, 0x3}) write$cgroup_devices(r0, &(0x7f0000000600)={'a', ' *:* ', 'wm\x00'}, 0x9) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000640)={{0x2, 0x4e24, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0_to_batadv\x00'}) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f00000006c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000700)={0x18, r7}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x90, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x74, 0x80, [@link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}, @preq={0x82, 0x2b, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x5, 0x1, 0x6, @device_a, 0x2, @value=@broadcast, 0xb, 0x6a, 0x1, [{{0x0, 0x0, 0x1}, @broadcast, 0x1}]}}, @ibss={0x6, 0x2, 0x3}, @tim={0x5, 0x29, {0x0, 0xa, 0x2, "5a03fb2ecd06f2efb630fefcf76f5db7f1658f31e6d51968c320987c4847470c54a8e68ae061"}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0xe001) write$cgroup_devices(r5, &(0x7f0000000940)={'c', ' *:* ', 'r\x00'}, 0x8) cachestat(r2, &(0x7f0000000980)={0xffff, 0xce}, &(0x7f00000009c0), 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), r5) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x48, r10, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6f4a}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xaad}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}]}]}, 0x48}}, 0x1) openat$cgroup_devices(r0, &(0x7f0000000b80)='devices.allow\x00', 0x2, 0x0) creat(&(0x7f0000000bc0)='./file0\x00', 0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000c00)={r4, 0x3}, &(0x7f0000000c40)=0x8) 2m11.181479999s ago: executing program 33 (id=807): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) connect$bt_sco(r0, &(0x7f0000000080), 0x8) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0xa4, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000100), &(0x7f0000000140)=0x10) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0x0, @sdr={0x50313134, 0x9}}) r2 = accept4$x25(r0, &(0x7f0000000280), &(0x7f00000002c0)=0x12, 0x400) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000300)={0x1000, 0xc, 0xa7, 0x8, 0x5}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000340)=r0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000380)=0x8000000000000001, 0x9, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x48, &(0x7f00000003c0)=[@in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e20, 0x3, @private1, 0x7}, @in6={0xa, 0x4e23, 0xffffffff, @empty, 0x8}]}, &(0x7f0000000480)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000004c0)={0x1ff, 0xd87, 0x4, 0xf, 0x688, 0xfff, 0x0, 0xc351, r3}, &(0x7f0000000500)=0x20) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x11a3fc) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000580)={0x48, 0x7, r0, 0x0, 0x0, 0x0, 0x7, 0x3}) write$cgroup_devices(r0, &(0x7f0000000600)={'a', ' *:* ', 'wm\x00'}, 0x9) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000640)={{0x2, 0x4e24, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0_to_batadv\x00'}) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f00000006c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000700)={0x18, r7}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x90, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x74, 0x80, [@link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}, @preq={0x82, 0x2b, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x5, 0x1, 0x6, @device_a, 0x2, @value=@broadcast, 0xb, 0x6a, 0x1, [{{0x0, 0x0, 0x1}, @broadcast, 0x1}]}}, @ibss={0x6, 0x2, 0x3}, @tim={0x5, 0x29, {0x0, 0xa, 0x2, "5a03fb2ecd06f2efb630fefcf76f5db7f1658f31e6d51968c320987c4847470c54a8e68ae061"}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0xe001) write$cgroup_devices(r5, &(0x7f0000000940)={'c', ' *:* ', 'r\x00'}, 0x8) cachestat(r2, &(0x7f0000000980)={0xffff, 0xce}, &(0x7f00000009c0), 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), r5) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x48, r10, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6f4a}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xaad}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}]}]}, 0x48}}, 0x1) openat$cgroup_devices(r0, &(0x7f0000000b80)='devices.allow\x00', 0x2, 0x0) creat(&(0x7f0000000bc0)='./file0\x00', 0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000c00)={r4, 0x3}, &(0x7f0000000c40)=0x8) 1m46.560199409s ago: executing program 4 (id=1074): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) (async) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x38011, r1, 0x0) (async) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 1m46.12356375s ago: executing program 4 (id=1079): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="bd4e54d45303479f4ec7b291e275aaaaa570f53cf2ce467613ceaaaaaa00080600c600000000000000ffffffffffac141400"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt(r2, 0x1, 0x10000000000009, &(0x7f0000000180)="00050002", 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000200)=0x417c, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast1}, {0x2, 0x0, 0x4, @loopback}, r1}}, 0x48) 1m45.952629049s ago: executing program 4 (id=1080): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018"], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) (async) add_key$user(&(0x7f0000000300), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)="520b4187f92c7bae2f8e43f1666ed4a1c21cdc509828972463020576647510f8df7a22cea2f802acbdfb430f86ffeb7ad2ba", 0x32, 0xfffffffffffffff8) readv(r4, &(0x7f0000000340), 0x0) r6 = eventfd(0x0) poll(&(0x7f00000008c0)=[{r6, 0x2014}], 0x1, 0xc6) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r7, &(0x7f0000000400)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r8, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000040) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001800010000000000000000000200000000000006001400000c00090008"], 0x30}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 1m45.695382869s ago: executing program 4 (id=1081): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x7, &(0x7f0000000a00)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) landlock_restrict_self(r3, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200001c}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1ac, r1, 0x2, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x2}, 0x44) (async) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000240)=0x8335) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$KVM_CAP_SYNC_REGS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) ioctl(r5, 0x5460, 0x0) (async) ioctl(r5, 0x5451, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000013c0)={0x54, r1, 0x821, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x84b2}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000041}, 0x48000) 1m45.695040046s ago: executing program 4 (id=1082): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x8, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000002040), &(0x7f0000000100)=@tcp6=r2}, 0x20) mkdir(&(0x7f00000003c0)='./file1\x00', 0x16) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="1c002c80080000006c09"], 0x38}}, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87, r7}, './file0\x00'}) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a00)=""/49, 0x31}], 0x1}}], 0x2, 0x7fbc3ac7cda9, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x6}}}, 0x24}}, 0x0) 1m45.694543658s ago: executing program 4 (id=1083): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000140)={0xaa7, "c3c7ddebe19efb0c9fa89500f80200ed3d7d3e0000000000000000002000"}) r2 = syz_io_uring_setup(0x5859, &(0x7f0000000600)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'batadv_slave_0\x00', 0x4000}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611224000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m37.667081115s ago: executing program 0 (id=1141): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd"], 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'y'}]}], {0x14}}, 0x84}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r3, &(0x7f0000000300)=[{&(0x7f0000000580)=""/212, 0xd4}], 0x1, &(0x7f0000000840)=[{&(0x7f0000000680)=""/167, 0xa7}], 0x1, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) r5 = dup(r2) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x2000140d) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="80fd", @ANYRES64=r7], 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='./file1\x00') 1m36.490945166s ago: executing program 0 (id=1142): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000ffffffa00000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf020000000000007b9af8ff00000000b609080089ffffff7baaf0ff00000000bf8700000000000007090000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600020076004000bf980000000000007e080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m36.426942912s ago: executing program 0 (id=1143): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x501000) read$FUSE(r2, &(0x7f0000001600)={0x2020}, 0x2020) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='msdos\x00', 0x200800, 0x0) 1m35.517191124s ago: executing program 0 (id=1152): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x4040850) getgroups(0x27, &(0x7f0000002540)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000540)=ANY=[]) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x20000000, 0x20000000, 0x3, 0x7, 0x0, 0x40}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) mknod(&(0x7f0000000200)='./file1\x00', 0x0, 0x980) 1m35.410725916s ago: executing program 0 (id=1153): openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="856b934629faaaaaaaaaaaaa86dd60381f3400042f00fc030000000000000000000000000000ff020000000000000000000000000001042088f70000000000000800000077dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000100800655800000000"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/10, 0xa}], 0x1) 1m35.165144302s ago: executing program 0 (id=1155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000040)='net/kcm\x00') (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) (async, rerun: 64) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @private}, 0x10) (async) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c0037800b0001006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}}, @NFT_MSG_NEWTABLE={0xa0, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x22, 0x6, "83aaf42281b44a33869f55ec8c04c83a063be982705a0d1086e1fbd26784"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x12c}}, 0x800) 1m35.147211484s ago: executing program 34 (id=1155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000040)='net/kcm\x00') (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) (async, rerun: 64) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @private}, 0x10) (async) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c0037800b0001006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}}, @NFT_MSG_NEWTABLE={0xa0, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x22, 0x6, "83aaf42281b44a33869f55ec8c04c83a063be982705a0d1086e1fbd26784"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x12c}}, 0x800) 1m29.65121938s ago: executing program 35 (id=1083): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000140)={0xaa7, "c3c7ddebe19efb0c9fa89500f80200ed3d7d3e0000000000000000002000"}) r2 = syz_io_uring_setup(0x5859, &(0x7f0000000600)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'batadv_slave_0\x00', 0x4000}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611224000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 43.486401989s ago: executing program 7 (id=1468): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1, 0x0, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7}}, 0xe8) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000040801020000005a937b0901a7adbb90e49c31ad6d2700000000000000000a0900010073797a310000000006000240884800000600024022f000000600024088380000050003008400000005000300110000002c00048008000140000000070800014000000007080001400000007f08000140000000060800014000"], 0x80}, 0x1, 0x0, 0x0, 0x2b1b2bdc30117425}, 0x20000008) socket$netlink(0x10, 0x3, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup(r0) r8 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) r9 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000fc0)=[@release], 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0xb) 43.358342057s ago: executing program 7 (id=1470): sendmsg$rds(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) syz_emit_ethernet(0x72, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr=0x64010102, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@remote}, {}, {@dev}, {@local}, {@dev}]}]}}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x509a81, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'veth0_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (async) close(r0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) (async) syz_emit_ethernet(0x72, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr=0x64010102, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@remote}, {}, {@dev}, {@local}, {@dev}]}]}}}}}}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x509a81, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'veth0_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) 43.357662961s ago: executing program 7 (id=1472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800b00070066696c746572"], 0xc4}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000140)=""/126, 0x7e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x18, 0x50}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}], {0x95, 0x0, 0x0, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x28) 43.281413966s ago: executing program 7 (id=1474): r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f000001f8c0)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, r6, 0x22b1e4d6ac66db39}, 0x14}}, 0x0) bind$can_j1939(r4, &(0x7f0000000280)={0x1d, r3, 0x2, {0x0, 0xf0, 0x4}, 0xfe}, 0x18) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f000001f8c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000f00)={0x1d, r8, 0x2, {0x0, 0x1, 0x2}, 0x1}, 0x18) bind$can_j1939(r7, &(0x7f000001f900)={0x1d, r8, 0x0, {0x2, 0xf0, 0x2}, 0x2}, 0x18) r9 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_GET_TIMEOUT(r9, 0x2202, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000880)=@filter={'filter\x00', 0xe, 0x4, 0x4f0, 0xffffffff, 0x0, 0x1e8, 0x1e8, 0xffffffff, 0xffffffff, 0x420, 0x420, 0x420, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x9, 0x9, 0x0, [0xda, 0x4, 0x9, 0x1c00, 0x401, 0xf, 0x0, 0x2, 0x5, 0x4, 0x2, 0xfb8f, 0x6, 0x8, 0x0, 0x1c], 0x7}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x5, 0x8}, {0x4, 0x2, 0x7}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@rt={{0x138}, {0x8af6, [0x100, 0x3], 0x32, 0x10, 0x2, [@loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0xc6}, @remote, @private2, @remote, @mcast2, @mcast2, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @local, @dev={0xfe, 0x80, '\x00', 0x2d}], 0xe}}, @common=@frag={{0x30}, {[0xfffffffc, 0x626c510b], 0x2, 0xc}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x2, 0x5, @loopback}, 0x10, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x4000880}, 0x24044845) close(0xffffffffffffffff) 43.187235941s ago: executing program 7 (id=1475): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@nfc, &(0x7f0000000240)=0x80, 0x80800) r4 = accept4$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10, 0x800) r5 = syz_usbip_server_init(0x3) write$usbip_server(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="00000002"], 0x30) close_range(r4, r1, 0x2) 42.969195552s ago: executing program 7 (id=1476): syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000180)={0x41424344}, 0x1, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}]}]}}]}, 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x10be, &(0x7f00000001c0)=ANY=[@ANYBLOB="53df2b456239aaaaaaaaaabb0800450010b00064000003069078e0000002e00000028323c6e000000100000000ac141439ffffffff0a01010164010101ffffffffac1e0001830f61e0000001ffffffff64010100442c4851000000000000040100000000000000087f00000100000005ffffffff00000009ac1414bb000000024418655000000001000000040000800000000007fffffffb860800000003010201004e224e22", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="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"], 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0xfefffffb, 0x19, 0x1d1, 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) r7 = signalfd(r6, &(0x7f00000012c0)={[0x101]}, 0x8) syz_genetlink_get_family_id$fou(&(0x7f0000001280), r7) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa020800450000140000000000019078ac1e0000000000000b0c90780300000045000000000000000001000000000000ac1414bb"], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) dup2(r5, r7) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000000c0)={r8}, &(0x7f0000000100)=0x8) write$tun(r7, &(0x7f0000001300)={@val={0x0, 0x88e7}, @val={0x1, 0x0, 0x6, 0x4, 0xff15, 0x2}, @llc={@llc={0xd4, 0x7e, "90", "2535e94f176c6a350e406abb9ebd004b536fc949fab818cc66965c5e226276f094597a5866b513d9ba1b80358358ce774e175638b1393e017b4dcab02ae252435392710491da38583d20636df480f37e052aa3ddfb57517d"}}}, 0x69) 42.959787909s ago: executing program 36 (id=1476): syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000180)={0x41424344}, 0x1, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}]}]}}]}, 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x10be, &(0x7f00000001c0)=ANY=[@ANYBLOB="53df2b456239aaaaaaaaaabb0800450010b00064000003069078e0000002e00000028323c6e000000100000000ac141439ffffffff0a01010164010101ffffffffac1e0001830f61e0000001ffffffff64010100442c4851000000000000040100000000000000087f00000100000005ffffffff00000009ac1414bb000000024418655000000001000000040000800000000007fffffffb860800000003010201004e224e22", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="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"], 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0xfefffffb, 0x19, 0x1d1, 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) r7 = signalfd(r6, &(0x7f00000012c0)={[0x101]}, 0x8) syz_genetlink_get_family_id$fou(&(0x7f0000001280), r7) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa020800450000140000000000019078ac1e0000000000000b0c90780300000045000000000000000001000000000000ac1414bb"], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) dup2(r5, r7) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000000c0)={r8}, &(0x7f0000000100)=0x8) write$tun(r7, &(0x7f0000001300)={@val={0x0, 0x88e7}, @val={0x1, 0x0, 0x6, 0x4, 0xff15, 0x2}, @llc={@llc={0xd4, 0x7e, "90", "2535e94f176c6a350e406abb9ebd004b536fc949fab818cc66965c5e226276f094597a5866b513d9ba1b80358358ce774e175638b1393e017b4dcab02ae252435392710491da38583d20636df480f37e052aa3ddfb57517d"}}}, 0x69) 32.921680468s ago: executing program 3 (id=530): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x307140, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) close(0xffffffffffffffff) socket(0x28, 0x5, 0x0) r1 = syz_io_uring_setup(0x16e, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0xf0, 0x1e, 0x713, 0x0, 0x0, {{@in=@loopback}, {@in=@remote, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}}, 0xf0}}, 0x0) ioctl$HIDIOCSREPORT(r4, 0xc038480a, &(0x7f0000000400)={0x3, 0x200}) 23.418438157s ago: executing program 3 (id=530): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x307140, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) close(0xffffffffffffffff) socket(0x28, 0x5, 0x0) r1 = syz_io_uring_setup(0x16e, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0xf0, 0x1e, 0x713, 0x0, 0x0, {{@in=@loopback}, {@in=@remote, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}}, 0xf0}}, 0x0) ioctl$HIDIOCSREPORT(r4, 0xc038480a, &(0x7f0000000400)={0x3, 0x200}) 20.672827547s ago: executing program 8 (id=1679): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/25], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)={0x200000, 0x1a2, 0x2}, 0x18) mkdirat(r0, &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', 0x221) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) read(r2, &(0x7f0000000200)=""/4096, 0x1000) close_range(r1, 0xffffffffffffffff, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') socket$inet_mptcp(0x2, 0x1, 0x106) acct(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 20.672346417s ago: executing program 8 (id=1680): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROM_SEND_PACKET(r3, 0x5323, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x4c054) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3332be2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) poll(&(0x7f00000000c0)=[{r1, 0xc0}, {r2, 0x242}], 0x2, 0xffffffff) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xad1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x3, 0xffffc3fd}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 19.657109386s ago: executing program 8 (id=1686): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000700), 0x161a02, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) migrate_pages(0x0, 0x200, &(0x7f0000000000)=0xffffffff7fffffff, &(0x7f00000000c0)=0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x29}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x80000000000000}, {0x1000000000000000, 0x0, 0x0, 0x800}, 0x8, 0x0, 0x1}, {{@in=@empty, 0x10000000, 0x2b}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}}, 0xe8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGETLED(r3, 0x560c, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$pptp(r4, &(0x7f0000000140)={0x18, 0x2, {0x2, @local}}, 0x1e) syz_open_dev$usbfs(&(0x7f0000000c00), 0x71, 0x2081) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x541b, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c8005a005600010005813900fd0c0200df0006100500ff070000000008000000080000000610060108000200000073270000070000000409090601070000070000000000000004050000108f08090f010400050081000447500500040002"], 0x5f) socket$netlink(0x10, 0x3, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffe3ffffffffffff86dd600111fa00101100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22"], 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r5, &(0x7f0000000100)=""/54, 0x36) write$dsp(r0, &(0x7f0000000000)="45df95", 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(&(0x7f00000009c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000a40)='befs\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) read$dsp(r5, &(0x7f0000000380)=""/109, 0x6d) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) 18.726158755s ago: executing program 8 (id=1691): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="7814977b3123247f644a38defdf43cc22f88604cde23f1c100f87ce63ffeb5a01520a38b7a2e1fc9d875c7a82ea1b54a565673998cfc85d81486acde386f8c93d537197e8a33de624e9f221484012888eb9e9e40ed08f99745d177a066dfb8ac074fa382085157828e37fd5cfa44c9b426295caba82913ee29bb414d9f0b892c92e3ba1bc494084ebea92dc96a08027dc9c88c3b5f07fa7625d38ee9f90d6bdbc684936f3bf3e338", 0xa8}, {&(0x7f0000000380)="029826f5dce6a04375614e8b1bdeab4be702a07ce1b7faae1d16d6c5530591988b49213b822e92abd348f3abe6900693da046b06c0533711cfacad86dccb8f1aaf3e543ebc10280b58f488fac5c17a9ed79df3bb", 0x54}, {0x0}, {&(0x7f0000000500)="10250278f8168603c44b8981dea60e0fac5c524b365351af67c5d7fe11fb4a8cbd472b823d9ab829e7d6e0f484ad3dcaa17da08c892cca701ee2f103375276843b4bb8ef65c6bade1141bc1ce193416cfad372ffa12108725deeede0ccc5d9895385d82d2b041ab016a09fdd4cd4cec648446f93343b04f641c95e8f38e5e38fbf9c3a14bbb24b5b3e26895ac8f6dfc1e07e9fda7c84588c7b773e597bf2488c9ae6bdb639cfa13f", 0xa8}], 