last executing test programs: 4m27.13139363s ago: executing program 32 (id=784): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) syz_io_uring_setup(0x5c26, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440), &(0x7f0000000080)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x40000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@map=r3, 0x4, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) sendto$inet6(r2, 0x0, 0x0, 0x4, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=@mpls_getroute={0xc4, 0x1a, 0x100, 0x70bd2c, 0x25dfdbfc, {0x1c, 0x10, 0x10, 0x8, 0x0, 0x3, 0x0, 0x9, 0x1200}, [@RTA_VIA={0x14, 0x12, {0x3, "039addd63a6e2bfe1e48f41d4a66"}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x6}, @RTA_NEWDST={0x84, 0x13, [{0x80}, {0x2, 0x0, 0x1}, {0x1}, {0x7}, {0x6, 0x0, 0x1}, {0x800, 0x0, 0x1}, {0x7fff}, {0xe7c9}, {0xe4, 0x0, 0x1}, {0xfff}, {0x81}, {}, {0x7, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x9}, {0x7}, {0x8eb, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0xb4}, {0x9, 0x0, 0x1}, {0x6}, {0x15b}, {0x1000, 0x0, 0x1}, {0xffcdb}, {0x401}, {0x8001, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x1ff}, {0x2}, {0x2}, {0x8, 0x0, 0x1}]}, @RTA_OIF={0x8, 0x4, r5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xfef6, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRESHEX=r2, @ANYRES16=r2, @ANYRES32=r0, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x26000801) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'erspan0\x00'}) 2m46.030939513s ago: executing program 33 (id=2615): r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0xf, 0x4, 0x0, 0xfffffffb, 0x1000}, &(0x7f0000000180)=0x98) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001900010000000000000000000200000000000009002e"], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4898) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0xe, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), 0x0, 0x0, 0x13, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) connect$packet(r5, &(0x7f0000000480)={0x11, 0x1c, r6, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) ioctl$VT_DISALLOCATE(r4, 0x5608) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x101, 0x6}, {0x7c4, 0xe88}]}) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@in={0x2, 0x4e20, @empty}, 0x10, 0xfffffffffffffffe, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="30000000000000008400000001000000fdff0200008000000800000003000000010000000100000003000000", @ANYRES32=0x0, @ANYBLOB="20000000000000008400000002000000490f00020b00000000080000b726c6bc01f1b55ac756e283e89fb4fbf9f2a8f48c2401bc5877b672", @ANYRES32=r1, @ANYBLOB="18000000000000008400000006000000050000000000000020000000000000008400000008000000ff010000000000000000000000000001"], 0x88}, 0x8002) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000480)=[@in6={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x1000}, @in6={0xa, 0x4e21, 0x58b1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}], 0x64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x200, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {}, {0x0, 0x7}}}, 0x24}}, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x45) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x3c}}, 0x24000000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0xfffffe91) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @remote, [0x0, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x1c}, 0x0, 0xd0, 0x110, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@cgroup0={{0x28}, {0xfffffe01}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x2}, {0x1, 0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) fsetxattr$security_capability(r10, &(0x7f0000000200), &(0x7f0000000280)=@v1={0x1000000, [{0x1, 0x6a}]}, 0xc, 0x0) 2m42.999081216s ago: executing program 34 (id=2668): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x11, r0, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e22, @private=0xa010102}, 0x10) (async) futex_waitv(&(0x7f0000000d80)=[{0x1, 0x0, 0x4}], 0x1, 0x0, 0x0, 0x1) 2m11.091433883s ago: executing program 2 (id=3126): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) r2 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x400400) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r2, 0x82000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x0, 0x42) socket$inet_udplite(0x2, 0x2, 0x88) 2m10.888946848s ago: executing program 2 (id=3127): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = gettid() r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000580)={0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x305003, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r5 = socket$packet(0x11, 0x3, 0x300) r6 = syz_open_dev$sg(&(0x7f0000000080), 0xffffffffffff0000, 0x161e02) ioctl$SG_BLKTRACESTOP(r6, 0x1275, 0x0) r7 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r8, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r10, 0x2, 0x6, @local}, 0x10) sendto$unix(r4, &(0x7f0000000300)="f722d26a01ce3c07a813d4893b4093835bc8aeef45cdca56e5f2107b2403b3fcceed94397e01fb3a85718049eb9b40c421b614906c176b01fdbbbfb60fd9f59ca129509a43100ca252551437bd799fd524a8aa1a142eece9315b7dca56b33c8f2856366a36b260497bcc6031cfdec5b60c11df4fd710df5f97ca24a52e7e79574837633263868f3103810145cd39a484b066ff24a3a50b3da3c6c54f68cddade346bbd0eff78af2ffc61e9483f943c23bfe908e1fe0ffe439d7634f7860de2ba53f1eea1dce98de4cf4c8bcc366fa358204a503bf0b0024f7aa44e0eeb", 0xdd, 0x4040081, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2m9.969719031s ago: executing program 2 (id=3134): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="130477605813fed5a167629a8d453c6b", 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000200)="b8010000000f01c166b81c018ed036660fdfdc0f0f92e40000009466ba210066b8090066ef66b8c5000f00d866b813010f00d08fc978c216670f42d366b83e008ec8", 0x42}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000080)={0x2020}, 0x2020) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x57c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x568, 0x1, [@m_police={0x564, 0x21, 0x0, 0x0, {{0xb}, {0x538, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x4ad6, 0x20000000, 0x2, 0x3, 0x3, {0xf1, 0x1, 0xff17, 0x101, 0x7, 0x4}, {0x8, 0x0, 0xfffb, 0x3, 0x10, 0x3}, 0x3, 0x7, 0x9}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffd}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0x100, 0x6, 0xff, {0x2, 0x2, 0xeaba, 0x1f85, 0x3, 0x6}, {0xe, 0x0, 0x0, 0x4, 0x7, 0xea}, 0xfffffffb, 0x9, 0xffff}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x100}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x22d1c973}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x10001, 0x7, 0x10000, 0x8ad2, 0x8000, 0x1, 0x2, 0x0, 0x400, 0x7, 0x8001, 0x8, 0x5, 0x2, 0x7, 0xfffffffb, 0x6, 0x2, 0x0, 0x400, 0x6, 0x7, 0x5, 0x7fffffff, 0x10, 0x9, 0x2, 0x10001, 0x4, 0xb69d, 0x0, 0x2, 0x8, 0x800, 0x108d, 0x1ff, 0x3, 0x7, 0x4, 0x52a, 0x1, 0x100, 0xffffffff, 0xfffffffa, 0x5, 0x2, 0xb416, 0x8168, 0x8, 0x9, 0x8, 0x5, 0x8, 0x7fffffff, 0x5, 0x4, 0xfa60, 0x64b2, 0x516, 0x10001, 0xfffffff9, 0x2, 0x1, 0x40, 0x4, 0x11bf, 0x181, 0x4, 0x4, 0x3, 0x1, 0x1, 0x5, 0x4000000, 0xa, 0x5, 0x81, 0x4, 0x2, 0x74, 0x5, 0x8, 0x4, 0x0, 0x3, 0x8, 0x101, 0x81, 0xfff, 0x0, 0x5, 0x80