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x180}], 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x4426, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000002ec0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="c5deb316", 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xdb2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}}, 0x30) chdir(&(0x7f0000000140)='./bus\x00') capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000340)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 18.724909506s ago: executing program 8 (id=1692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8890}, 0x8044) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (rerun: 32) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) (async) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCXONC(r3, 0x5411, 0x2) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a32000000004c000000060a010400000000000000000100000008000b400000000024000480200001800d00010073796e70726f7879000000000c00028000000007000000000900010073797a30000000001400000011010000000000000000000000000a"], 0xc0}}, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600000000000000000100000008000a40000000000900020073797ab1000000000900010073797a3000000000080005400000001414000000110001", @ANYRES8=r0, @ANYRES64=r2, @ANYRESDEC=r4], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a010400000000000000000100000008000a4000cea4c1a8808fcbaaa369bd000900010073797a300000000008000540000000141400000011000f0000"], 0x64}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18.448842144s ago: executing program 8 (id=1693): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0xde284000) listen(r1, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r4, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r5, 0x0, 0x0}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f00000002c0)=""/195, 0x41100, 0x5, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000001100010100"/20, @ANYRES32=0x0, @ANYBLOB="9008000000000000080004000800000024000e0deb57272ac453d0da870008000000000000000000000080010000050000000000000080009c00000000000800", @ANYRES32=0x0, @ANYBLOB], 0x5c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f00000001c0)=@rose) 18.448263955s ago: executing program 37 (id=1693): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0xde284000) listen(r1, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r4, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r5, 0x0, 0x0}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f00000002c0)=""/195, 0x41100, 0x5, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000001100010100"/20, @ANYRES32=0x0, @ANYBLOB="9008000000000000080004000800000024000e0deb57272ac453d0da870008000000000000000000000080010000050000000000000080009c00000000000800", @ANYRES32=0x0, @ANYBLOB], 0x5c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f00000001c0)=@rose) 17.196649962s ago: executing program 3 (id=530): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x307140, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) close(0xffffffffffffffff) socket(0x28, 0x5, 0x0) r1 = syz_io_uring_setup(0x16e, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0xf0, 0x1e, 0x713, 0x0, 0x0, {{@in=@loopback}, {@in=@remote, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}}, 0xf0}}, 0x0) ioctl$HIDIOCSREPORT(r4, 0xc038480a, &(0x7f0000000400)={0x3, 0x200}) 10.150656421s ago: executing program 3 (id=530): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x307140, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) close(0xffffffffffffffff) socket(0x28, 0x5, 0x0) r1 = syz_io_uring_setup(0x16e, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0xf0, 0x1e, 0x713, 0x0, 0x0, {{@in=@loopback}, {@in=@remote, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}}, 0xf0}}, 0x0) ioctl$HIDIOCSREPORT(r4, 0xc038480a, &(0x7f0000000400)={0x3, 0x200}) 4.04786861s ago: executing program 6 (id=1821): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb9, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000580)}}, 0xffffffffffffff90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000699100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020800000400000006000000a4b9000000000000971588cf50ec2b9aa0886669fe57402d3fa01c1fab23cceafffc4a2eba9951a4bfb2d67205a902a5df53fba3c213", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000011070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', '', [], 0xa, "efbc"}, 0x6) sendfile(r6, r7, &(0x7f0000000000)=0x5, 0x20920c57) (async) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x3, &(0x7f0000000040)={0x0, "0a0dffbf000000005c0ecd551ee7b16eab615e6234c7dece48bacf6f78c7da6647"}}) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x0, @loopback}], 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r9, @ANYBLOB="0a0006000802110000010000050019ffe2000000"], 0x30}}, 0x0) sendto$inet6(r4, &(0x7f00000000c0)="e3", 0xff0a, 0x0, &(0x7f0000000000)={0xa, 0x4e0f, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x5}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000680), &(0x7f0000000240)=0x8) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket(0x15, 0x5, 0x0) getsockopt(r13, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r12, 0x431, 0x1, 0x3, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0xfc}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.047685146s ago: executing program 6 (id=1822): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x0, 0x3d, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xb0, 0xb1, 0xf1, 0x8, 0x54c, 0x69, 0xa8d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0xfb, 0x0, 0x10, 0x29, [{{0x9, 0x4, 0x1d, 0x47, 0x2, 0x4b, 0xdd, 0x13, 0x4, [], [{{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x8, 0xc8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xfffe}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x3, 0x34, 0x1}}]}}]}}]}}, 0x0) (async) syz_emit_ethernet(0x5a, &(0x7f0000000300)=ANY=[@ANYBLOB="0d6afadfc150aaaaaaaaaa1386dd600000000000000000aa00000000000000000000ffff7f00000100000000", @ANYRES32, @ANYRES32=0x41424344, @ANYBLOB="90020000c2"], 0x0) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x6c, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x92, 0x0, 0x0, 0x0, 0x3}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) 2.990333061s ago: executing program 5 (id=1829): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J]\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendto$inet6(r4, &(0x7f0000000300)="d8", 0x1, 0x0, &(0x7f0000000340)={0xa, 0x0, 0x0, @private0}, 0x1c) listen(r4, 0xfff) r6 = accept(r4, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) dup(r4) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 2.313666627s ago: executing program 3 (id=530): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x307140, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) close(0xffffffffffffffff) socket(0x28, 0x5, 0x0) r1 = syz_io_uring_setup(0x16e, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0xf0, 0x1e, 0x713, 0x0, 0x0, {{@in=@loopback}, {@in=@remote, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}}, 0xf0}}, 0x0) ioctl$HIDIOCSREPORT(r4, 0xc038480a, &(0x7f0000000400)={0x3, 0x200}) 435.653729ms ago: executing program 6 (id=1831): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x10000}) r3 = syz_io_uring_setup(0x26c0, &(0x7f0000000600)={0x0, 0x55fa, 0x10100, 0x0, 0x216}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000200)=ANY=[@ANYBLOB=','], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r6, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x74) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r9 = openat$cgroup_pressure(r2, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000080)={'full', 0x20, 0x1, 0x20, 0x100002}, 0x2f) write$cgroup_pressure(r9, &(0x7f0000000240)={'some'}, 0x2f) 435.294282ms ago: executing program 5 (id=1832): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x10, 0x5, 0x4e8, 0x0, 0x120, 0xffffffff, 0x300, 0x120, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ipv6={@private0, @private2, [], [], 'wlan1\x00', 'ip6erspan0\x00', {}, {}, 0x87}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@multicast1, @ipv6=@private0, @gre_key, @icmp_id=0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1c, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @gre_key=0xfa1, @port=0x4e23}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @port, @gre_key}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x5, 0xc25}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 435.013676ms ago: executing program 9 (id=1833): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x44, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x282}]}, @CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xffffffcf}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) 370.955912ms ago: executing program 5 (id=1834): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, 0x2, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x800) 370.603536ms ago: executing program 9 (id=1835): semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000000)=""/31) r0 = semget$private(0x0, 0x2, 0x497) semop(r0, &(0x7f0000000040)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x1000}, {0x6, 0x3, 0x800}, {0x4, 0x3, 0x800}, {0x3, 0x3ff, 0x1000}, {0x0, 0x7, 0x1000}, {0x0, 0x3, 0x1000}, {0x3, 0x101, 0x1800}], 0x8) semctl$GETZCNT(r0, 0x1, 0xf, &(0x7f0000000080)=""/31) semctl$GETPID(r0, 0x4, 0xb, &(0x7f00000000c0)=""/4096) clock_gettime(0x0, &(0x7f0000001100)={0x0, 0x0}) semtimedop(r0, &(0x7f00000010c0)=[{0x2, 0x40}], 0x1, &(0x7f0000001140)={r1, r2+10000000}) semctl$GETVAL(r0, 0x0, 0xc, &(0x7f0000001180)=""/115) connect$rds(0xffffffffffffffff, &(0x7f0000001200)={0x2, 0x4e24, @broadcast}, 0x10) semctl$GETNCNT(r0, 0x3, 0xe, &(0x7f0000001240)=""/223) semctl$SEM_STAT(r0, 0x1, 0x12, &(0x7f0000001340)=""/70) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f00000013c0)=0x1000) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000001400)=""/54) semtimedop(r0, &(0x7f0000001440)=[{0x5, 0x6, 0x1000}, {0x4, 0x200, 0x1800}, {0x1, 0x7, 0x800}, {0x4, 0x1, 0x800}, {0x0, 0x80, 0x1800}, {0x0, 0x5, 0x1000}, {0x3, 0x528d, 0x1800}], 0x7, &(0x7f0000001480)) r3 = semget(0x2, 0x3, 0x20) semtimedop(r3, &(0x7f00000014c0)=[{0x84d255c9521070f1, 0x7f, 0x1800}, {0x1, 0x1, 0x800}, {0x2, 0xffff}, {0x1, 0xff}, {0x3, 0x4, 0x1000}, {0x4, 0x8, 0x800}], 0x6, &(0x7f0000001500)) futex(&(0x7f0000001540)=0x2, 0x0, 0x1, &(0x7f0000001580), &(0x7f00000015c0)=0x2, 0x2) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) r4 = fanotify_init(0x8, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001600)='/proc/slabinfo\x00', 0x0, 0x0) fanotify_mark(r4, 0x400, 0x1028, r5, &(0x7f0000001640)='./file0\x00') futex(&(0x7f0000001680), 0x7, 0x2, &(0x7f00000016c0)={0x77359400}, &(0x7f0000001700)=0x1, 0x1) r6 = accept4(r5, 0x0, &(0x7f0000001740), 0x800) semctl$IPC_RMID(r3, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001800)=[@text16={0x10, &(0x7f0000001780)="66b9080b000066b80020000066ba000000000f30baf80c66b8c86b9f8b66efbafc0c66ed36dd186766c7442400010000006766c7442402003000006766c744240600000000670f011c240f7e07660f381ef7263e0fc76b28ea00106000bad004b060ee362ead", 0x66}], 0x1, 0x8, &(0x7f0000001840)=[@dstype3={0x7, 0xf}, @vmwrite={0x8, 0x0, 0x1f, 0x0, 0x3, 0x0, 0x1, 0x0, 0xff4}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001880)=[0x44, 0x8, 0x0, 0x1, 0xf, 0xe]) mkdirat(r5, &(0x7f00000018c0)='./file0\x00', 0x84) semop(r3, &(0x7f0000001900)=[{0x0, 0x5}, {0x4, 0x1}, {0x0, 0x7, 0x1800}, {0x2, 0xdc4, 0x1000}, {0x4, 0x9, 0x1000}], 0x5) syz_clone(0x80840000, &(0x7f0000001940)="1a94b18035473f87fab6a04607129b543ce3157892ad20913c5edc62cf67d51c399a8bf080347e4355d7550aeb2b541d88b681652d7c4b9003ca0cd8ed3807bcf8e4149431bf217b05490ebdb2872b7b883499565ae299077872a746481cf33a05f9412319273b8493c6832ac520a16de2a99e8ef9c5a815e2b04bf0cec9e8b3bf3c05588dcc41dc", 0x88, &(0x7f0000001a00), &(0x7f0000001a40), &(0x7f0000001a80)="f3eb450cf18bdda446b79eeb8520be157f5980c4d84e6af6fe690184e4985df4137abbfa796ab4a1e75e2439f0886b942ddc623e2c3cf9ecaa83e6416c39698d0dadb125760b666f3d8b138f6e50d978f47a9743527e3aec846810f477ee13cc2f7a8b76a248c1ec769feb521860ed4a34f81507d041012bf951829bac8fb1acd071de35ff6af63dfb7d7ee234a6438adc29d1802e573116c8bab7f497b4a4258addd82921") splice(0xffffffffffffffff, &(0x7f0000001b40)=0x1, r6, &(0x7f0000001b80)=0xffffffffffff9da1, 0x8, 0xa) 370.347328ms ago: executing program 6 (id=1836): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000002c0)=0xa0000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(0xffffffffffffffff, r2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = socket(0x2, 0x3, 0xff) connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x1, @multicast1}, 0x10) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) writev(r5, &(0x7f0000002b00)=[{&(0x7f0000002700)='5', 0x1}], 0x1) sendmmsg$unix(r4, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = dup(r1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000040)={@my=0x0}) read$dsp(r6, &(0x7f0000000000)=""/38, 0x26) sendfile(r0, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x23b) 365.775267ms ago: executing program 5 (id=1837): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001380)={&(0x7f00000004c0)='f2fs_readpages\x00', r3, 0x0, 0x4}, 0x18) r4 = fcntl$dupfd(r1, 0x0, r2) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) ioctl$TFD_IOC_SET_TICKS(r4, 0x40085400, &(0x7f0000000000)=0x25bb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) r5 = gettid() prlimit64(r5, 0xa, &(0x7f0000000340)={0x6, 0x7fffffff}, 0x0) timer_create(0x5, &(0x7f0000000380)={0x0, 0x1c, 0x2, @thr={&(0x7f00000013c0)="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"/4096, &(0x7f00000000c0)="5bf2414baf7f55598e439cb0479152fac6f11d767c652b282615094bf41da9e5d0e0026427b0ad07caf4c8a933ceac74daee06198a14201cbe328a902df5c826a8996b26756f062a2c6cc8aae3eea482dec256a25859d4f2616e8ada73fc1b056452371c3d8d91a0d7aecd0805353fc516dd53584916139780d159756bfc4931c92df1bce374b69a58c6b08b39a8e4bb939bfb981cb87a7ab834dadded3d3471044655deeb83e262f5e5f33082a563b30e6d76f320b348f37d68d0fb4f815ab37667f0d88f03a6bfb22e2e7f98fdb96dcad6e05465a324"}}, &(0x7f00000001c0)=0x0) timer_gettime(r6, &(0x7f0000000300)) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40046201, &(0x7f0000000080)='contention_begin\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 291.226821ms ago: executing program 9 (id=1838): unshare(0x2a020400) r0 = socket(0x27, 0xaf6987bf6937e95b, 0x4) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x1, 0xf0, 0x4}, 0xff}, 0x18) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='net/ip_mr_vif\x00') preadv(r3, &(0x7f0000000900)=[{&(0x7f0000000580)=""/231, 0xe7}], 0x1, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) bind$inet(r2, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000001ac0)={0x0, @in6={{0xa, 0x4e21, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8}}, [0x3, 0x6, 0x1, 0x4, 0x200080000000006, 0xc, 0x0, 0x72ac, 0x0, 0x4, 0x2, 0x0, 0x800, 0x0, 0xb5]}, &(0x7f0000000300)=0x100) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a540500000c0a0104000000000000000003000002200503801805008044020180b10001004daccfb5ae13e65d243331f5d27d10f9b2c85b94346dd930707f1d0b75f266079cd1a0c783f234b3d32cbf0d096c9aa33b975bb0021480d718a9bfc81651fc05ef2859e7a0eec5f0b33778bbaaa703c6705de2d5d198f655bd53a307ad6fce4e70d7151b9e283c632bb778524a447183ec80777555c5068a09da3db3e6fb319a4717b930c60eb031df8a148f9dbea2f4c58b5278e3abe260ae1ecb7aa02fa588a4ce86004b2f9da1e738e1621c00000034000280080003400000000408000180fffffffd0900020073797a30000000000900020073797a310000000008000180fffffffb0c000280080003400000000129000100dd9e72b5bf85b72cef2be91b5ba139a9d04e42cb5d734bb17c9fb33ed7b5b57acec604520c000000e6000100d1186eb2f01d9f95a2b06efb73a1123cc5a63f1837206bffd987ece486e4f2bc533027102db81222392e23cc01843b526b5d78d0d8e60b05e0f54e3935a359f8d00277200af5b5981b3d9de95c4fd254132dcdb9f7e7b73cc3d5774761b1efe2aefd5354dc30a541598c5c47181a7a369053f5cf439851cc661b55d081d3424e5bba2e9e26a3681c16a3774db62a622ffbfdf2876013c532f50b52669040fe277a3c76d09888bf978dfe2d7618a761a9789cb0f5979653b92a6a48ee753dde45d947223639f660409fe557b031d1f5f8c2c9bfd9edaec28acaf334bc9e3f79ee1ec200003800028008000180fffffffe0900020073797a310000000008000180fffffffc0800034000000002080003400000000308000180fffffffd0c020280240002800900fcff72797a300000000008000180000000000900020073797a3100000000180002800900020073797a31000000000800018000000000ba0001001c04336df38806af4be499321dca2802c5924ad82ee94dbed994763fcb54e5a2b6dbbc615e48cb497cf0e70c492d9b514f3a13bde6949456bc8e753d706f9933019233e948cea62f8c73864c1e4f21b8ed4fa0f934cfe214a3cd206d04b87c615232b4c91bddf942840e76a3cbdeadebb352d963dc92c7ee00412478b584ed1024645bb2d3f79854052a37d094ddb355a7e1943a7a1d544a2ec692353eb1020d7c56a3201c41df5761674b3ae454c99ff12cd7b41eea000004000100100002800900020073797a32000000001a000100efe867deb0a3bf40dd023f4f0558854137a3062e77f200000c00028008000180fffffffc280002800900020073797a320000000008000180fffffffc080003400000000108000340000000023800028008000340000000020800034000000003080003400000000408000180fffffff808000180ffffffff0900020073797a300000000071000100295ce39cf0a334e5ba0897e0eb0ca6ea1b14821ff49b2a5fa68791f9c01e52cfe0558fbe45153e3fa8221dfb2d5f2e095611a54cf7d249ca520282553c14aff87c77eefaf60daf539a68f44e3f4f4a5581ff0a7506f558574c273ca8dbd96d558fde64e245fe413ba1226e4b720000000800034000000001bc00028030000280080003400000000308000180fffffffe08000180fffffffd0900020073797a300000000008000180fffffffb5b000100572a538db2c5bdf040fb2393ea975dc1dd526a0aa147358927331e0906af034d03d8733f8b4b1c5478ca0e20e34c84a1b21599625411174a64a162426d57ef932dfc6233b7920e8b456b50abc2abec02120eb0f36a8084002c000280080003400000000408000180fffffffc08000180ffffffff08000180fffffffd08000180ffffffff040000800900010073797a31000000000900010073797a3100000000080004400000000348000000060a010400000000000000000100000008000b40000000040900010073797a3000000000200004801c0001800b00010064796e73657400000c0002800800044000000013140000001100010000000000000000000000000a"], 0x5c4}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000100039040000000000000000000003e4", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800e0001006970366772617461700000000800028004001200"], 0x3c}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="341000003b0007010000000000000000047c00000400000014000180080016000000000006000600800a00000800"], 0x1034}}, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000480)={r5, 0x3ff}, &(0x7f0000000500)=0x8) r7 = socket$inet(0x2, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r9], 0x3c}}, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240001000002cfec76ce991a14f60d72804f1301011f0000000000000001000003080008"], 0x24}, 0x1, 0x0, 0x0, 0x18c0}, 0x10) r11 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) read(r11, &(0x7f0000001a40)=""/111, 0x6f) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r11, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) 289.888614ms ago: executing program 5 (id=1839): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000180)={0x46d60545cb775461, 0x1000}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt(r5, 0xfffffffb, 0x80000000, &(0x7f0000000400)="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", 0x1000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x4200, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x200408c0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r2, 0x4068aea3, &(0x7f0000001400)={0xdb, 0x0, 0x7ff}) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x8402, 0x0) ioctl$SOUND_MIXER_INFO(r9, 0x805c4d65, &(0x7f0000000080)) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r8, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x90) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000ffdbdf251900000008000300", @ANYRES32=r6, @ANYBLOB="06006d"], 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x4) 289.684144ms ago: executing program 9 (id=1840): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550a00000000000061111c000000000018000000000000000000000000f6ffff9400000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x7, 0x97, &(0x7f0000000080)="8bc5e454b29ba1", &(0x7f00000000c0)=""/151, 0x8, 0x0, 0x84, 0xe7, &(0x7f0000000180)="8fbc5ffd860d21cf185bbbe6e441cc20e05bfdbd8e4c4a1ca688b58e21688486352d9b4be45892da36bad8ffd886aca481ea079af2d95713064308f21b17fff764894040d293fdc7bf04d0f83645955b7726f1233eb1e40ebed11d17130d2ec2ed4254979aa2986c47a3923c0024a0a5cac4534c3389456ad8ed5917616956638f3a945c", &(0x7f00000003c0)="5f074225ed5fa2cb65079a12d2b95b789c5ccc9fd8ae0f2cf52858c56e50790efc2caff6d290564e494695a83becf96b141a59af3741f0d5ce73b6e5b882a3bb753a8172651a5d4bd4542b3b959702a83843a6db064db30908cc3decf86f03dffddcc8a7763472f1103a470fd6d9c73070ecdcf69004f74ebbede6c5e60b69172c8e83e34a22144a9a65297283fb6e74121b1f39c3adada1108047dd6ad0fb05f4ac0383f4de5dbf58cd29ab500822e38ae694f2177c75d9029759a30dbfca657f8a233c8d367c5f55befe3af1fd63e4ead56ff40e6492f657633c72a490d578d6fecb8687f1a0", 0x4, 0x0, 0x10}, 0x50) 289.489169ms ago: executing program 9 (id=1841): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = dup2(0xffffffffffffffff, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000240)={@l2={0x1f, 0x1, @any, 0x5}, {&(0x7f00000001c0)=""/115, 0x73}, &(0x7f0000000080), 0x10}, 0xa0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0xfffffffb}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x3c5c, 0x99a7a6f2d0805c55, 0x8}, &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/44, 0x2c}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x0, 0x1}, 0x20) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @rand_addr=0x64010100}}}], 0x20}, 0x4080) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x21, 0x1, 0x0, "27625b895f17386bcec100529babe6179d13f019e300", 0x32314d59}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 284.407355ms ago: executing program 9 (id=1842): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x80, 0x6, @link_local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0xc0189436, &(0x7f0000000140)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010010000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a0100000000000000001f010000000900010073797a30000000000900020073797a30000000001c000380080001400000000008000240000abf00080002400000000138000000160a0101000b000000000000010000000900020073797a30000000000900010073797a300000000004000380080007"], 0xe4}}, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 125.0084ms ago: executing program 6 (id=1843): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@newtaction={0x60, 0x30, 0x1, 0xfffffff9, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0xf, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x5, 0x0, 0xfff, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000030800000000000000000000000000000900010073797a31000000001c0004800800034000000000080005400c00000008"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_io_uring_setup(0x24f8, &(0x7f0000002ec0)={0x0, 0x0, 0x10100, 0x0, 0x21}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000e40)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)={0x0, 0x0, 0x28}, &(0x7f0000000940)='./file0\x00', 0x18}) io_uring_enter(r4, 0xc4f, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000001000000040000000c000180"], 0x78}}, 0x0) 120.150832ms ago: executing program 6 (id=1844): r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "e5c7f20eae1fae974c170f6484d0a76b00489afd264e961114174dd08e6a34da6c9cb5dcb0fcccd12f9b47b8ea086c1c1c593c15de9400"}, 0x48, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f0000000480)="00050002", 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000200)=0x417c, 0x4) keyctl$KEYCTL_MOVE(0x1e, r0, r0, 0x0, 0x0) keyctl$get_keyring_id(0x0, r0, 0x3) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETSF(r3, 0x8910, &(0x7f0000000000)={0x8, 0x5, 0x3, 0x400, 0x19, "f9e94c251179186710f7964341fa3768303371"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f088a847e08906000f4000631177fbac141445e000030394029f034d2f87e589ca6aab845013f286dd", 0x0, 0xfe, 0x60000e1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010101}}, 0x0, 0x0, 0x37, 0x0, "c3218d82c5896754d7cdb23c72887c897926a8856263b50c578ef1f9f362f16f21f5c872b1737718103bbde1a9d99011d25bbdff9c1351ba69e297337d6a5e4a948c1cbf827d6e95ad5bbfb5b3bd1929"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet_int(r5, 0x0, 0x31, &(0x7f00000002c0)=0xfffffff7, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r2) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), r2) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000400), 0xc0102, 0x0) ioctl$VT_RESIZE(r8, 0x5609, &(0x7f0000000440)={0x9, 0x0, 0x5}) r9 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffa000/0x4000)=nil) shmat(r9, &(0x7f0000ffc000/0x1000)=nil, 0x1000) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r7, 0x701}, 0x14}}, 0x0) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="04002dbd0e55187000fedbdfbec2800000080007007f00000108000400ff"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000840) 0s ago: executing program 3 (id=530): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x307140, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) close(0xffffffffffffffff) socket(0x28, 0x5, 0x0) r1 = syz_io_uring_setup(0x16e, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0xf0, 0x1e, 0x713, 0x0, 0x0, {{@in=@loopback}, {@in=@remote, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}}, 0xf0}}, 0x0) ioctl$HIDIOCSREPORT(r4, 0xc038480a, &(0x7f0000000400)={0x3, 0x200}) kernel console output (not intermixed with test programs): 731398792.032:1239): avc: denied { setcurrent } for pid=11054 comm="syz.6.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 176.858858][ T39] audit: type=1401 audit(1731398792.032:1240): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 176.876554][T11043] IPVS: using max 37 ests per chain, 88800 per kthread [ 177.040138][T11070] fuse: Bad value for 'group_id' [ 177.041485][T11070] fuse: Bad value for 'group_id' [ 177.066875][T11074] syzkaller0: entered promiscuous mode [ 177.068471][T11074] syzkaller0: entered allmulticast mode [ 177.071005][ T39] audit: type=1400 audit(1731398792.247:1241): avc: denied { write execute } for pid=11073 comm="syz.6.1446" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 177.080114][T11074] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 177.223965][T11080] usb usb7: usbfs: interface 0 claimed by hub while 'syz.6.1449' resets device [ 177.246335][ T39] audit: type=1400 audit(1731398792.406:1242): avc: denied { create } for pid=11082 comm="syz.6.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 177.255535][ T39] audit: type=1400 audit(1731398792.416:1243): avc: denied { write } for pid=11082 comm="syz.6.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 177.309536][ T71] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.570155][ T66] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.574095][ T66] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.576619][ T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.579439][ T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.582829][ T66] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 178.584880][ T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.628783][ T5937] Bluetooth: hci0: command tx timeout [ 178.664011][T11093] chnl_net:caif_netlink_parms(): no params data found [ 178.755780][T11093] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.757877][T11093] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.760141][T11093] bridge_slave_0: entered allmulticast mode [ 178.762301][T11093] bridge_slave_0: entered promiscuous mode [ 178.765315][T11093] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.767251][T11093] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.769609][T11093] bridge_slave_1: entered allmulticast mode [ 178.771889][T11093] bridge_slave_1: entered promiscuous mode [ 178.794085][T11093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.797805][T11093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.822550][T11093] team0: Port device team_slave_0 added [ 178.828508][T11093] team0: Port device team_slave_1 added [ 178.840456][ T39] audit: type=1400 audit(1731398793.894:1244): avc: denied { bind } for pid=11105 comm="syz.6.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 178.845804][ T39] audit: type=1400 audit(1731398793.894:1245): avc: denied { write } for pid=11105 comm="syz.6.1454" path="socket:[48580]" dev="sockfs" ino=48580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 178.861997][T11093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.864589][T11093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.873516][T11093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.879993][T11093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.882684][T11093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.882709][T11093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.897027][T11108] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 178.924990][T11093] hsr_slave_0: entered promiscuous mode [ 178.927761][T11093] hsr_slave_1: entered promiscuous mode [ 178.944103][T11093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.946710][T11093] Cannot create hsr debugfs directory [ 178.962318][ T71] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.970168][ T39] audit: type=1400 audit(1731398794.015:1246): avc: denied { accept } for pid=11114 comm="syz.5.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 179.057345][ T71] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.144330][ T71] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.195350][ T9] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 179.221332][ T71] bridge_slave_1: left allmulticast mode [ 179.222841][ T71] bridge_slave_1: left promiscuous mode [ 179.224363][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.227044][ T71] bridge_slave_0: left allmulticast mode [ 179.228705][ T71] bridge_slave_0: left promiscuous mode [ 179.230222][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.377078][ T9] usb 11-1: Using ep0 maxpacket: 16 [ 179.379682][ T9] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.382563][ T9] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58880, setting to 1024 [ 179.386318][ T9] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.389848][ T9] usb 11-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 179.392188][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.396364][ T9] usb 11-1: config 0 descriptor?? [ 179.398690][T11117] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 179.401869][ T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input22 [ 179.523527][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.528694][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.533999][ T71] bond0 (unregistering): Released all slaves [ 179.619371][ T9] usb 11-1: USB disconnect, device number 8 [ 179.816947][ T71] hsr_slave_0: left promiscuous mode [ 179.819741][ T71] hsr_slave_1: left promiscuous mode [ 179.822017][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.823761][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.830765][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.832607][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.844494][ T39] audit: type=1400 audit(1731398794.838:1247): avc: denied { getopt } for pid=11120 comm="syz.5.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 179.855614][ T71] veth1_macvtap: left promiscuous mode [ 179.857142][ T71] veth0_macvtap: left promiscuous mode [ 179.858677][ T71] veth1_vlan: left promiscuous mode [ 179.859894][ T71] veth0_vlan: left promiscuous mode [ 179.872510][ T39] audit: type=1400 audit(1731398794.867:1248): avc: denied { ioctl } for pid=11122 comm="syz.5.1461" path="socket:[47880]" dev="sockfs" ino=47880 ioctlcmd=0xae6a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 180.651304][ T71] team0 (unregistering): Port device team_slave_1 removed [ 180.736693][ T71] team0 (unregistering): Port device team_slave_0 removed [ 180.772638][T11124] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 180.777573][ T66] Bluetooth: hci3: command tx timeout [ 181.347094][T11137] __nla_validate_parse: 2 callbacks suppressed [ 181.347106][T11137] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1465'. [ 181.350926][T11139] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1466'. [ 181.378312][T11144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=11144 comm=syz.7.1468 [ 181.442047][T11148] binder: 11142:11148 ioctl 4c81 b returned -22 [ 181.454814][T11149] netlink: 'syz.5.1469': attribute type 32 has an invalid length. [ 181.456803][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1469'. [ 181.459061][T11149] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 181.467044][T11150] netlink: 'syz.5.1469': attribute type 32 has an invalid length. [ 181.469568][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1469'. [ 181.473560][T11150] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 181.549587][T11093] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 181.558938][T11093] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 181.572972][T11093] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 181.577214][T11093] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 181.619707][T11093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.649253][T11093] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.653566][ T9141] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.655419][ T9141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.660433][ T9141] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.662288][ T9141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.672438][T11093] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 181.675933][T11093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.757475][T11093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.774049][T11093] veth0_vlan: entered promiscuous mode [ 181.778016][T11093] veth1_vlan: entered promiscuous mode [ 181.789008][T11093] veth0_macvtap: entered promiscuous mode [ 181.791915][T11093] veth1_macvtap: entered promiscuous mode [ 181.800435][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.803159][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.805589][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.808298][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.811203][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.814160][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.817900][T11093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.822008][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.824760][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.828271][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.830993][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.833371][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.835994][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.839117][T11093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.843029][T11093] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.845221][T11093] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.847673][T11093] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.849803][T11093] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.886048][T10868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.888020][T10868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.899289][T10887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.900083][ T7891] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 181.902338][T10887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.941301][ T71] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.056009][ T5307] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 182.057162][ T71] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.065343][ T5307] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 182.068788][ T5307] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 182.075844][ T5307] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 182.079133][ T5307] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 182.081788][ T7891] usb 10-1: Using ep0 maxpacket: 8 [ 182.084298][ T5307] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 182.084423][ T7891] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 182.088793][ T7891] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.091687][ T7891] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.094811][ T7891] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.097258][ T7891] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.100463][ T7891] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 182.102720][ T7891] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.188113][ T71] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.197203][T11174] chnl_net:caif_netlink_parms(): no params data found [ 182.248828][T11174] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.251353][T11174] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.254680][T11174] bridge_slave_0: entered allmulticast mode [ 182.257385][T11174] bridge_slave_0: entered promiscuous mode [ 182.260772][T11174] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.263432][T11174] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.265971][T11174] bridge_slave_1: entered allmulticast mode [ 182.268723][T11174] bridge_slave_1: entered promiscuous mode [ 182.296150][T11174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.310551][ T71] team0: Port device netdevsim0 removed [ 182.313412][ T71] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.318962][T11174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.321758][ T7891] usb 10-1: usb_control_msg returned -32 [ 182.323225][ T7891] usbtmc 10-1:16.0: can't read capabilities [ 182.352050][T11174] team0: Port device team_slave_0 added [ 182.356245][T11174] team0: Port device team_slave_1 added [ 182.384403][T11174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.386821][T11174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.402407][T11174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.407267][T11174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.409048][T11174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.415980][T11174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.452856][T11174] hsr_slave_0: entered promiscuous mode [ 182.454876][T11174] hsr_slave_1: entered promiscuous mode [ 182.456648][T11174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.458602][T11174] Cannot create hsr debugfs directory [ 182.488171][ T66] Bluetooth: hci4: command 0xfc11 tx timeout [ 182.488965][ T5937] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 182.723832][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.727602][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.731167][ T71] bond0 (unregistering): Released all slaves [ 182.813799][T11174] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 182.824116][T11174] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 182.829648][T11174] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 182.833607][T11174] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 182.867125][T11174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.875549][T11174] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.880320][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.882178][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.887484][T10868] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.889364][T10868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.907774][T11174] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.910372][T11174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.999443][T11174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.062413][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 183.062423][ T39] audit: type=1400 audit(1731398797.841:1256): avc: denied { shutdown } for pid=11212 comm="syz.6.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 183.101169][T11174] veth0_vlan: entered promiscuous mode [ 183.105587][T11174] veth1_vlan: entered promiscuous mode [ 183.135356][ T71] hsr_slave_0: left promiscuous mode [ 183.137634][ T71] hsr_slave_1: left promiscuous mode [ 183.139777][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.141790][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.144157][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.146134][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.148811][T11218] 9pnet: p9_errstr2errno: server reported unknown error elf_freezing [ 183.175119][ T71] veth1_macvtap: left promiscuous mode [ 183.177203][ T71] veth0_macvtap: left promiscuous mode [ 183.178824][ T71] veth1_vlan: left promiscuous mode [ 183.180218][ T71] veth0_vlan: left promiscuous mode [ 183.889174][ T71] team0 (unregistering): Port device team_slave_1 removed [ 183.970238][ T71] team0 (unregistering): Port device team_slave_0 removed [ 184.276043][ T5937] Bluetooth: hci1: command tx timeout [ 184.563524][T11174] veth0_macvtap: entered promiscuous mode [ 184.571579][T11174] veth1_macvtap: entered promiscuous mode [ 184.578400][T11174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.581208][T11174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.583739][T11174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.586379][T11174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.589016][T11174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.591636][T11174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.596613][T11174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.601558][T11174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.603600][ T39] audit: type=1400 audit(1731398799.282:1257): avc: denied { read } for pid=11223 comm="syz.6.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 184.604321][T11174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.609821][ T39] audit: type=1400 audit(1731398799.282:1258): avc: denied { ioctl } for pid=11223 comm="syz.6.1487" path="socket:[50491]" dev="sockfs" ino=50491 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 184.611601][T11174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.611611][T11174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.611619][T11174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.611626][T11174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.612248][T11174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.634196][T11174] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.636464][T11174] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.639028][T11174] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.641375][T11174] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.654467][T11227] futex_wake_op: syz.6.1488 tries to shift op by 32; fix this program [ 184.656916][T11227] futex_wake_op: syz.6.1488 tries to shift op by 32; fix this program [ 184.659152][T11227] futex_wake_op: syz.6.1488 tries to shift op by 32; fix this program [ 184.661297][T11227] futex_wake_op: syz.6.1488 tries to shift op by 32; fix this program [ 184.663571][T11226] fuse: Bad value for 'rootmode' [ 184.664950][T11226] fuse: Bad value for 'rootmode' [ 184.666268][T11226] fuse: Bad value for 'rootmode' [ 184.667586][T11226] fuse: Bad value for 'rootmode' [ 184.668940][T11227] futex_wake_op: syz.6.1488 tries to shift op by 32; fix this program [ 184.671010][T11227] futex_wake_op: syz.6.1488 tries to shift op by 32; fix this program [ 184.673112][T11227] futex_wake_op: syz.6.1488 tries to shift op by 32; fix this program [ 184.675435][T11226] fuse: Bad value for 'rootmode' [ 184.676804][T11226] fuse: Bad value for 'rootmode' [ 184.678162][T11226] fuse: Bad value for 'rootmode' [ 184.679616][T11227] futex_wake_op: syz.6.1488 tries to shift op by 32; fix this program [ 184.681704][T11227] futex_wake_op: syz.6.1488 tries to shift op by 32; fix this program [ 184.683669][T11227] futex_wake_op: syz.6.1488 tries to shift op by 32; fix this program [ 184.685919][T11226] fuse: Bad value for 'rootmode' [ 184.687427][T11226] fuse: Bad value for 'rootmode' [ 184.702413][ T9141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.704439][ T9141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.712513][ T9141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.714550][ T9141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.821298][ T6072] usb 10-1: USB disconnect, device number 14 [ 184.823918][ T39] audit: type=1400 audit(1731398799.497:1259): avc: denied { getopt } for pid=11240 comm="syz.8.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 184.834475][T11236] CIFS mount error: No usable UNC path provided in device string! [ 184.834475][T11236] [ 184.836969][T11236] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 184.899470][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1494'. [ 184.921535][ T39] audit: type=1400 audit(1731398799.581:1260): avc: denied { create } for pid=11261 comm="syz.5.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 184.930704][ T39] audit: type=1400 audit(1731398799.590:1261): avc: denied { map } for pid=11261 comm="syz.5.1496" path="socket:[49127]" dev="sockfs" ino=49127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 184.937053][ T39] audit: type=1400 audit(1731398799.590:1262): avc: denied { read } for pid=11261 comm="syz.5.1496" path="socket:[49127]" dev="sockfs" ino=49127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 185.009699][ T71] IPVS: stop unused estimator thread 0... [ 185.055668][T11280] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 185.058428][ T39] audit: type=1400 audit(1731398799.712:1263): avc: denied { mount } for pid=11279 comm="syz.8.1498" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 185.102462][ T71] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.421906][T11356] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1506'. [ 186.451304][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1506'. [ 186.451469][ T66] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.458595][ T66] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.461151][ T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 186.463941][ T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 186.466206][ T66] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 186.468183][ T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 186.490887][ T71] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.497129][ T5937] Bluetooth: hci1: command tx timeout [ 186.554831][T11358] chnl_net:caif_netlink_parms(): no params data found [ 186.579930][ T71] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.606057][T11358] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.607963][T11358] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.609871][T11358] bridge_slave_0: entered allmulticast mode [ 186.611893][T11358] bridge_slave_0: entered promiscuous mode [ 186.614446][T11358] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.616372][T11358] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.618270][T11358] bridge_slave_1: entered allmulticast mode [ 186.620240][T11358] bridge_slave_1: entered promiscuous mode [ 186.646190][T11358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.649835][T11358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.668598][T11374] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1509'. [ 186.674898][T11358] team0: Port device team_slave_0 added [ 186.678972][ T56] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 186.679908][T11358] team0: Port device team_slave_1 added [ 186.713102][ T71] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.729744][T11358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.731576][T11358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.732853][T11379] xt_hashlimit: size too large, truncated to 1048576 [ 186.739504][T11358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.752187][T11358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.754728][T11358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.763565][T11358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.795185][T11358] hsr_slave_0: entered promiscuous mode [ 186.797336][T11358] hsr_slave_1: entered promiscuous mode [ 186.799516][T11358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.801641][T11358] Cannot create hsr debugfs directory [ 186.835448][ T71] bridge_slave_1: left allmulticast mode [ 186.836946][ T71] bridge_slave_1: left promiscuous mode [ 186.838463][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.841328][ T71] bridge_slave_0: left allmulticast mode [ 186.842854][ T71] bridge_slave_0: left promiscuous mode [ 186.844403][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.850052][ T56] usb 10-1: Using ep0 maxpacket: 8 [ 186.852729][ T56] usb 10-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 186.855025][ T56] usb 10-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 186.859093][ T56] usb 10-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 186.861668][ T56] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.863774][ T56] usb 10-1: Product: syz [ 186.864894][ T56] usb 10-1: Manufacturer: syz [ 186.866133][ T56] usb 10-1: SerialNumber: syz [ 186.869751][ T56] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 186.879286][ T56] dvb-usb: bulk message failed: -22 (3/0) [ 186.918253][ T56] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 186.924842][ T56] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 186.928207][ T56] usb 10-1: media controller created [ 186.937737][ T56] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.954614][ T56] dvb-usb: bulk message failed: -22 (6/0) [ 186.956316][ T56] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 186.967162][ T56] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input23 [ 186.973142][ T56] dvb-usb: schedule remote query interval to 150 msecs. [ 186.975001][ T56] dvb-usb: bulk message failed: -22 (3/0) [ 186.988863][ T56] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 187.122692][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.126529][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.130524][ T71] bond0 (unregistering): Released all slaves [ 187.150670][ T7891] dvb-usb: bulk message failed: -22 (1/0) [ 187.152322][ T7891] dvb-usb: error while querying for an remote control event. [ 187.177334][T11388] random: crng reseeded on system resumption [ 187.182483][T11352] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 187.188509][ T1016] usb 10-1: USB disconnect, device number 15 [ 187.216228][ T1016] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 187.537485][ T71] hsr_slave_0: left promiscuous mode [ 187.539267][ T71] hsr_slave_1: left promiscuous mode [ 187.541073][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.543006][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.547139][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.549106][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.569830][ T71] veth1_macvtap: left promiscuous mode [ 187.571301][ T71] veth0_macvtap: left promiscuous mode [ 187.572818][ T71] veth1_vlan: left promiscuous mode [ 187.574217][ T71] veth0_vlan: left promiscuous mode [ 187.902694][ T39] audit: type=1400 audit(1731398802.378:1264): avc: denied { mounton } for pid=11398 comm="syz.8.1516" path="/11/file0/bus" dev="hugetlbfs" ino=52317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 187.984569][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1515'. [ 187.986917][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1515'. [ 188.333320][ T71] team0 (unregistering): Port device team_slave_1 removed [ 188.417375][ T71] team0 (unregistering): Port device team_slave_0 removed [ 188.637173][ T5937] Bluetooth: hci3: command tx timeout [ 188.720744][ T5937] Bluetooth: hci1: command tx timeout [ 189.040738][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1514'. [ 189.043356][T11392] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1514'. [ 189.051465][T11402] netlink: 'syz.8.1517': attribute type 11 has an invalid length. [ 189.053620][T11402] netlink: 140 bytes leftover after parsing attributes in process `syz.8.1517'. [ 189.056059][T11403] net veth1_virt_wifi : renamed from virt_wifi0 [ 189.107604][T11358] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 189.110922][T11358] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 189.113901][T11358] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 189.125485][T11358] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 189.176275][T11358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.184416][T11358] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.188648][T11416] geneve2: entered promiscuous mode [ 189.190110][T11416] geneve2: entered allmulticast mode [ 189.211850][T10869] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.213780][T10869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.231038][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.232944][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.244671][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.247108][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.249253][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.251201][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.253218][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.255368][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.257359][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.259310][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x4 [ 189.261266][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.263207][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.265191][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.268677][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.270673][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.272612][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.274571][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.276794][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.278802][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.280739][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.282691][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.284620][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.286591][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.288948][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.290923][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.292841][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.294781][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.296704][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.299204][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.302871][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.304835][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.306780][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.309058][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.311218][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.313516][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.315450][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.317405][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.320245][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.322224][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.324151][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.326099][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.328044][ T56] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 189.334215][ T56] hid-generic 0000:0000:0000.0011: hidraw1: HID v0.00 Device [syz0] on syz0 [ 189.342663][T11358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.387319][T11358] veth0_vlan: entered promiscuous mode [ 189.391212][T11358] veth1_vlan: entered promiscuous mode [ 189.410762][T11358] veth0_macvtap: entered promiscuous mode [ 189.419111][T11358] veth1_macvtap: entered promiscuous mode [ 189.440285][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.443200][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.445857][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.448808][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.451604][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.454495][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.459263][T11358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.463429][T11440] exFAT-fs (nullb0): invalid boot record signature [ 189.464516][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.465222][T11440] exFAT-fs (nullb0): failed to read boot sector [ 189.467900][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.467909][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.469949][T11440] exFAT-fs (nullb0): failed to recognize exfat type [ 189.472916][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.480867][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.483780][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.487021][T11358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.497038][T11358] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.499293][T11358] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.502157][T11358] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.504419][T11358] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.544793][T10869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.546974][T10869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.559602][T10870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.561650][T10870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.612354][T11448] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1529'. [ 189.676849][ T39] audit: type=1400 audit(1731398804.033:1265): avc: denied { read write } for pid=11445 comm="syz.6.1529" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 189.682883][ T39] audit: type=1400 audit(1731398804.033:1266): avc: denied { open } for pid=11445 comm="syz.6.1529" path="/147/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 189.688842][ T39] audit: type=1400 audit(1731398804.043:1267): avc: denied { map } for pid=11454 comm="syz.8.1532" path="socket:[50881]" dev="sockfs" ino=50881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 189.785177][ T39] audit: type=1326 audit(1731398804.136:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11460 comm="syz.6.1534" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5d177e719 code=0x0 [ 189.865403][ T39] audit: type=1400 audit(1731398804.211:1269): avc: denied { write } for pid=11466 comm="syz.8.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 189.910127][T11470] netlink: 'syz.6.1534': attribute type 21 has an invalid length. [ 189.949425][ T39] audit: type=1400 audit(1731398804.286:1270): avc: denied { mounton } for pid=11474 comm="syz.8.1539" path="/27/file0" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.952450][T11475] overlayfs: statfs failed on './file0' [ 190.053871][T11480] netlink: 'syz.5.1542': attribute type 32 has an invalid length. [ 190.055950][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1542'. [ 190.059322][T11480] (unnamed net_device) (uninitialized): option coupled_control: invalid value (98) [ 190.111113][T11484] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1541'. [ 190.113483][T11484] netlink: 'syz.8.1541': attribute type 7 has an invalid length. [ 190.115656][T11484] netlink: 'syz.8.1541': attribute type 8 has an invalid length. [ 190.118394][T11484] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1541'. [ 190.345142][T11488] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1543'. [ 190.348468][T11488] (unnamed net_device) (uninitialized): down delay (536871808) is not a multiple of miimon (129), value rounded to 536871684 ms [ 190.810548][ T39] audit: type=1400 audit(1731398805.090:1271): avc: denied { relabelfrom } for pid=11503 comm="syz.6.1548" name="TIPC" dev="sockfs" ino=52897 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 190.810759][T11504] SELinux: Context system_u:object_r:systemd_unit_file_t:s0 is not valid (left unmapped). [ 190.820855][ T39] audit: type=1400 audit(1731398805.100:1272): avc: denied { relabelto } for pid=11503 comm="syz.6.1548" name="TIPC" dev="sockfs" ino=52897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tipc_socket permissive=1 trawcon="system_u:object_r:systemd_unit_file_t:s0" [ 190.907432][ T39] audit: type=1326 audit(1731398805.184:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11506 comm="syz.6.1549" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5d177e719 code=0x0 [ 190.919751][ T39] audit: type=1400 audit(1731398805.193:1274): avc: denied { watch } for pid=11509 comm="syz.5.1550" path="/254/file0" dev="tmpfs" ino=1407 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 190.944364][ T5937] Bluetooth: hci1: command tx timeout [ 191.116072][T11527] syz.5.1554 (11527): /proc/11526/oom_adj is deprecated, please use /proc/11526/oom_score_adj instead. [ 191.425848][T11536] IPv6: NLM_F_CREATE should be specified when creating new route [ 191.744157][T11546] netlink: 'syz.8.1559': attribute type 10 has an invalid length. [ 191.917959][T11549] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 192.029219][T10870] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.151325][T11559] hsr_slave_1 (unregistering): left promiscuous mode [ 193.515971][T11574] ufs: You didn't specify the type of your ufs filesystem [ 193.515971][T11574] [ 193.515971][T11574] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 193.515971][T11574] [ 193.515971][T11574] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 193.526977][T11574] ufs: ufstype=old is supported read-only [ 193.527397][ T66] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.529270][T11574] syz.5.1568: attempt to access beyond end of device [ 193.529270][T11574] loop5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 193.537558][ T66] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.549701][ T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.562017][ T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.565524][ T66] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 193.567572][ T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.654331][T11578] chnl_net:caif_netlink_parms(): no params data found [ 193.706869][T11578] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.708754][T11578] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.710615][T11578] bridge_slave_0: entered allmulticast mode [ 193.712661][T11578] bridge_slave_0: entered promiscuous mode [ 193.716463][T11578] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.718380][T11578] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.720247][T11578] bridge_slave_1: entered allmulticast mode [ 193.722220][T11578] bridge_slave_1: entered promiscuous mode [ 193.744474][T11578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.748036][T11578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.772526][T11578] team0: Port device team_slave_0 added [ 193.777165][T11578] team0: Port device team_slave_1 added [ 193.803685][T11578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.805767][T11578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.812565][T11578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.816156][T11578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.818010][T11578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.825425][T11578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.851685][T11578] hsr_slave_0: entered promiscuous mode [ 193.853815][T11578] hsr_slave_1: entered promiscuous mode [ 193.855686][T11578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.857630][T11578] Cannot create hsr debugfs directory [ 193.999564][T11626] bond0: (slave syz_tun): Releasing backup interface [ 194.009380][T11626] bond0: (slave bridge0): Releasing backup interface [ 194.012396][T11626] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.017561][T11626] bridge_slave_0: left allmulticast mode [ 194.019052][T11626] bridge_slave_0: left promiscuous mode [ 194.020594][T11626] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.024122][T11626] bridge_slave_1: left allmulticast mode [ 194.025896][T11626] bridge_slave_1: left promiscuous mode [ 194.027865][T11626] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.031264][T11626] bond0: (slave bond_slave_0): Releasing backup interface [ 194.035975][T11626] bond0: (slave bond_slave_1): Releasing backup interface [ 194.053017][T11626] team0: Port device team_slave_0 removed [ 194.061079][T11626] team0: Port device team_slave_1 removed [ 194.063005][T11626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.065052][T11626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.068498][T11626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.070576][T11626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.076186][T11626] bond0: (slave netdevsim0): Releasing backup interface [ 194.096066][T10870] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.128523][T11628] team0: Mode changed to "loadbalance" [ 194.176352][T11628] vlan0: entered promiscuous mode [ 194.182720][T11628] team0: Port device vlan0 added [ 194.197423][T10870] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.215869][T11626] team0: Port device vlan0 removed [ 194.262232][T10870] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.308128][T11634] __nla_validate_parse: 3 callbacks suppressed [ 194.308139][T11634] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1584'. [ 194.388469][T11625] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 194.391897][T10870] bridge_slave_1: left allmulticast mode [ 194.393405][T10870] bridge_slave_1: left promiscuous mode [ 194.397972][T10870] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.401498][T10870] bridge_slave_0: left allmulticast mode [ 194.403009][T10870] bridge_slave_0: left promiscuous mode [ 194.405567][T10870] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.464770][ T9579] IPVS: starting estimator thread 0... [ 194.558144][T11650] IPVS: using max 37 ests per chain, 88800 per kthread [ 194.581694][T10869] Bluetooth: (null): Too short H5 packet [ 194.583360][T10869] Bluetooth: (null): Invalid header checksum [ 194.585016][T10869] Bluetooth: (null): Invalid header checksum [ 194.684613][T10870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.691015][T10870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.695565][T10870] bond0 (unregistering): Released all slaves [ 194.698481][T10873] Bluetooth: (null): Invalid header checksum [ 194.708723][T11659] VFS: unable to find oldfs superblock on device nullb0 [ 194.878789][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 194.888690][T11676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=11676 comm=syz.6.1594 [ 194.941742][T11680] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 194.992090][T10870] hsr_slave_0: left promiscuous mode [ 194.994684][T10870] hsr_slave_1: left promiscuous mode [ 194.998124][T10870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.000869][T10870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.003987][T10870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.006786][T10870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.041433][T10870] veth1_macvtap: left promiscuous mode [ 195.042880][T10870] veth0_macvtap: left promiscuous mode [ 195.044355][T10870] veth1_vlan: left promiscuous mode [ 195.045773][T10870] veth0_vlan: left promiscuous mode [ 195.138414][T11701] xt_hashlimit: size too large, truncated to 1048576 [ 195.159761][T11702] Bluetooth: MGMT ver 1.23 [ 195.338192][ T9974] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 195.509363][ T9974] usb 11-1: Using ep0 maxpacket: 8 [ 195.516517][ T9974] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 195.519670][ T9974] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 195.522420][ T9974] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 195.525059][ T9974] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.528597][ T9974] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 195.531037][ T9974] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.735556][ T5937] Bluetooth: hci3: command tx timeout [ 195.760859][ T9974] usb 11-1: GET_CAPABILITIES returned 0 [ 195.762361][ T9974] usbtmc 11-1:16.0: can't read capabilities [ 195.777355][T11717] xt_l2tp: v2 sid > 0xffff: 150994944 [ 195.865431][T10870] team0 (unregistering): Port device team_slave_1 removed [ 195.951181][T10870] team0 (unregistering): Port device team_slave_0 removed [ 196.369855][ T35] usb 11-1: USB disconnect, device number 9 [ 196.570646][T11695] mkiss: ax0: crc mode is auto. [ 196.637952][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 196.637962][ T39] audit: type=1400 audit(1731398810.544:1283): avc: denied { setopt } for pid=11728 comm="syz.6.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 196.699691][T11740] binder: 11737:11740 ioctl c0306201 0 returned -14 [ 196.720232][T11578] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 196.728181][T11578] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 196.735844][T11578] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 196.744310][T11578] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 196.772697][T11578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.794338][T11578] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.798782][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.800722][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.805873][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.807707][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.820200][ T39] audit: type=1400 audit(1731398810.712:1284): avc: denied { append } for pid=11747 comm="syz.5.1613" name="hidraw0" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 196.831513][T11748] netlink: 'syz.5.1613': attribute type 10 has an invalid length. [ 196.838589][T11748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.842080][T11748] bond0: (slave nlmon0): The slave device specified does not support setting the MAC address [ 196.845389][T11748] bond0: (slave nlmon0): Error -95 calling set_mac_address usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 196.882982][T11578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.901933][T11578] veth0_vlan: entered promiscuous mode [ 196.905939][T11578] veth1_vlan: entered promiscuous mode [ 196.919569][T11578] veth0_macvtap: entered promiscuous mode [ 196.926479][T11578] veth1_macvtap: entered promiscuous mode [ 196.933174][T11578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.935901][T11578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.938409][T11578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.941115][T11578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.947398][T11578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.951606][T11578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.954743][T11768] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 196.954931][T11578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.960924][T11578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.963675][T11578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.966893][T11578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.968119][ T39] audit: type=1400 audit(1731398810.853:1285): avc: denied { write } for pid=11758 comm="syz.5.1615" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 196.985946][T11578] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.987059][T11769] block nbd5: shutting down sockets [ 196.988244][T11578] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.991960][T11578] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.994227][T11578] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.025223][T11772] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1619'. [ 197.039359][T11772] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 197.621958][T11746] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 197.625013][T11746] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 197.626727][T11746] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 197.629521][T11746] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 197.631150][ T39] audit: type=1400 audit(1731398811.470:1286): avc: denied { map } for pid=11780 comm="syz.6.1622" path="/dev/vbi4" dev="devtmpfs" ino=1003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 197.637331][ T39] audit: type=1400 audit(1731398811.470:1287): avc: denied { execute } for pid=11780 comm="syz.6.1622" path="/dev/vbi4" dev="devtmpfs" ino=1003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 197.644066][T11746] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 197.645719][T11746] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 197.651794][T11746] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 197.654168][T11749] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 197.671308][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.673366][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.689039][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.692310][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.982581][T11819] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1632'. [ 198.985437][T11819] netlink: 'syz.8.1632': attribute type 7 has an invalid length. [ 198.987408][T11819] netlink: 'syz.8.1632': attribute type 8 has an invalid length. [ 198.989449][T11819] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1632'. [ 198.993465][T11819] erspan0: entered promiscuous mode [ 198.995680][T11819] batadv_slave_1: entered promiscuous mode [ 198.997753][T11819] erspan0: left promiscuous mode [ 198.999349][T11819] batadv_slave_1: left promiscuous mode [ 199.069216][ T66] Bluetooth: hci2: command 0x0406 tx timeout [ 199.296115][T11835] block device autoloading is deprecated and will be removed. [ 199.478217][ T39] audit: type=1400 audit(1731398813.200:1288): avc: denied { mount } for pid=11837 comm="syz.8.1639" name="/" dev="configfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 199.482014][T11838] IPv6: sit1: Disabled Multicast RS [ 199.483625][ T39] audit: type=1400 audit(1731398813.200:1289): avc: denied { read } for pid=11837 comm="syz.8.1639" name="/" dev="configfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 199.485220][T11838] sit1: entered allmulticast mode [ 199.490559][ T39] audit: type=1400 audit(1731398813.200:1290): avc: denied { open } for pid=11837 comm="syz.8.1639" path="/56/file0" dev="configfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 199.603615][ T39] audit: type=1400 audit(1731398813.313:1291): avc: denied { unmount } for pid=11174 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 199.616098][ T39] audit: type=1400 audit(1731398813.331:1292): avc: denied { write } for pid=11839 comm="syz.8.1640" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 199.838966][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 199.849635][ T66] Bluetooth: hci3: command 0x040f tx timeout [ 200.568088][T11847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=11847 comm=syz.8.1643 [ 200.595467][ T66] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 200.599800][ T66] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 200.623536][T11854] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1645'. [ 201.002027][T11868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=784 sclass=netlink_route_socket pid=11868 comm=syz.8.1652 [ 201.025289][T11871] sp0: Synchronizing with TNC [ 201.028610][T11871] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1653'. [ 201.083140][T11886] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 2304 [ 201.171138][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1657'. [ 201.173514][T11895] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1657'. [ 201.198411][T11897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=11897 comm=syz.8.1658 [ 201.205846][T11897] binder: 11896:11897 ioctl 4c81 b returned -22 [ 201.244688][T11906] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1661'. [ 201.265392][T11906] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 201.267751][T11904] tipc: Started in network mode [ 201.269172][T11904] tipc: Node identity 7f000001, cluster identity 4711 [ 201.272662][T11904] tipc: Enabled bearer , priority 10 [ 201.330727][T11911] kvm: pic: level sensitive irq not supported [ 201.330936][T11911] kvm: pic: non byte read [ 201.440389][T11932] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1668'. [ 201.531021][T10873] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.611001][T10873] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.715552][T10873] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.767041][T10873] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.851306][T10873] bridge_slave_1: left allmulticast mode [ 201.852821][T10873] bridge_slave_1: left promiscuous mode [ 201.854345][T10873] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.857384][T10873] bridge_slave_0: left allmulticast mode [ 201.858952][T10873] bridge_slave_0: left promiscuous mode [ 201.860594][T10873] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.062599][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 202.163673][T10873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.168863][T10873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.172615][T10873] bond0 (unregistering): Released all slaves [ 202.340639][ T9579] tipc: Node number set to 2130706433 [ 202.448015][T10873] hsr_slave_0: left promiscuous mode [ 202.449820][T10873] hsr_slave_1: left promiscuous mode [ 202.451612][T10873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.453577][T10873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.455753][T10873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.457714][T10873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.478116][T10873] veth1_macvtap: left promiscuous mode [ 202.479771][T10873] veth0_macvtap: left promiscuous mode [ 202.481243][T10873] veth1_vlan: left promiscuous mode [ 202.482629][T10873] veth0_vlan: left promiscuous mode [ 203.091008][ T1411] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.093333][ T1411] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.170509][ T5937] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.190303][ T5937] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.204470][ T5937] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.215675][ T5937] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.219493][ T5937] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 203.221541][ T5937] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.274006][T10873] team0 (unregistering): Port device team_slave_1 removed [ 203.327086][T11951] netlink: 'syz.5.1672': attribute type 4 has an invalid length. [ 203.329152][T11951] netlink: 'syz.5.1672': attribute type 4 has an invalid length. [ 203.331150][T11951] netlink: 126012 bytes leftover after parsing attributes in process `syz.5.1672'. [ 203.348140][ T9579] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 203.370209][T10873] team0 (unregistering): Port device team_slave_0 removed [ 203.505845][ T9579] usb 11-1: Using ep0 maxpacket: 16 [ 203.508384][ T9579] usb 11-1: config 0 has an invalid interface number: 5 but max is 0 [ 203.510547][ T9579] usb 11-1: config 0 has no interface number 0 [ 203.512140][ T9579] usb 11-1: config 0 interface 5 altsetting 183 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.514979][ T9579] usb 11-1: config 0 interface 5 altsetting 183 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.518632][ T9579] usb 11-1: config 0 interface 5 has no altsetting 0 [ 203.520356][ T9579] usb 11-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 203.522580][ T9579] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.529497][ T9579] usb 11-1: config 0 descriptor?? [ 203.896110][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 203.896120][ T39] audit: type=1400 audit(1731398817.335:1298): avc: denied { connect } for pid=11954 comm="syz.8.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 203.921216][ T39] audit: type=1400 audit(1731398817.354:1299): avc: denied { load_policy } for pid=11954 comm="syz.8.1675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 203.921599][T11956] SELinux: policydb version -376884833 does not match my version range 15-33 [ 203.939696][T11956] SELinux: failed to load policy [ 203.945618][T11956] SELinux: ebitmap: map size 4294967040 does not match my size 64 (high bit was 255) [ 203.948824][T11956] SELinux: failed to load policy [ 203.964694][ T9579] appleir 0003:05AC:8241.0012: unknown main item tag 0x0 [ 203.966711][ T9579] appleir 0003:05AC:8241.0012: unknown main item tag 0x0 [ 203.968550][ T9579] appleir 0003:05AC:8241.0012: unknown main item tag 0x0 [ 203.970495][ T9579] appleir 0003:05AC:8241.0012: unknown main item tag 0x0 [ 203.972252][ T9579] appleir 0003:05AC:8241.0012: unknown main item tag 0x0 [ 203.974514][ T9579] appleir 0003:05AC:8241.0012: No inputs registered, leaving [ 203.977458][ T9579] appleir 0003:05AC:8241.0012: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.6-1/input5 [ 204.069047][T11948] chnl_net:caif_netlink_parms(): no params data found [ 204.106944][T11948] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.108868][T11948] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.110668][T11948] bridge_slave_0: entered allmulticast mode [ 204.112578][T11948] bridge_slave_0: entered promiscuous mode [ 204.115455][T11948] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.117373][T11948] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.119640][T11948] bridge_slave_1: entered allmulticast mode [ 204.121612][T11948] bridge_slave_1: entered promiscuous mode [ 204.144367][T11948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.148028][T11948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.175526][T11948] team0: Port device team_slave_0 added [ 204.178261][T11948] team0: Port device team_slave_1 added [ 204.215072][T11948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.216932][T11948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.223642][T11948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.227171][T11948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.229069][T11948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.236186][T11948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.266395][T11948] hsr_slave_0: entered promiscuous mode [ 204.268309][T11948] hsr_slave_1: entered promiscuous mode [ 204.275564][T11948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.277652][T11948] Cannot create hsr debugfs directory [ 204.286265][ T5937] Bluetooth: hci1: command 0x0c1a tx timeout [ 204.303991][ T9579] usb 11-1: USB disconnect, device number 10 [ 204.367093][T11990] netlink: 'syz.5.1682': attribute type 3 has an invalid length. [ 204.369206][T11990] netlink: 'syz.5.1682': attribute type 1 has an invalid length. [ 204.371281][T11990] netlink: 130160 bytes leftover after parsing attributes in process `syz.5.1682'. [ 204.583633][T12009] vlan0: entered promiscuous mode [ 204.585037][T12009] vlan0: entered allmulticast mode [ 204.588287][T12009] hsr_slave_1: entered allmulticast mode [ 204.619499][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1684'. [ 204.712678][T11948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 204.715704][T11948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 204.718555][T11948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 204.721363][T11948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 204.738268][T11948] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.740058][T11948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.741905][T11948] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.743650][T11948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.762877][T11948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.770037][T10869] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.773104][T10869] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.786320][T11948] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.792488][T10869] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.794369][T10869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.802574][T10873] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.804532][T10873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.881685][T11948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.899666][T11948] veth0_vlan: entered promiscuous mode [ 204.903753][T11948] veth1_vlan: entered promiscuous mode [ 204.914680][T11948] veth0_macvtap: entered promiscuous mode [ 204.916801][ T39] audit: type=1326 audit(1731398818.280:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12017 comm="syz.6.1685" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5d177e719 code=0x0 [ 204.924963][T11948] veth1_macvtap: entered promiscuous mode [ 204.931311][T11948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.934005][T11948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.936455][T11948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.940825][T11948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.944134][T11948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.949809][T11948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.952420][T11948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.954867][T11948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.957441][T11948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.960591][T11948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.964126][T11948] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.966282][T11948] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.968421][T11948] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.970692][T11948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.997413][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.999511][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.012527][T10870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.014597][T10870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.197822][T11979] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 205.306028][ T5937] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 205.370623][T12025] befs: (nbd8): No write support. Marking filesystem read-only [ 205.373660][T12025] syz.8.1686: attempt to access beyond end of device [ 205.373660][T12025] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 205.376703][T12025] befs: (nbd8): unable to read superblock [ 205.791097][T12037] fuse: Bad value for 'fd' [ 206.007446][ T9579] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 206.178509][ T9579] usb 10-1: Using ep0 maxpacket: 8 [ 206.181854][ T9579] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 206.183948][ T9579] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 206.186050][ T9579] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 206.188295][ T9579] usb 10-1: config 250 has no interface number 0 [ 206.190353][ T9579] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 206.193668][ T9579] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 206.196332][ T9579] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 206.199093][ T9579] usb 10-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 206.202637][ T9579] usb 10-1: config 250 interface 228 has no altsetting 0 [ 206.205701][ T9579] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 206.208065][ T9579] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 206.210144][ T9579] usb 10-1: Product: syz [ 206.211789][ T9579] usb 10-1: SerialNumber: syz [ 206.214853][ T9579] hub 10-1:250.228: bad descriptor, ignoring hub [ 206.216466][ T9579] hub 10-1:250.228: probe with driver hub failed with error -5 [ 206.430084][ T9579] usblp 10-1:250.228: usblp0: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 206.494637][T10873] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.551801][ T66] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 206.556764][ T66] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 206.559291][ T66] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 206.562153][ T66] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 206.564667][ T66] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 206.567537][ T66] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.585722][T10873] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.651853][T10873] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.662121][T12043] chnl_net:caif_netlink_parms(): no params data found [ 206.708814][T12043] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.710669][T12043] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.712506][T12043] bridge_slave_0: entered allmulticast mode [ 206.714718][T12043] bridge_slave_0: entered promiscuous mode [ 206.729003][T10873] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.732768][T12043] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.735073][T12043] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.736909][T12043] bridge_slave_1: entered allmulticast mode [ 206.739230][T12043] bridge_slave_1: entered promiscuous mode [ 206.760398][T12043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.763999][T12043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.788263][T12043] team0: Port device team_slave_0 added [ 206.792092][T12043] team0: Port device team_slave_1 added [ 206.811653][T12043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.813445][T12043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.820680][T12043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.824072][T12043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.825850][T12043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.832547][T12043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.887896][T12043] hsr_slave_0: entered promiscuous mode [ 206.890048][T12043] hsr_slave_1: entered promiscuous mode [ 206.893220][T12043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.895592][T12043] Cannot create hsr debugfs directory [ 207.048779][ T9579] usb 10-1: USB disconnect, device number 16 [ 207.051670][ T9579] usblp0: removed [ 207.749961][ T4380] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 207.942506][ T4380] usb 10-1: Using ep0 maxpacket: 8 [ 207.947335][ T4380] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 207.950182][ T4380] usb 10-1: config 0 has no interface number 0 [ 207.952336][ T4380] usb 10-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 207.956816][ T4380] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 207.960671][ T4380] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 207.964225][ T4380] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.968504][ T4380] usb 10-1: config 0 descriptor?? [ 207.974542][ T4380] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 208.203399][ T9] usb 10-1: USB disconnect, device number 17 [ 208.206283][ T9] iowarrior 10-1:0.1: I/O-Warror #0 now disconnected [ 208.274445][T10873] bridge_slave_1: left allmulticast mode [ 208.275888][T10873] bridge_slave_1: left promiscuous mode [ 208.277505][T10873] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.280304][T10873] bridge_slave_0: left allmulticast mode [ 208.281763][T10873] bridge_slave_0: left promiscuous mode [ 208.283195][T10873] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.589941][T10873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.594106][T10873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.598028][T10873] bond0 (unregistering): Released all slaves [ 208.602368][T10873] bond1 (unregistering): Released all slaves [ 208.606640][T10873] bond2 (unregistering): Released all slaves [ 208.657256][T12043] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 208.662775][T12043] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 208.665683][T12043] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 208.668698][T12043] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 208.724998][T12043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.731940][T12043] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.735697][T10886] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.737497][T10886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.741446][T10870] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.743239][T10870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.746530][ T5937] Bluetooth: hci1: command tx timeout [ 208.852466][T12043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.906908][T10873] hsr_slave_0: left promiscuous mode [ 208.908766][T10873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.910588][T10873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.912737][T10873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.914576][T10873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.939924][T10873] veth1_macvtap: left promiscuous mode [ 208.941403][T10873] veth0_macvtap: left promiscuous mode [ 208.942839][T10873] veth1_vlan: left promiscuous mode [ 208.944196][T10873] veth0_vlan: left promiscuous mode [ 209.394401][T12087] overlayfs: failed to resolve './file1': -2 [ 209.467706][ T66] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.478865][ T66] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.496782][ T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.505327][ T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.507455][ T66] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.511539][ T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.718533][T10873] team0 (unregistering): Port device team_slave_1 removed [ 209.805152][T10873] team0 (unregistering): Port device team_slave_0 removed [ 210.453983][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1702'. [ 210.509615][T12043] veth0_vlan: entered promiscuous mode [ 210.513226][T12105] netlink: 412 bytes leftover after parsing attributes in process `syz.6.1705'. [ 210.515006][T12043] veth1_vlan: entered promiscuous mode [ 210.523600][ T39] audit: type=1400 audit(1731398823.537:1301): avc: denied { override_creds } for pid=12106 comm="syz.5.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 210.560225][T12043] veth0_macvtap: entered promiscuous mode [ 210.564637][T12043] veth1_macvtap: entered promiscuous mode [ 210.571705][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.575583][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.578132][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.580761][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.586191][T12043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.588123][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1707'. [ 210.590467][T12110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1707'. [ 210.598631][T12092] chnl_net:caif_netlink_parms(): no params data found [ 210.606119][T12119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.618612][T12119] ipt_REJECT: ECHOREPLY no longer supported. [ 210.657026][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.659961][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.662488][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.665156][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.674312][T12043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.729615][T12043] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.731623][T12043] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.744507][T12043] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.746729][T12043] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.749694][T12092] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.751419][T12092] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.753095][T12092] bridge_slave_0: entered allmulticast mode [ 210.758004][T12092] bridge_slave_0: entered promiscuous mode [ 210.763592][T12092] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.765953][T12092] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.767810][T12092] bridge_slave_1: entered allmulticast mode [ 210.769798][T12092] bridge_slave_1: entered promiscuous mode [ 210.801612][T12092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.810882][T12092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.842149][T12092] team0: Port device team_slave_0 added [ 210.846749][T12092] team0: Port device team_slave_1 added [ 210.867399][T12092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.869176][T12092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.875826][T12092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.881656][T12092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.883813][T12092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.890221][T12092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.908945][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.911623][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.926280][T12092] hsr_slave_0: entered promiscuous mode [ 210.928190][T12092] hsr_slave_1: entered promiscuous mode [ 210.930418][T12092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.932373][T12092] Cannot create hsr debugfs directory [ 210.944743][T12130] netlink: 'syz.5.1711': attribute type 1 has an invalid length. [ 210.957484][ T5937] Bluetooth: hci1: command tx timeout [ 210.958040][T12129] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 210.961352][T12129] bond5: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 210.966364][T12129] bond5: (slave vxcan3): making interface the new active one [ 210.968849][T12129] bond5: (slave vxcan3): Enslaving as an active interface with an up link [ 210.979372][T10886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.981339][T10886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.005398][T12133] binder: Binderfs stats mode cannot be changed during a remount [ 211.007750][ T39] audit: type=1400 audit(1731398823.986:1302): avc: denied { remount } for pid=12132 comm="syz.5.1712" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 211.024911][T10873] IPVS: stop unused estimator thread 0... [ 211.148523][T12092] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.159816][T12143] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1713'. [ 211.172044][T12143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=12143 comm=syz.5.1713 [ 211.243624][T12092] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.325878][T12153] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 211.371922][T12092] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.397161][T12151] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 211.443718][ T39] audit: type=1400 audit(1731398824.397:1303): avc: denied { map } for pid=12168 comm="syz.5.1723" path="socket:[58989]" dev="sockfs" ino=58989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 211.466148][T12092] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.477280][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1726'. [ 211.479614][T12182] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1727'. [ 211.482781][T12180] erspan0: entered promiscuous mode [ 211.483219][T12180] macvtap1: entered promiscuous mode [ 211.486167][T12180] macvtap1: entered allmulticast mode [ 211.487598][T12180] erspan0: entered allmulticast mode [ 211.497680][T12180] erspan0: left allmulticast mode [ 211.499242][T12180] erspan0: left promiscuous mode [ 211.567593][T10873] bridge_slave_1: left allmulticast mode [ 211.569198][T10873] bridge_slave_1: left promiscuous mode [ 211.571097][T10873] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.574300][T10873] bridge_slave_0: left allmulticast mode [ 211.575883][T10873] bridge_slave_0: left promiscuous mode [ 211.577910][T10873] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.606758][ T39] audit: type=1400 audit(1731398824.547:1304): avc: denied { map } for pid=12192 comm="syz.9.1731" path="socket:[59494]" dev="sockfs" ino=59494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 211.612805][ T39] audit: type=1400 audit(1731398824.547:1305): avc: denied { read } for pid=12192 comm="syz.9.1731" path="socket:[59494]" dev="sockfs" ino=59494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 211.705572][ T4380] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 211.726996][ T5937] Bluetooth: hci3: command tx timeout [ 211.866528][T10873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.870431][T10873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.873998][T10873] bond0 (unregistering): Released all slaves [ 211.879142][ T4380] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 211.882114][ T4380] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 211.884928][ T4380] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 211.887513][ T4380] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 211.890743][ T4380] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 211.893028][ T4380] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.896090][ T4380] usb 10-1: config 0 descriptor?? [ 211.907640][T12092] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.913165][T12092] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.917382][T12092] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.920482][T12092] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.966205][T12092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.975541][T12092] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.979427][T10870] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.981280][T10870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.986711][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.988490][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.091698][T12092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.120990][T12206] binder: BINDER_SET_CONTEXT_MGR already set [ 212.125412][T12206] binder: 12204:12206 ioctl 4018620d 20000100 returned -16 [ 212.139687][T12092] veth0_vlan: entered promiscuous mode [ 212.145876][T12092] veth1_vlan: entered promiscuous mode [ 212.173236][T12092] veth0_macvtap: entered promiscuous mode [ 212.186094][T12092] veth1_macvtap: entered promiscuous mode [ 212.193177][T12092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.196182][T12092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.199127][T12092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.201861][T12092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.204373][T12092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.207779][T12092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.211342][T12092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.216005][T12092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.219001][T12092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.221666][T12092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.224411][T12092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.227615][T12092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.231248][T12092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.234660][T12092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.241489][T12092] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.243782][T12092] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.246543][T12092] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.249004][T12092] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.262053][T10873] hsr_slave_0: left promiscuous mode [ 212.267983][T10873] hsr_slave_1: left promiscuous mode [ 212.270097][T10873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.272267][T10873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.276735][T10873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.278725][T10873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.300859][T10873] veth1_macvtap: left promiscuous mode [ 212.302345][T10873] veth0_macvtap: left promiscuous mode [ 212.303838][T10873] veth1_vlan: left promiscuous mode [ 212.306742][T10873] veth0_vlan: left promiscuous mode [ 212.334880][ T4380] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 212.338856][ T4380] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 212.343211][ T4380] usb 10-1: USB disconnect, device number 18 [ 213.078962][T10873] team0 (unregistering): Port device team_slave_1 removed [ 213.167408][T10873] team0 (unregistering): Port device team_slave_0 removed [ 213.180859][ T5937] Bluetooth: hci1: command tx timeout [ 213.266555][T10886] wlan1: Trigger new scan to find an IBSS to join [ 213.830419][T12216] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.904600][T10870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.906665][T10870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.917043][T10886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.927967][T10886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.079634][ T39] audit: type=1800 audit(1731398826.867:1306): pid=12245 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.1746" name="/" dev="9p" ino=2 res=0 errno=0 [ 214.303425][ T9579] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 214.466910][ T9579] usb 11-1: config index 0 descriptor too short (expected 23569, got 27) [ 214.469584][ T9579] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.472702][ T9579] usb 11-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 214.475050][ T9579] usb 11-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 214.477089][ T9579] usb 11-1: Manufacturer: syz [ 214.479226][ T9579] usb 11-1: config 0 descriptor?? [ 214.528707][ T9579] rc_core: IR keymap rc-hauppauge not found [ 214.530309][ T9579] Registered IR keymap rc-empty [ 214.532269][ T9579] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0 [ 214.535359][ T9579] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input25 [ 214.538370][ T9] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 214.698575][ T9579] usb 11-1: USB disconnect, device number 11 [ 214.700987][ T9] usb 14-1: Using ep0 maxpacket: 32 [ 214.704012][ T9] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.706737][ T9] usb 14-1: config 0 has no interfaces? [ 214.708174][ T9] usb 14-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 214.711064][ T9] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.719345][ T9] usb 14-1: config 0 descriptor?? [ 214.815665][T10870] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.883156][T10870] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.939665][ T9] usb 14-1: string descriptor 0 read error: -71 [ 214.941803][ T9] usb 14-1: USB disconnect, device number 2 [ 215.010427][T10870] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.079381][T10870] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.404562][ T5937] Bluetooth: hci1: command tx timeout [ 216.517014][T10869] wlan1: Trigger new scan to find an IBSS to join [ 216.549582][T12262] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1752'. [ 216.553444][T12262] netlink: 'syz.9.1752': attribute type 142 has an invalid length. [ 216.593082][T10870] bridge_slave_1: left allmulticast mode [ 216.594620][T10870] bridge_slave_1: left promiscuous mode [ 216.596149][T10870] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.602808][T10870] bridge_slave_0: left allmulticast mode [ 216.604441][T10870] bridge_slave_0: left promiscuous mode [ 216.606080][T10870] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.606812][T12278] overlay: filesystem on ./bus not supported as upperdir [ 216.616008][T12278] overlayfs: failed to get inode (-116) [ 216.617669][T12278] overlayfs: failed to get inode (-116) [ 216.620412][T12278] overlayfs: failed to get inode (-116) [ 216.625593][T12279] overlayfs: failed to get inode (-116) [ 216.627220][T12279] overlayfs: failed to get inode (-116) [ 216.629030][T12278] overlayfs: failed to get inode (-116) [ 216.629858][ T66] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.630763][T12278] overlayfs: failed to get inode (-116) [ 216.638208][ T66] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.644246][ T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.647510][ T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.650144][ T66] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.653964][ T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.919946][T10870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.924433][T10870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.928629][T10870] bond0 (unregistering): Released all slaves [ 216.964158][T12298] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 216.968916][T12298] netlink: 'syz.9.1758': attribute type 10 has an invalid length. [ 216.971858][T12298] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.974884][T12298] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.979908][T12298] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.982201][T12298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.984106][T12298] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.985951][T12298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.990026][T12298] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 217.062668][ T99] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 217.073581][T12283] chnl_net:caif_netlink_parms(): no params data found [ 217.111731][T12283] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.113665][T12283] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.115691][T12283] bridge_slave_0: entered allmulticast mode [ 217.119879][T12283] bridge_slave_0: entered promiscuous mode [ 217.122635][T12283] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.124510][T12283] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.126534][T12283] bridge_slave_1: entered allmulticast mode [ 217.129351][T12283] bridge_slave_1: entered promiscuous mode [ 217.177012][T12283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.185292][T12283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.209651][T12283] team0: Port device team_slave_0 added [ 217.212948][T12283] team0: Port device team_slave_1 added [ 217.230446][T12283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.232443][T12283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.239685][T12283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.255725][T10870] hsr_slave_0: left promiscuous mode [ 217.257733][T10870] hsr_slave_1: left promiscuous mode [ 217.259591][T10870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.261525][T10870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.263735][T10870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.268081][T10870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.291112][T10870] veth1_macvtap: left promiscuous mode [ 217.292587][T10870] veth0_macvtap: left promiscuous mode [ 217.294049][T10870] veth1_vlan: left promiscuous mode [ 217.295435][T10870] veth0_vlan: left promiscuous mode [ 217.915439][T12327] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1764'. [ 218.062256][T10870] team0 (unregistering): Port device team_slave_1 removed [ 218.166333][T10870] team0 (unregistering): Port device team_slave_0 removed [ 218.797162][T12325] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 218.815575][T12283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.817448][T12283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.824165][T12283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.828043][ T5937] Bluetooth: hci3: command tx timeout [ 218.874211][T12335] [U] [ 218.875464][T12335] [U] [ 218.876218][T12335] [U] [ 218.876962][T12335] [U] [ 218.877828][T12335] [U] [ 218.878567][T12335] [U] [ 218.879324][T12335] [U] [ 218.880067][T12335] [U] [ 218.882033][T12335] [U] [ 218.882799][T12335] [U] [ 218.883532][T12335] [U] [ 218.884266][T12335] [U] [ 218.885308][T12335] [U] [ 218.886058][T12335] [U] [ 218.886792][T12335] [U] [ 218.887526][T12335] [U] [ 218.890336][T12335] [U] [ 218.891085][T12335] [U] [ 218.891984][T12335] [U] [ 218.892789][T12335] [U] [ 218.893631][T12283] hsr_slave_0: entered promiscuous mode [ 218.894041][T12335] [U] [ 218.896170][T12335] [U] [ 218.897220][T12335] [U] [ 218.898195][T12335] [U] [ 218.899020][T12335] [U] [ 218.899185][T12283] hsr_slave_1: entered promiscuous mode [ 218.899780][T12335] [U] [ 218.899797][T12335] [U]  [ 218.902820][T12335] [U] [ 218.904320][T12335] [U] [ 218.905255][T12335] [U] [ 218.906234][T12335] [U] [ 218.906969][T12335] [U] [ 218.907753][T12335] [U] [ 218.908485][T12335] [U] [ 218.909227][T12335] [U] [ 218.909965][T12335] [U] [ 218.910721][T12283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.910799][T12335] [U] [ 218.913520][T12283] Cannot create hsr debugfs directory [ 218.913965][T12335] [U] [ 218.916676][T12335] [U] [ 218.917657][T12335] [U] [ 218.921225][T12335] [U] [ 218.922021][T12335] [U] [ 218.922759][T12335] [U] [ 218.923500][T12335] [U] [ 218.924561][T12335] [U] [ 218.925356][T12335] [U] [ 218.926093][T12335] [U] [ 218.926826][T12335] [U] [ 218.927612][T12335] [U] [ 218.928338][T12335] [U] [ 218.929084][T12335] [U] [ 218.929914][T12335] [U] [ 218.930954][T12335] [U] [ 218.931957][T12335] [U] [ 218.933022][T12335] [U] [ 218.934032][T12335] [U] [ 218.935221][T12335] [U] [ 218.935963][T12335] [U] [ 218.936702][T12335] [U] [ 218.937448][T12335] [U] [ 218.938291][T12335] [U] [ 218.939023][T12335] [U] [ 218.939775][T12335] [U] [ 218.940508][T12335] [U] [ 218.941381][T12335] [U] [ 218.942121][T12335] [U] [ 218.942881][T12335] [U] [ 218.943614][T12335] [U] [ 218.945861][T12335] [U] [ 218.946624][T12335] [U] [ 218.947363][T12335] [U] [ 218.948094][T12335] [U] [ 218.948979][T12335] [U] [ 218.949717][T12335] [U] [ 218.950460][T12335] [U] [ 218.951190][T12335] [U] [ 218.952008][T12335] [U] [ 218.952744][T12335] [U] [ 218.953486][T12335] [U] [ 218.954217][T12335] [U] [ 218.955278][T12335] [U] [ 218.956034][T12335] [U] [ 218.956790][T12335] [U] [ 218.957520][T12335] [U] [ 218.963741][T12335] [U] [ 218.964533][T12335] [U] [ 218.965284][T12335] [U] [ 218.966009][T12335] [U] [ 218.966904][T12335] [U] [ 218.967670][T12335] [U] [ 218.968411][T12335] [U] [ 218.969159][T12335] [U] [ 218.969979][T12335] [U] [ 218.970718][T12335] [U] [ 218.971454][T12335] [U] [ 218.972184][T12335] [U] [ 218.973045][T12335] [U] [ 218.973790][T12335] [U] [ 218.974528][T12335] [U] [ 218.975260][T12335] [U] [ 218.976135][T12335] [U] [ 218.976888][T12335] [U] [ 218.977630][T12335] [U] [ 218.978361][T12335] [U] [ 218.979214][T12335] [U] [ 218.979968][T12335] [U] [ 218.980713][T12335] [U] [ 218.981451][T12335] [U] [ 218.982330][T12335] [U] [ 218.983072][T12335] [U] [ 218.983835][T12335] [U] [ 218.984563][T12335] [U] [ 218.985056][T12344] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 218.985402][T12335] [U] [ 218.987823][T12335] [U] [ 218.988554][T12335] [U] [ 218.989295][T12335] [U] [ 218.990249][T12335] [U] [ 218.990993][T12335] [U] [ 218.991734][T12335] [U] [ 218.992468][T12335] [U] [ 218.993350][T12335] [U] [ 218.994114][T12335] [U] [ 218.994866][T12335] [U] [ 218.995595][T12335] [U] [ 218.996473][T12335] [U] [ 218.997229][T12335] [U] [ 218.997969][T12335] [U] [ 219.007042][T12334] [U] [ 219.161111][T12361] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1774'. [ 219.292236][T12382] tipc: Started in network mode [ 219.293637][T12382] tipc: Node identity e0000001, cluster identity 4711 [ 219.295463][T12382] tipc: Enabling of bearer rejected, failed to enable media [ 219.365705][T12391] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1783'. [ 219.369088][ T39] audit: type=1400 audit(1731398831.805:1307): avc: denied { ioctl } for pid=12390 comm="syz.5.1783" path="socket:[61806]" dev="sockfs" ino=61806 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 219.569317][T12283] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.573693][T12283] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 219.593568][T12283] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 219.598864][T12283] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.682971][T10869] wlan1: Trigger new scan to find an IBSS to join [ 219.713051][T12283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.728130][T12283] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.742563][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.744582][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.781878][T10870] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.782803][T12426] bpf: Bad value for 'gid' [ 219.783790][T10870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.795618][T12283] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.800893][T12283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.819485][T12424] dummy0: entered promiscuous mode [ 219.825029][T12424] dummy0: left promiscuous mode [ 219.902841][T12283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.920184][T12435] nbd: must specify a device to reconfigure [ 219.943839][T12439] xt_hashlimit: size too large, truncated to 1048576 [ 219.947054][T12283] veth0_vlan: entered promiscuous mode [ 219.951585][T12283] veth1_vlan: entered promiscuous mode [ 219.965289][T12283] veth0_macvtap: entered promiscuous mode [ 219.968414][T12283] veth1_macvtap: entered promiscuous mode [ 219.969348][ T39] audit: type=1400 audit(1731398832.367:1308): avc: denied { ioctl } for pid=12442 comm="syz.6.1801" path="socket:[62492]" dev="sockfs" ino=62492 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 219.975648][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.978328][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.980974][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.983573][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.987179][T12283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.027720][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.032730][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.036046][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.038819][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.041983][T12283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.055911][T12283] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.058360][T12283] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.060608][T12283] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.062833][T12283] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.098620][T10870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.100821][T10870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.120982][T10870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.123450][T10870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.185921][T12455] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1806'. [ 220.188390][T12455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=12455 comm=syz.9.1806 [ 220.376801][T12470] xt_recent: Unsupported userspace flags (00000042) [ 220.433740][T12478] netlink: 'syz.6.1813': attribute type 16 has an invalid length. [ 220.435933][T12478] netlink: 20214 bytes leftover after parsing attributes in process `syz.6.1813'. [ 220.534466][T12464] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1808'. [ 220.688691][T10888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.824795][ T56] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 220.827646][T12494] syz.6.1820: attempt to access beyond end of device [ 220.827646][T12494] loop6: rw=0, sector=1, nr_sectors = 1 limit=0 [ 220.830984][T12494] VFS: unable to read V7 FS superblock on device loop6. [ 220.832814][T12494] VFS: could not find a valid V7 on loop6. [ 221.003011][T12507] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20003 [ 221.006587][ T56] usb 14-1: Using ep0 maxpacket: 8 [ 221.009142][ T56] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 221.011628][ T56] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 221.014105][ T56] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65312, setting to 1024 [ 221.017217][ T56] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 221.019851][ T56] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.023446][ T56] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.025795][ T56] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.145415][ T4380] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 221.186566][T12518] Can't find a SQUASHFS superblock on nullb0 [ 221.225140][T12521] xt_hashlimit: size too large, truncated to 1048576 [ 221.245079][ T56] usb 14-1: GET_CAPABILITIES returned 0 [ 221.246591][ T56] usbtmc 14-1:16.0: can't read capabilities [ 221.295793][ T4380] usb 11-1: device descriptor read/64, error -71 [ 221.562907][ T4380] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 221.711915][ T4380] usb 11-1: device descriptor read/64, error -71 [ 221.829851][ T4380] usb usb11-port1: attempt power cycle [ 221.833856][T12466] hid-generic 0003:0627:0001.0001: pid 12466 passed too large report [ 221.961898][ T39] audit: type=1400 audit(1731398834.238:1309): avc: denied { ioctl } for pid=12536 comm="syz.5.1830" path="socket:[60864]" dev="sockfs" ino=60864 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 221.989921][ T5937] Bluetooth: hci2: command 0x0406 tx timeout [ 222.203707][ T4380] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 222.236660][ T4380] usb 11-1: device descriptor read/8, error -71 [ 222.513706][ T4380] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 222.535464][ T4380] usb 11-1: device descriptor read/8, error -71 [ 222.637853][ T99] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.652845][ T4380] usb usb11-port1: unable to enumerate USB device [ 223.430656][ T9] usb 14-1: USB disconnect, device number 3 [ 224.292274][ T99] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.356979][ T99] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.451221][ T99] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.483839][T12544] ip6t_srh: unknown srh match flags 4000 [ 224.537655][ T99] bridge_slave_1: left allmulticast mode [ 224.539056][ T99] bridge_slave_1: left promiscuous mode [ 224.540545][ T99] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.543322][ T99] bridge_slave_0: left allmulticast mode [ 224.544815][ T99] bridge_slave_0: left promiscuous mode [ 224.547004][ T99] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.564015][ T66] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 224.569415][ T66] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 224.569496][T12561] netlink: 4088 bytes leftover after parsing attributes in process `syz.9.1838'. [ 224.573634][T12561] openvswitch: netlink: Actions may not be safe on all matching packets [ 224.577241][ T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 224.579627][T12561] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 224.581824][ T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 224.584793][ T66] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 224.589710][ T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 224.644740][ T39] audit: type=1400 audit(1731398836.744:1310): avc: denied { setopt } for pid=12562 comm="syz.5.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 224.646434][T12563] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1839'. [ 224.660987][ T39] audit: type=1404 audit(1731398836.754:1311): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 224.705328][ T39] audit: type=1400 audit(1731398836.791:1312): avc: denied { write } for pid=12553 comm="syz.6.1836" laddr=172.20.20.170 faddr=224.0.0.1 fport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 224.711276][ T39] audit: type=1400 audit(1731398836.801:1313): avc: denied { ioctl } for pid=12553 comm="syz.6.1836" path="/dev/vmci" dev="devtmpfs" ino=708 ioctlcmd=0x7a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 224.717590][ T39] audit: type=1400 audit(1731398836.801:1314): avc: denied { mounton } for pid=12570 comm="syz.9.1842" path="/59/bus" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 224.742738][ T39] audit: type=1400 audit(1731398836.838:1315): avc: denied { read write } for pid=9926 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 224.751712][ T39] audit: type=1400 audit(1731398836.847:1316): avc: denied { create } for pid=12574 comm="syz.6.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 224.756821][ T39] audit: type=1400 audit(1731398836.847:1317): avc: denied { create } for pid=12574 comm="syz.6.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 224.766547][ T39] audit: type=1400 audit(1731398836.857:1318): avc: denied { read write } for pid=9926 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 224.775585][ T39] audit: type=1400 audit(1731398836.866:1319): avc: denied { create } for pid=12570 comm="syz.9.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 224.781707][ T39] audit: type=1400 audit(1731398836.866:1320): avc: denied { read } for pid=12580 comm="syz.6.1844" dev="nsfs" ino=4026534215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 224.788270][ T39] audit: type=1400 audit(1731398836.875:1321): avc: denied { mounton } for pid=12570 comm="syz.9.1842" path="/59/bus/bus" dev="tmpfs" ino=342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 224.875652][ T99] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.879833][ T99] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.884288][ T99] bond0 (unregistering): Released all slaves [ 224.892003][ T39] audit: type=1400 audit(1731398836.978:1322): avc: denied { create } for pid=12580 comm="syz.6.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 224.900724][ T39] audit: type=1400 audit(1731398836.988:1323): avc: denied { prog_load } for pid=12580 comm="syz.6.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 225.167335][ T99] hsr_slave_0: left promiscuous mode [ 225.169952][ T99] hsr_slave_1: left promiscuous mode [ 225.172560][ T99] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.174498][ T99] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.177104][ T99] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.179211][ T99] batman_adv: batadv0: Removing interface: batadv_slave_1 Nov 12 08:07:17 syzkaller kern.info kernel: [ 225.167335][ T99] hsr_slave_0: left promiscuous mode Nov 12 08:07:17 syzkaller kern.info kernel: [ 225.169952][ T99] hsr_slave_1: left promiscuous mode Nov 12 08:07:17 syzkaller kern.info kernel: [ 225.172560][ T99] batman_adv: batadv0: Interface deactivated: batadv_slave_0 Nov 12 08:07:17 syzkaller kern.info kernel: [ 225.174498][ T99] batman_adv: batadv0: Removing interface: batadv_slave_0 Nov 12 08:07:17 syzkaller kern.info kernel: [ 225.177104][ T99] batman_adv: batadv0: Interface deactivated: batadv_slave_1 Nov 12 08:07:17 syzkaller kern.info kernel: [ 225.179211][ T99] batman_adv: batadv0: Removing interface: batadv_slave_1[ 225.205160][ T99] veth1_macvtap: left promiscuous mode [ 225.206742][ T99] veth0_macvtap: left promiscuous mode [ 225.208730][ T99] veth1_vlan: left promiscuous mode [ 225.210842][ T99] veth0_vlan: left promiscuous mode Nov 12 08:07:17 syzkaller kern.info kernel: [ 225.205160][ T99] veth1_macvtap: left promiscuous mode Nov 12 08:07:17 syzkaller kern.info kernel: [ 225.206742][ T99] veth0_macvtap: left promiscuous mode Nov 12 08:07:17 syzkaller kern.info kernel: [ 225.208730][ T99] veth1_vlan: left promiscuous mode Nov 12 08:07:17 syzkaller kern.info kernel: [ 225.210842][ T99] veth0_vlan: left promiscuous mode [ 225.973306][ T99] team0 (unregistering): Port device team_slave_1 removed Nov 12 08:07:17 syzkaller kern.info kernel: [ 225.973306][ T99] team0 (unregistering): Port device team_slave_1 removed [ 226.066079][ T99] team0 (unregistering): Port device team_slave_0 removed Nov 12 08:07:18 syzkaller kern.info kernel: [ 226.066079][ T99] team0 (unregistering): Port device team_slave_0 removed Nov 12 08:07:18 syzkaller auth.info sshd[5854]: Received disconnect from 10.0.2.2 port 42352:11: disconnected by user Nov 12 08:07:18 syzkaller auth.info sshd[5854]: Disconnected from user root 10.0.2.2 port 42352 [ 227.359315][ T99] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Nov 12 08:07:19 syzkaller kern.info kernel: [ 227.359315][ T99] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.446443][ T99] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Nov 12 08:07:19 syzkaller kern.info kernel: [ 227.446443][ T99] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.510289][ T99] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Nov 12 08:07:19 syzkaller kern.info kernel: [ 227.510289][ T99] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.587729][ T99] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Nov 12 08:07:19 syzkaller kern.info kernel: [ 227.587729][ T99] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.708242][ T99] bridge_slave_1: left allmulticast mode [ 227.710542][ T99] bridge_slave_1: left promiscuous mode [ 227.712673][ T99] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.716514][ T99] bridge_slave_0: left allmulticast mode [ 227.718579][ T99] bridge_slave_0: left promiscuous mode [ 227.721116][ T99] bridge0: port 1(bridge_slave_0) entered disabled state Nov 12 08:07:19 syzkaller kern.info kernel: [ 227.708242][ T99] bridge_slave_1: left allmulticast mode Nov 12 08:07:19 syzkaller kern.info kernel: [ 227.710542][ T99] bridge_slave_1: left promiscuous mode Nov 12 08:07:19 syzkaller kern.info kernel: [ 227.712673][ T99] bridge0: port 2(bridge_slave_1) entered disabled state Nov 12 08:07:19 syzkaller kern.info kernel: [ 227.716514][ T99] bridge_slave_0: left allmulticast mode Nov 12 08:07:19 syzkaller kern.info kernel: [ 227.718579][ T99] bridge_slave_0: left promiscuous mode Nov 12 08:07:19 syzkaller kern.info kernel: [ 227.721116][ T99] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.741575][T10870] [ 227.742729][T10870] ============================= [ 227.744393][T10870] WARNING: suspicious RCU usage [ 227.745726][T10870] 6.12.0-rc7-syzkaller #0 Not tainted [ 227.747785][T10870] ----------------------------- [ 227.750895][T10870] net/sched/sch_generic.c:1290 suspicious rcu_dereference_protected() usage! [ 227.753777][T10870] [ 227.753777][T10870] other info that might help us debug this: [ 227.753777][T10870] [ 227.756478][T10870] [ 227.756478][T10870] rcu_scheduler_active = 2, debug_locks = 1 [ 227.758631][T10870] 3 locks held by kworker/u32:18/10870: [ 227.760115][T10870] #0: ffff888046b42148 ((wq_completion)bond0#22){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 227.763055][T10870] #1: ffffc90004557d80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 227.766524][T10870] #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x140/0x2d90 Nov 12 08:07:19 [ 227.769123][T10870] [ 227.769123][T10870] stack backtrace: syzkaller kern.w[ 227.771124][T10870] CPU: 2 UID: 0 PID: 10870 Comm: kworker/u32:18 Not tainted 6.12.0-rc7-syzkaller #0 arn kernel: [ 2[ 227.773993][T10870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 27.741575][T1087[ 227.777209][T10870] Workqueue: bond0 bond_mii_monitor 0] [ 227.778988][T10870] Call Trace: [ 227.780021][T10870] [ 227.780845][T10870] dump_stack_lvl+0x16c/0x1f0 [ 227.782231][T10870] lockdep_rcu_suspicious+0x210/0x3c0 [ 227.783678][T10870] dev_deactivate_queue+0x167/0x190 [ 227.785092][T10870] dev_deactivate_many+0xe7/0xb20 [ 227.785112][T10870] dev_deactivate+0xf9/0x1c0 [ 227.785125][T10870] ? __pfx_dev_deactivate+0x10/0x10 Nov 12 08:07:19 [ 227.789068][T10870] ? __sanitizer_cov_trace_switch+0x54/0x90 syzkaller kern.w[ 227.791052][T10870] linkwatch_do_dev+0x11e/0x160 arn kernel: [ 2[ 227.792733][T10870] linkwatch_sync_dev+0x181/0x210 27.742729][T1087[ 227.794450][T10870] ? __pfx_ethtool_op_get_link+0x10/0x10 0] =============[ 227.796324][T10870] ethtool_op_get_link+0x1d/0x70 ================[ 227.796337][T10870] bond_check_dev_link+0x197/0x490 [ 227.796351][T10870] ? __pfx_bond_check_dev_link+0x10/0x10 [ 227.796362][T10870] ? rcu_is_watching+0x12/0xc0 [ 227.802624][T10870] bond_mii_monitor+0x3c1/0x2d90 Nov 12 08:07:19 [ 227.803931][T10870] ? __pfx_bond_mii_monitor+0x10/0x10 syzkaller kern.w[ 227.805782][T10870] ? rcu_is_watching+0x12/0xc0 arn kernel: [ 2[ 227.807420][T10870] ? trace_lock_acquire+0x14a/0x1d0 [ 227.809191][T10870] ? process_one_work+0x921/0x1ba0 27.744393][T1087[ 227.810540][T10870] ? lock_acquire+0x2f/0xb0 0] WARNING: susp[ 227.812113][T10870] ? process_one_work+0x921/0x1ba0 icious RCU usage[ 227.813886][T10870] process_one_work+0x9c5/0x1ba0 [ 227.813902][T10870] ? __pfx_bond_mii_monitor+0x10/0x10 [ 227.813915][T10870] ? __pfx_process_one_work+0x10/0x10 [ 227.813929][T10870] ? assign_work+0x1a0/0x250 Nov 12 08:07:19 [ 227.819671][T10870] worker_thread+0x6c8/0xf00 syzkaller kern.w[ 227.821323][T10870] ? __pfx_worker_thread+0x10/0x10 arn kernel: [ 2[ 227.823021][T10870] kthread+0x2c1/0x3a0 27.745726][T1087[ 227.824505][T10870] ? _raw_spin_unlock_irq+0x23/0x50 0] 6.12.0-rc7-sy[ 227.824522][T10870] ? __pfx_kthread+0x10/0x10 zkaller #0 Not t[ 227.824533][T10870] ret_from_fork+0x45/0x80 ainted [ 227.824543][T10870] ? __pfx_kthread+0x10/0x10 Nov 12 08:07:19 [ 227.831781][T10870] ret_from_fork_asm+0x1a/0x30 syzkaller kern.w[ 227.833849][T10870] arn kernel: [ 2[ 227.835590][T10870] 27.747785][T1087[ 227.836543][T10870] ============================= 0] -------------[ 227.838656][T10870] WARNING: suspicious RCU usage ----------------[ 227.840730][T10870] 6.12.0-rc7-syzkaller #0 Not tainted [ 227.842976][T10870] ----------------------------- [ 227.844765][T10870] include/linux/rtnetlink.h:100 suspicious rcu_dereference_protected() usage! Nov 12 08:07:19 [ 227.848966][T10870] [ 227.848966][T10870] other info that might help us debug this: [ 227.848966][T10870] syzkaller kern.w[ 227.852256][T10870] [ 227.852256][T10870] rcu_scheduler_active = 2, debug_locks = 1 arn kernel: [ 2[ 227.854769][T10870] 3 locks held by kworker/u32:18/10870: 27.750895][T1087[ 227.856637][T10870] #0: ffff888046b42148 ((wq_completion)bond0#22){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 0] net/sched/sch[ 227.859847][T10870] #1: ffffc90004557d80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 _generic.c:1290 [ 227.859877][T10870] #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x140/0x2d90 [ 227.866180][T10870] [ 227.866180][T10870] stack backtrace: suspicious rcu_d[ 227.867745][T10870] CPU: 2 UID: 0 PID: 10870 Comm: kworker/u32:18 Not tainted 6.12.0-rc7-syzkaller #0 [ 227.870592][T10870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 ereference_prote[ 227.873426][T10870] Workqueue: bond0 bond_mii_monitor [ 227.875189][T10870] Call Trace: cted() usage! N[ 227.876085][T10870] ov 12 08:07:19 s[ 227.877276][T10870] dump_stack_lvl+0x16c/0x1f0 yzkaller kern.wa[ 227.878949][T10870] lockdep_rcu_suspicious+0x210/0x3c0 rn kernel: [ 22[ 227.878969][T10870] dev_deactivate_many+0x8af/0xb20 [ 227.878987][T10870] dev_deactivate+0xf9/0x1c0 7.753777][T10870[ 227.883740][T10870] ? __pfx_dev_deactivate+0x10/0x10 [ 227.885528][T10870] ? __sanitizer_cov_trace_switch+0x54/0x90 ] Nov 12 08:07[ 227.887104][T10870] linkwatch_do_dev+0x11e/0x160 :19 syzkaller ke[ 227.888787][T10870] linkwatch_sync_dev+0x181/0x210 rn.warn kernel: [ 227.890542][T10870] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 227.753777][T[ 227.890554][T10870] ethtool_op_get_link+0x1d/0x70 [ 227.890564][T10870] bond_check_dev_link+0x197/0x490 10870] other inf[ 227.895456][T10870] ? __pfx_bond_check_dev_link+0x10/0x10 [ 227.897362][T10870] ? rcu_is_watching+0x12/0xc0 o that might hel[ 227.898647][T10870] bond_mii_monitor+0x3c1/0x2d90 p us debug this:[ 227.900348][T10870] ? __pfx_bond_mii_monitor+0x10/0x10 Nov 12 08:07:1[ 227.902184][T10870] ? rcu_is_watching+0x12/0xc0 9 syzkaller kern[ 227.902198][T10870] ? trace_lock_acquire+0x14a/0x1d0 .warn kernel: [ [ 227.902211][T10870] ? process_one_work+0x921/0x1ba0 227.753777][T10[ 227.907330][T10870] ? lock_acquire+0x2f/0xb0 870] Nov 12 08[ 227.908990][T10870] ? process_one_work+0x921/0x1ba0 :07:19 syzkaller[ 227.909004][T10870] process_one_work+0x9c5/0x1ba0 [ 227.909019][T10870] ? __pfx_bond_mii_monitor+0x10/0x10 kern.warn kerne[ 227.913853][T10870] ? __pfx_process_one_work+0x10/0x10 l: [ 227.756478[ 227.915661][T10870] ? assign_work+0x1a0/0x250 [ 227.917316][T10870] worker_thread+0x6c8/0xf00 ][T10870] Nov [ 227.918802][T10870] ? __pfx_worker_thread+0x10/0x10 12 08:07:19 syzk[ 227.920926][T10870] kthread+0x2c1/0x3a0 aller kern.warn [ 227.922747][T10870] ? _raw_spin_unlock_irq+0x23/0x50 kernel: [ 227.7[ 227.922764][T10870] ? __pfx_kthread+0x10/0x10 [ 227.922776][T10870] ret_from_fork+0x45/0x80 56478][T10870] r[ 227.928036][T10870] ? __pfx_kthread+0x10/0x10 cu_scheduler_act[ 227.930029][T10870] ret_from_fork_asm+0x1a/0x30 [ 227.932087][T10870] ive = 2, debug_l[ 227.933550][T10870] BUG: sleeping function called from invalid context at net/core/dev.c:11284 ocks = 1 Nov 12[ 227.936563][T10870] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 10870, name: kworker/u32:18 08:07:19 syzkal[ 227.940107][T10870] preempt_count: 0, expected: 0 [ 227.940114][T10870] RCU nest depth: 1, expected: 0 ler kern.warn ke[ 227.940119][T10870] 3 locks held by kworker/u32:18/10870: rnel: [ 227.758[ 227.940126][T10870] #0: ffff888046b42148 ((wq_completion)bond0#22){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 631][T10870] 3 l[ 227.948160][T10870] #1: ffffc90004557d80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 ocks held by kwo[ 227.951775][T10870] #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x140/0x2d90 rker/u32:18/1087[ 227.951810][T10870] CPU: 2 UID: 0 PID: 10870 Comm: kworker/u32:18 Not tainted 6.12.0-rc7-syzkaller #0 [ 227.957592][T10870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 0: Nov 12 08:07[ 227.960409][T10870] Workqueue: bond0 bond_mii_monitor [ 227.962180][T10870] Call Trace: :19 syzkaller ke[ 227.963085][T10870] rn.warn kernel: [ 227.964263][T10870] dump_stack_lvl+0x16c/0x1f0 [ 227.760115][T[ 227.966131][T10870] __might_resched+0x3c0/0x5e0 10870] #0: ffff[ 227.966153][T10870] ? __pfx___might_resched+0x10/0x10 888046b42148 ((w[ 227.966171][T10870] ? dev_deactivate_many+0x260/0xb20 q_completion)bon[ 227.971302][T10870] synchronize_net+0x1b/0x60 [ 227.973104][T10870] dev_deactivate_many+0x2a1/0xb20 d0#22){+.+.}-{0:[ 227.974890][T10870] dev_deactivate+0xf9/0x1c0 [ 227.974913][T10870] ? __pfx_dev_deactivate+0x10/0x10 0}, at: process_[ 227.978303][T10870] ? __sanitizer_cov_trace_switch+0x54/0x90 one_work+0x129b/[ 227.980697][T10870] linkwatch_do_dev+0x11e/0x160 0x1ba0 Nov 12 0[ 227.982753][T10870] linkwatch_sync_dev+0x181/0x210 8:07:19 syzkalle[ 227.984895][T10870] ? __pfx_ethtool_op_get_link+0x10/0x10 r kern.warn kern[ 227.987239][T10870] ethtool_op_get_link+0x1d/0x70 el: [ 227.76305[ 227.987256][T10870] bond_check_dev_link+0x197/0x490 5][T10870] #1: [ 227.987269][T10870] ? __pfx_bond_check_dev_link+0x10/0x10 [ 227.987285][T10870] ? rcu_is_watching+0x12/0xc0 ffffc90004557d80[ 227.995128][T10870] bond_mii_monitor+0x3c1/0x2d90 ((work_completi[ 227.997183][T10870] ? __pfx_bond_mii_monitor+0x10/0x10 on)(&(&bond->mii[ 227.999426][T10870] ? rcu_is_watching+0x12/0xc0 _work)->work)){+[ 228.001463][T10870] ? trace_lock_acquire+0x14a/0x1d0 .+.}-{0:0}, at: [ 228.003676][T10870] ? process_one_work+0x921/0x1ba0 process_one_work[ 228.005824][T10870] ? lock_acquire+0x2f/0xb0 +0x921/0x1ba0 N[ 228.007803][T10870] ? process_one_work+0x921/0x1ba0 ov 12 08:07:19 s[ 228.009982][T10870] process_one_work+0x9c5/0x1ba0 yzkaller kern.wa[ 228.012098][T10870] ? __pfx_bond_mii_monitor+0x10/0x10 rn kernel: [ 22[ 228.014332][T10870] ? __pfx_process_one_work+0x10/0x10 7.766524][T10870[ 228.016551][T10870] ? assign_work+0x1a0/0x250 ] #2: ffffffff8[ 228.018545][T10870] worker_thread+0x6c8/0xf00 e1b8340 (rcu_rea[ 228.020570][T10870] ? __pfx_worker_thread+0x10/0x10 d_lock){....}-{1[ 228.022713][T10870] kthread+0x2c1/0x3a0 :2}, at: bond_mi[ 228.024520][T10870] ? _raw_spin_unlock_irq+0x23/0x50 i_monitor+0x140/[ 228.026704][T10870] ? __pfx_kthread+0x10/0x10 0x2d90 Nov 12 0[ 228.028672][T10870] ret_from_fork+0x45/0x80 8:07:19 syzkalle[ 228.030594][T10870] ? __pfx_kthread+0x10/0x10 r kern.warn kern[ 228.032585][T10870] ret_from_fork_asm+0x1a/0x30 el: [ 227.76912[ 228.034655][T10870] 3][T10870] Nov[ 228.036288][T10870] 12 08:07:19 syz[ 228.037235][T10870] ============================= kaller kern.warn[ 228.038921][T10870] WARNING: suspicious RCU usage kernel: [ 227.[ 228.040648][T10870] 6.12.0-rc7-syzkaller #0 Tainted: G W 769123][T10870] [ 228.042921][T10870] ----------------------------- stack backtrace:[ 228.044525][T10870] kernel/rcu/tree_exp.h:946 Illegal synchronize_rcu_expedited() in RCU read-side critical section! [ 228.047736][T10870] [ 228.047736][T10870] other info that might help us debug this: [ 228.047736][T10870] [ 228.052201][T10870] [ 228.052201][T10870] rcu_scheduler_active = 2, debug_locks = 1 [ 228.052229][T10870] 3 locks held by kworker/u32:18/10870: [ 228.052238][T10870] #0: ffff888046b42148 ((wq_completion)bond0#22){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 Nov 12 08:07:19 [ 228.052295][T10870] #1: ffffc90004557d80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 syzkaller kern.w[ 228.052342][T10870] #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x140/0x2d90 [ 228.065260][T10870] [ 228.065260][T10870] stack backtrace: arn kernel: [ 2[ 228.066808][T10870] CPU: 2 UID: 0 PID: 10870 Comm: kworker/u32:18 Tainted: G W 6.12.0-rc7-syzkaller #0 [ 228.069976][T10870] Tainted: [W]=WARN 27.771124][T1087[ 228.070991][T10870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 0] CPU: 2 UID: 0[ 228.074267][T10870] Workqueue: bond0 bond_mii_monitor PID: 10870 Comm[ 228.076195][T10870] Call Trace: : kworker/u32:18[ 228.076201][T10870] [ 228.076206][T10870] dump_stack_lvl+0x16c/0x1f0 [ 228.076220][T10870] lockdep_rcu_suspicious+0x210/0x3c0 Not tainted 6.1[ 228.076237][T10870] synchronize_rcu_expedited+0x1e5/0x450 [ 228.083220][T10870] ? __pfx_synchronize_rcu_expedited+0x10/0x10 2.0-rc7-syzkalle[ 228.085029][T10870] ? dump_stack_lvl+0x1a1/0x1f0 r #0 Nov 12 08:[ 228.087073][T10870] ? dump_stack_lvl+0x1a3/0x1f0 07:19 syzkaller [ 228.089171][T10870] ? add_taint+0x5f/0xd0 kern.warn kernel[ 228.090952][T10870] ? __pfx___might_resched+0x10/0x10 : [ 227.773993][ 228.090973][T10870] ? dev_deactivate_many+0x260/0xb20 [T10870] Hardwar[ 228.094729][T10870] synchronize_net+0x3e/0x60 e name: QEMU Sta[ 228.096300][T10870] dev_deactivate_many+0x2a1/0xb20 [ 228.098068][T10870] dev_deactivate+0xf9/0x1c0 ndard PC (Q35 + [ 228.099331][T10870] ? __pfx_dev_deactivate+0x10/0x10 ICH9, 2009), BIO[ 228.101084][T10870] ? __sanitizer_cov_trace_switch+0x54/0x90 S 1.16.3-debian-[ 228.103043][T10870] linkwatch_do_dev+0x11e/0x160 1.16.3-2~bpo12+1[ 228.103060][T10870] linkwatch_sync_dev+0x181/0x210 [ 228.103073][T10870] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 228.103083][T10870] ethtool_op_get_link+0x1d/0x70 04/01/2014 Nov[ 228.103093][T10870] bond_check_dev_link+0x197/0x490 12 08:07:19 syz[ 228.110980][T10870] ? __pfx_bond_check_dev_link+0x10/0x10 kaller kern.warn[ 228.112873][T10870] ? rcu_is_watching+0x12/0xc0 kernel: [ 227.[ 228.112894][T10870] bond_mii_monitor+0x3c1/0x2d90 [ 228.112912][T10870] ? __pfx_bond_mii_monitor+0x10/0x10 777209][T10870] [ 228.117639][T10870] ? rcu_is_watching+0x12/0xc0 [ 228.119330][T10870] ? trace_lock_acquire+0x14a/0x1d0 Workqueue: bond0[ 228.120712][T10870] ? process_one_work+0x921/0x1ba0 [ 228.122441][T10870] ? lock_acquire+0x2f/0xb0 bond_mii_monito[ 228.123654][T10870] ? process_one_work+0x921/0x1ba0 r Nov 12 08:07:[ 228.123668][T10870] process_one_work+0x9c5/0x1ba0 19 syzkaller ker[ 228.123682][T10870] ? __pfx_bond_mii_monitor+0x10/0x10 [ 228.123696][T10870] ? __pfx_process_one_work+0x10/0x10 n.warn kernel: [[ 228.130246][T10870] ? assign_work+0x1a0/0x250 [ 228.131839][T10870] worker_thread+0x6c8/0xf00 227.778988][T1[ 228.133250][T10870] ? __pfx_worker_thread+0x10/0x10 0870] Call Trace[ 228.134942][T10870] kthread+0x2c1/0x3a0 [ 228.136469][T10870] ? _raw_spin_unlock_irq+0x23/0x50 : Nov 12 08:07:[ 228.137866][T10870] ? __pfx_kthread+0x10/0x10 19 syzkaller ker[ 228.137881][T10870] ret_from_fork+0x45/0x80 n.warn kernel: [[ 228.137890][T10870] ? __pfx_kthread+0x10/0x10 [ 228.137902][T10870] ret_from_fork_asm+0x1a/0x30 227.780021][T1[ 228.143962][T10870] 0870] N[ 228.145492][T10870] ov 12 08:07:19 s[ 228.146516][T10870] ============================= yzkaller kern.wa[ 228.146522][T10870] [ BUG: Invalid wait context ] [ 228.146529][T10870] 6.12.0-rc7-syzkaller #0 Tainted: G W [ 228.146538][T10870] ----------------------------- rn kernel: [ 22[ 228.146543][T10870] kworker/u32:18/10870 is trying to lock: 7.780845][T10870[ 228.146551][T10870] ffffffff8e1c3c38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 228.157423][T10870] other info that might help us debug this: [ 228.158945][T10870] context-{4:4} ] dump_stack_lv[ 228.159911][T10870] 3 locks held by kworker/u32:18/10870: l+0x16c/0x1f0 N[ 228.161741][T10870] #0: ffff888046b42148 ((wq_completion)bond0#22){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 ov 12 08:07:19 s[ 228.164854][T10870] #1: ffffc90004557d80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 yzkaller kern.wa[ 228.164879][T10870] #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x140/0x2d90 [ 228.171276][T10870] stack backtrace: rn kernel: [ 22[ 228.172260][T10870] CPU: 2 UID: 0 PID: 10870 Comm: kworker/u32:18 Tainted: G W 6.12.0-rc7-syzkaller #0 7.782231][T10870[ 228.175400][T10870] Tainted: [W]=WARN ] lockdep_rcu_s[ 228.176828][T10870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 228.176836][T10870] Workqueue: bond0 bond_mii_monitor uspicious+0x210/[ 228.176851][T10870] Call Trace: 0x3c0 Nov 12 08[ 228.176854][T10870] [ 228.176858][T10870] dump_stack_lvl+0x116/0x1f0 :07:19 syzkaller[ 228.185077][T10870] __lock_acquire+0x13db/0x3ce0 [ 228.186755][T10870] ? __pfx___lock_acquire+0x10/0x10 kern.warn kerne[ 228.188142][T10870] ? add_lock_to_list+0x17d/0x390 [ 228.188159][T10870] lock_acquire.part.0+0x11b/0x380 l: [ 227.783678[ 228.188168][T10870] ? exp_funnel_lock+0x1a4/0x3b0 [ 228.188182][T10870] ? __pfx_lock_acquire.part.0+0x10/0x10 ][T10870] dev_d[ 228.194386][T10870] ? rcu_is_watching+0x12/0xc0 eactivate_queue+[ 228.196014][T10870] ? trace_lock_acquire+0x14a/0x1d0 [ 228.197787][T10870] ? __might_resched+0x4ca/0x5e0 0x167/0x190 Nov[ 228.199090][T10870] ? exp_funnel_lock+0x1a4/0x3b0 [ 228.200804][T10870] ? lock_acquire+0x2f/0xb0 12 08:07:19 syz[ 228.202010][T10870] ? exp_funnel_lock+0x1a4/0x3b0 kaller kern.warn[ 228.202027][T10870] __mutex_lock+0x175/0x9c0 kernel: [ 227.[ 228.202036][T10870] ? exp_funnel_lock+0x1a4/0x3b0 785092][T10870] [ 228.206964][T10870] ? find_held_lock+0x2d/0x110 [ 228.208623][T10870] ? exp_funnel_lock+0x1a4/0x3b0 dev_deactivate_[ 228.209858][T10870] ? __pfx___mutex_lock+0x10/0x10 many+0xe7/0xb20[ 228.209869][T10870] ? exp_funnel_lock+0x171/0x3b0 [ 228.209885][T10870] ? __pfx_do_raw_spin_lock+0x10/0x10 Nov 12 08:07:19[ 228.214677][T10870] ? lock_acquire+0x2f/0xb0 [ 228.216285][T10870] ? exp_funnel_lock+0x13c/0x3b0 syzkaller kern.[ 228.217597][T10870] ? exp_funnel_lock+0x1a4/0x3b0 warn kernel: [ [ 228.219294][T10870] exp_funnel_lock+0x1a4/0x3b0 227.785112][T108[ 228.220965][T10870] ? __pfx_exp_funnel_lock+0x10/0x10 [ 228.220982][T10870] ? __might_resched+0x4ca/0x5e0 70] dev_deactiv[ 228.220992][T10870] ? __pfx___might_resched+0x10/0x10 ate+0xf9/0x1c0 [ 228.225802][T10870] ? lockdep_rcu_suspicious+0x2ee/0x3c0 [ 228.227638][T10870] synchronize_rcu_expedited+0x290/0x450 Nov 12 08:07:19 [ 228.229115][T10870] ? __pfx_synchronize_rcu_expedited+0x10/0x10 syzkaller kern.w[ 228.231086][T10870] ? dump_stack_lvl+0x1a1/0x1f0 arn kernel: [ 2[ 228.232748][T10870] ? dump_stack_lvl+0x1a3/0x1f0 27.785125][T1087[ 228.232759][T10870] ? add_taint+0x5f/0xd0 [ 228.232773][T10870] ? __pfx___might_resched+0x10/0x10 0] ? __pfx_dev_[ 228.237287][T10870] ? dev_deactivate_many+0x260/0xb20 [ 228.239091][T10870] synchronize_net+0x3e/0x60 deactivate+0x10/[ 228.240306][T10870] dev_deactivate_many+0x2a1/0xb20 0x10 Nov 12 08:[ 228.242048][T10870] dev_deactivate+0xf9/0x1c0 [ 228.243652][T10870] ? __pfx_dev_deactivate+0x10/0x10 07:19 syzkaller [ 228.245012][T10870] ? __sanitizer_cov_trace_switch+0x54/0x90 kern.warn kernel[ 228.246926][T10870] linkwatch_do_dev+0x11e/0x160 : [ 227.789068][ 228.248630][T10870] linkwatch_sync_dev+0x181/0x210 [T10870] ? __sa[ 228.248645][T10870] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 228.248655][T10870] ethtool_op_get_link+0x1d/0x70 [ 228.248663][T10870] bond_check_dev_link+0x197/0x490 nitizer_cov_trac[ 228.248688][T10870] ? __pfx_bond_check_dev_link+0x10/0x10 e_switch+0x54/0x[ 228.256852][T10870] ? rcu_is_watching+0x12/0xc0 [ 228.258500][T10870] bond_mii_monitor+0x3c1/0x2d90 90 Nov 12 08:07[ 228.259818][T10870] ? __pfx_bond_mii_monitor+0x10/0x10 :19 syzkaller ke[ 228.259834][T10870] ? rcu_is_watching+0x12/0xc0 [ 228.259844][T10870] ? trace_lock_acquire+0x14a/0x1d0 rn.warn kernel: [ 228.264583][T10870] ? process_one_work+0x921/0x1ba0 [ 227.791052][T[ 228.266411][T10870] ? lock_acquire+0x2f/0xb0 10870] linkwatc[ 228.266422][T10870] ? process_one_work+0x921/0x1ba0 [ 228.266431][T10870] process_one_work+0x9c5/0x1ba0 [ 228.266442][T10870] ? __pfx_bond_mii_monitor+0x10/0x10 h_do_dev+0x11e/0[ 228.272443][T10870] ? __pfx_process_one_work+0x10/0x10 x160 Nov 12 08:[ 228.274235][T10870] ? assign_work+0x1a0/0x250 07:19 syzkaller [ 228.275861][T10870] worker_thread+0x6c8/0xf00 [ 228.275874][T10870] ? __pfx_worker_thread+0x10/0x10 kern.warn kernel[ 228.275883][T10870] kthread+0x2c1/0x3a0 [ 228.275893][T10870] ? _raw_spin_unlock_irq+0x23/0x50 : [ 227.792733][ 228.275906][T10870] ? __pfx_kthread+0x10/0x10 [ 228.275917][T10870] ret_from_fork+0x45/0x80 [T10870] linkwa[ 228.275926][T10870] ? __pfx_kthread+0x10/0x10 tch_sync_dev+0x1[ 228.285854][T10870] ret_from_fork_asm+0x1a/0x30 81/0x210 Nov 12[ 228.287527][T10870] [ 228.287670][T10870] ------------[ cut here ]------------ 08:07:19 syzkal[ 228.290149][T10870] Voluntary context switch within RCU read-side critical section! [ 228.290195][T10870] WARNING: CPU: 2 PID: 10870 at kernel/rcu/tree_plugin.h:331 rcu_note_context_switch+0xc5c/0x1ae0 ler kern.warn ke[ 228.295238][T10870] Modules linked in: rnel: [ 227.794[ 228.296648][T10870] CPU: 2 UID: 0 PID: 10870 Comm: kworker/u32:18 Tainted: G W 6.12.0-rc7-syzkaller #0 [ 228.299829][T10870] Tainted: [W]=WARN 450][T10870] ? [ 228.300838][T10870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 __pfx_ethtool_op[ 228.303965][T10870] Workqueue: bond0 bond_mii_monitor _get_link+0x10/0[ 228.305741][T10870] RIP: 0010:rcu_note_context_switch+0xc5c/0x1ae0 x10 Nov 12 08:0[ 228.305756][T10870] Code: 79 00 4c 8b 54 24 30 48 8b 44 24 28 8b 4c 24 10 e9 c6 03 00 00 c6 05 53 c1 d2 0e 01 90 48 c7 c7 20 a5 6e 8b e8 f5 1d d9 ff 90 <0f> 0b 90 90 e9 a8 f4 ff ff 38 d0 7f 08 84 c0 0f 85 2b 08 00 00 80 [ 228.305765][T10870] RSP: 0018:ffffc900045573b0 EFLAGS: 00010086 7:19 syzkaller k[ 228.314727][T10870] RAX: 0000000000000000 RBX: ffff88806a83fe40 RCX: ffffffff814e6e79 [ 228.317169][T10870] RDX: ffff888026c3c880 RSI: ffffffff814e6e86 RDI: 0000000000000001 ern.warn kernel:[ 228.319232][T10870] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 228.321647][T10870] R10: 0000000000000000 R11: 000000002d2d2d2d R12: ffff888026c3c880 [ 227.796324][[ 228.323692][T10870] R13: ffff888026c3c880 R14: ffff888026c3c880 R15: ffff88806a83ee80 T10870] ethtool[ 228.326114][T10870] FS: 0000000000000000(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 _op_get_link+0x1[ 228.328820][T10870] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 228.328829][T10870] CR2: 00007fd5d2467d60 CR3: 0000000030df0000 CR4: 0000000000352ef0 d/0x70 Nov 12 0[ 228.328835][T10870] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 8:07:19 syzkalle[ 228.328841][T10870] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 228.328847][T10870] Call Trace: [ 228.328850][T10870] r kern.warn kern[ 228.328854][T10870] ? __warn+0xea/0x3d0 el: [ 227.79633[ 228.340918][T10870] ? bpf_ksym_find+0x127/0x1c0 [ 228.342563][T10870] ? rcu_note_context_switch+0xc5c/0x1ae0 7][T10870] bond[ 228.344040][T10870] ? report_bug+0x3c0/0x580 _check_dev_link+[ 228.345598][T10870] ? handle_bug+0x54/0xa0 0x197/0x490 Nov[ 228.347136][T10870] ? exc_invalid_op+0x17/0x50 [ 228.347148][T10870] ? asm_exc_invalid_op+0x1a/0x20 12 08:07:20 syz[ 228.347163][T10870] ? __warn_printk+0x199/0x350 kaller kern.warn[ 228.351687][T10870] ? __warn_printk+0x1a6/0x350 kernel: [ 227.[ 228.353337][T10870] ? rcu_note_context_switch+0xc5c/0x1ae0 796351][T10870] [ 228.355166][T10870] ? lockdep_unlock+0x11a/0x290 [ 228.356735][T10870] ? __lock_acquire+0x2167/0x3ce0 ? __pfx_bond_ch[ 228.358047][T10870] ? rcu_is_watching+0x12/0xc0 eck_dev_link+0x1[ 228.359689][T10870] ? schedule+0xe7/0x350 0/0x10 Nov 12 0[ 228.361219][T10870] __schedule+0x297/0x5740 8:07:20 syzkalle[ 228.361234][T10870] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 228.361251][T10870] ? __pfx___schedule+0x10/0x10 r kern.warn kern[ 228.365852][T10870] ? __mutex_trylock_common+0x78/0x250 [ 228.367665][T10870] ? __pfx___mutex_trylock_common+0x10/0x10 el: [ 227.79636[ 228.369218][T10870] ? exp_funnel_lock+0x1a4/0x3b0 2][T10870] ? rc[ 228.370883][T10870] ? __mutex_lock+0x7ca/0x9c0 u_is_watching+0x[ 228.372525][T10870] schedule+0xe7/0x350 12/0xc0 Nov 12 [ 228.372539][T10870] schedule_preempt_disabled+0x13/0x30 [ 228.372552][T10870] __mutex_lock+0x81e/0x9c0 08:07:20 syzkall[ 228.376716][T10870] ? find_held_lock+0x2d/0x110 [ 228.378354][T10870] ? exp_funnel_lock+0x1a4/0x3b0 er kern.warn ker[ 228.379666][T10870] ? __pfx___mutex_lock+0x10/0x10 nel: [ 227.8026[ 228.379677][T10870] ? exp_funnel_lock+0x171/0x3b0 [ 228.379691][T10870] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 228.379702][T10870] ? lock_acquire+0x2f/0xb0 24][T10870] bon[ 228.385525][T10870] ? exp_funnel_lock+0x13c/0x3b0 d_mii_monitor+0x[ 228.387182][T10870] ? exp_funnel_lock+0x1a4/0x3b0 3c1/0x2d90 Nov [ 228.388894][T10870] exp_funnel_lock+0x1a4/0x3b0 12 08:07:20 syzk[ 228.388910][T10870] ? __pfx_exp_funnel_lock+0x10/0x10 [ 228.392411][T10870] ? __might_resched+0x4ca/0x5e0 aller kern.warn [ 228.393699][T10870] ? __pfx___might_resched+0x10/0x10 kernel: [ 227.8[ 228.395442][T10870] ? lockdep_rcu_suspicious+0x2ee/0x3c0 [ 228.397278][T10870] synchronize_rcu_expedited+0x290/0x450 03931][T10870] [ 228.398736][T10870] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 228.400711][T10870] ? dump_stack_lvl+0x1a1/0x1f0 ? __pfx_bond_mii[ 228.401992][T10870] ? dump_stack_lvl+0x1a3/0x1f0 [ 228.402003][T10870] ? add_taint+0x5f/0xd0 _monitor+0x10/0x[ 228.402016][T10870] ? __pfx___might_resched+0x10/0x10 [ 228.406503][T10870] ? dev_deactivate_many+0x260/0xb20 10 Nov 12 08:07[ 228.407896][T10870] synchronize_net+0x3e/0x60 [ 228.409522][T10870] dev_deactivate_many+0x2a1/0xb20 :20 syzkaller ke[ 228.410855][T10870] dev_deactivate+0xf9/0x1c0 rn.warn kernel: [ 228.412436][T10870] ? __pfx_dev_deactivate+0x10/0x10 [ 227.805782][T[ 228.414204][T10870] ? __sanitizer_cov_trace_switch+0x54/0x90 10870] ? rcu_is[ 228.414222][T10870] linkwatch_do_dev+0x11e/0x160 [ 228.414235][T10870] linkwatch_sync_dev+0x181/0x210 _watching+0x12/0[ 228.419457][T10870] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 228.421781][T10870] ethtool_op_get_link+0x1d/0x70 xc0 Nov 12 08:0[ 228.423485][T10870] bond_check_dev_link+0x197/0x490 [ 228.423502][T10870] ? __pfx_bond_check_dev_link+0x10/0x10 7:20 syzkaller k[ 228.427154][T10870] ? rcu_is_watching+0x12/0xc0 ern.warn kernel:[ 228.429180][T10870] bond_mii_monitor+0x3c1/0x2d90 [ 228.431279][T10870] ? __pfx_bond_mii_monitor+0x10/0x10 [ 227.807420][[ 228.433092][T10870] ? rcu_is_watching+0x12/0xc0 T10870] ? trace[ 228.435112][T10870] ? trace_lock_acquire+0x14a/0x1d0 _lock_acquire+0x[ 228.437300][T10870] ? process_one_work+0x921/0x1ba0 14a/0x1d0 Nov 1[ 228.437313][T10870] ? lock_acquire+0x2f/0xb0 [ 228.437321][T10870] ? process_one_work+0x921/0x1ba0 2 08:07:20 syzka[ 228.442734][T10870] process_one_work+0x9c5/0x1ba0 ller kern.warn k[ 228.444991][T10870] ? __pfx_bond_mii_monitor+0x10/0x10 ernel: [ 227.80[ 228.445007][T10870] ? __pfx_process_one_work+0x10/0x10 [ 228.445018][T10870] ? assign_work+0x1a0/0x250 9191][T10870] ?[ 228.450942][T10870] worker_thread+0x6c8/0xf00 process_one_wor[ 228.452738][T10870] ? __pfx_worker_thread+0x10/0x10 [ 228.454490][T10870] kthread+0x2c1/0x3a0 k+0x921/0x1ba0 [ 228.455576][T10870] ? _raw_spin_unlock_irq+0x23/0x50 Nov 12 08:07:20 [ 228.457334][T10870] ? __pfx_kthread+0x10/0x10 [ 228.458916][T10870] ret_from_fork+0x45/0x80 syzka[ l l2e2r8 .k4e6r0n0.3w9][T10870] ? __pfx_kthread+0x10/0x10 [ 228.460052][T10870] ret_from_fork_asm+0x1a/0x30 [ 228.460068][T10870] [ 228.460074][T10870] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 228.460082][T10870] CPU: 2 UID: 0 PID: 10870 Comm: kworker/u32:18 Tainted: G W 6.12.0-rc7-syzkaller #0 [ 228.460095][T10870] Tainted: [W]=WARN [ 228.460099][T10870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 228.460106][T10870] Workqueue: bond0 bond_mii_monitor [ 228.460121][T10870] Call Trace: [ 228.460124][T10870] [ 228.460128][T10870] dump_stack_lvl+0x3d/0x1f0 [ 228.460139][T10870] panic+0x71d/0x800 [ 228.460152][T10870] ? __pfx_panic+0x10/0x10 [ 228.460165][T10870] ? show_trace_log_lvl+0x29d/0x3d0 [ 228.460176][T10870] ? check_panic_on_warn+0x1f/0xb0 [ 228.460192][T10870] ? rcu_note_context_switch+0xc5c/0x1ae0 [ 228.460204][T10870] check_panic_on_warn+0xab/0xb0 [ 228.460218][T10870] __warn+0xf6/0x3d0 [ 228.460230][T10870] ? bpf_ksym_find+0x127/0x1c0 [ 228.460240][T10870] ? rcu_note_context_switch+0xc5c/0x1ae0 [ 228.460251][T10870] report_bug+0x3c0/0x580 [ 228.460265][T10870] handle_bug+0x54/0xa0 [ 228.460275][T10870] exc_invalid_op+0x17/0x50 [ 228.460285][T10870] asm_exc_invalid_op+0x1a/0x20 [ 228.460299][T10870] RIP: 0010:rcu_note_context_switch+0xc5c/0x1ae0 [ 228.460311][T10870] Code: 79 00 4c 8b 54 24 30 48 8b 44 24 28 8b 4c 24 10 e9 c6 03 00 00 c6 05 53 c1 d2 0e 01 90 48 c7 c7 20 a5 6e 8b e8 f5 1d d9 ff 90 <0f> 0b 90 90 e9 a8 f4 ff ff 38 d0 7f 08 84 c0 0f 85 2b 08 00 00 80 [ 228.460321][T10870] RSP: 0018:ffffc900045573b0 EFLAGS: 00010086 [ 228.460329][T10870] RAX: 0000000000000000 RBX: ffff88806a83fe40 RCX: ffffffff814e6e79 [ 228.460335][T10870] RDX: ffff888026c3c880 RSI: ffffffff814e6e86 RDI: 0000000000000001 [ 228.460341][T10870] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 228.460347][T10870] R10: 0000000000000000 R11: 000000002d2d2d2d R12: ffff888026c3c880 [ 228.460353][T10870] R13: ffff888026c3c880 R14: ffff888026c3c880 R15: ffff88806a83ee80 [ 228.460361][T10870] ? __warn_printk+0x199/0x350 [ 228.460373][T10870] ? __warn_printk+0x1a6/0x350 [ 228.460386][T10870] ? lockdep_unlock+0x11a/0x290 [ 228.460398][T10870] ? __lock_acquire+0x2167/0x3ce0 [ 228.460407][T10870] ? rcu_is_watching+0x12/0xc0 [ 228.460418][T10870] ? schedule+0xe7/0x350 [ 228.460430][T10870] __schedule+0x297/0x5740 [ 228.460443][T10870] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 228.460460][T10870] ? __pfx___schedule+0x10/0x10 [ 228.460473][T10870] ? __mutex_trylock_common+0x78/0x250 [ 228.460483][T10870] ? __pfx___mutex_trylock_common+0x10/0x10 [ 228.460492][T10870] ? exp_funnel_lock+0x1a4/0x3b0 [ 228.460505][T10870] ? __mutex_lock+0x7ca/0x9c0 [ 228.460514][T10870] schedule+0xe7/0x350 [ 228.460526][T10870] schedule_preempt_disabled+0x13/0x30 [ 228.460539][T10870] __mutex_lock+0x81e/0x9c0 [ 228.460548][T10870] ? find_held_lock+0x2d/0x110 [ 228.460559][T10870] ? exp_funnel_lock+0x1a4/0x3b0 [ 228.460573][T10870] ? __pfx___mutex_lock+0x10/0x10 [ 228.460581][T10870] ? exp_funnel_lock+0x171/0x3b0 [ 228.460595][T10870] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 228.460606][T10870] ? lock_acquire+0x2f/0xb0 [ 228.460614][T10870] ? exp_funnel_lock+0x13c/0x3b0 [ 228.460627][T10870] ? exp_funnel_lock+0x1a4/0x3b0 [ 228.460640][T10870] exp_funnel_lock+0x1a4/0x3b0 [ 228.460653][T10870] ? __pfx_exp_funnel_lock+0x10/0x10 [ 228.460667][T10870] ? __might_resched+0x4ca/0x5e0 [ 228.460699][T10870] ? __pfx___might_resched+0x10/0x10 [ 228.460711][T10870] ? lockdep_rcu_suspicious+0x2ee/0x3c0 [ 228.460725][T10870] synchronize_rcu_expedited+0x290/0x450 [ 228.460734][T10870] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 228.460744][T10870] ? dump_stack_lvl+0x1a1/0x1f0 [ 228.460753][T10870] ? dump_stack_lvl+0x1a3/0x1f0 [ 228.460762][T10870] ? add_taint+0x5f/0xd0 [ 228.460775][T10870] ? __pfx___might_resched+0x10/0x10 [ 228.460785][T10870] ? dev_deactivate_many+0x260/0xb20 [ 228.460799][T10870] synchronize_net+0x3e/0x60 [ 228.460812][T10870] dev_deactivate_many+0x2a1/0xb20 [ 228.460826][T10870] dev_deactivate+0xf9/0x1c0 [ 228.460839][T10870] ? __pfx_dev_deactivate+0x10/0x10 [ 228.460852][T10870] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 228.460867][T10870] linkwatch_do_dev+0x11e/0x160 [ 228.460880][T10870] linkwatch_sync_dev+0x181/0x210 [ 228.460892][T10870] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 228.460901][T10870] ethtool_op_get_link+0x1d/0x70 [ 228.460910][T10870] bond_check_dev_link+0x197/0x490 [ 228.460922][T10870] ? __pfx_bond_check_dev_link+0x10/0x10 [ 228.460933][T10870] ? rcu_is_watching+0x12/0xc0 [ 228.460945][T10870] bond_mii_monitor+0x3c1/0x2d90 [ 228.460960][T10870] ? __pfx_bond_mii_monitor+0x10/0x10 [ 228.460972][T10870] ? rcu_is_watching+0x12/0xc0 [ 228.460983][T10870] ? trace_lock_acquire+0x14a/0x1d0 [ 228.460995][T10870] ? process_one_work+0x921/0x1ba0 [ 228.461004][T10870] ? lock_acquire+0x2f/0xb0 [ 228.461012][T10870] ? process_one_work+0x921/0x1ba0 [ 228.461022][T10870] process_one_work+0x9c5/0x1ba0 [ 228.461032][T10870] ? __pfx_bond_mii_monitor+0x10/0x10 [ 228.461045][T10870] ? __pfx_process_one_work+0x10/0x10 [ 228.461055][T10870] ? assign_work+0x1a0/0x250 [ 228.461069][T10870] worker_thread+0x6c8/0xf00 [ 228.461081][T10870] ? __pfx_worker_thread+0x10/0x10 [ 228.461090][T10870] kthread+0x2c1/0x3a0 [ 228.461100][T10870] ? _raw_spin_unlock_irq+0x23/0x50 [ 228.461113][T10870] ? __pfx_kthread+0x10/0x10 [ 228.461123][T10870] ret_from_fork+0x45/0x80 [ 228.461132][T10870] ? __pfx_kthread+0x10/0x10 [ 228.461143][T10870] ret_from_fork_asm+0x1a/0x30 [ 228.461158][T10870] [ 228.461645][T10870] Kernel Offset: disabled VM DIAGNOSIS: 08:07:28 Registers: info registers vcpu 0 CPU#0 RAX=00000000002e92f1 RBX=0000000000000000 RCX=ffffffff8b238489 RDX=0000000000000000 RSI=ffffffff8b6ccfa0 RDI=ffffffff8bd1b380 RBP=fffffbfff1bd2af8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c7025 R10=ffff88806a63812b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de957c0 R14=ffffffff905f5988 R15=0000000000000000 RIP=ffffffff8b23986f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc991a67d60 CR3=0000000030df0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080000000 Opmask01=00000000ffffffff Opmask02=00000000fff80080 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffca84b690 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000025e70b RBX=0000000000000001 RCX=ffffffff8b238489 RDX=0000000000000000 RSI=ffffffff8b6ccfa0 RDI=ffffffff8bd1b380 RBP=ffffed1003b5d910 RSP=ffffc90000187e08 R8 =0000000000000001 R9 =ffffed100d4e7025 R10=ffff88806a73812b R11=0000000000000000 R12=0000000000000001 R13=ffff88801daec880 R14=ffffffff905f5988 R15=0000000000000000 RIP=ffffffff8b23986f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055f2257a1e20 CR3=0000000030df0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000000 Opmask01=00000000ffffffff Opmask02=00000000fff80080 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffca84b690 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b9b05 RDI=ffffffff9aaebc40 RBP=ffffffff9aaebc00 RSP=ffffc90004557410 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000002d R14=ffffffff850b9aa0 R15=0000000000000000 RIP=ffffffff850b9b2f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd5d2467d60 CR3=0000000030df0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000600 Opmask01=00000000ffffffff Opmask02=00000000fff80080 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffca84b690 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000002363a7 RBX=0000000000000003 RCX=ffffffff8b238489 RDX=0000000000000000 RSI=ffffffff8b6ccfa0 RDI=ffffffff8bd1b380 RBP=ffffed1003bd0488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d527025 R10=ffff88806a93812b R11=0000000000000000 R12=0000000000000003 R13=ffff88801de82440 R14=ffffffff905f5988 R15=0000000000000000 RIP=ffffffff8b23986f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd5d2551f98 CR3=000000002f818000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000080000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000f7ffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff3e569340 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3438312e392e7a79 73223d6d6d6f6320 30373532313d6469 702020726f662000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3432312433247073 7322376767656320 3037353231376463 7020207265662000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6420730000303d5f 6d646173696d3a65 6f20663d623d6573 616c637420745f6d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3220240000303d55 2237616765632030 32203231373d6370 2020636520203420 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323b243c24707379 2837676765692a3a 323f383b376e637a 2a2a78656c2a772a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6b797379307855 676e6b797379307e 656578377e726f7e 6465697e2a7e5567 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000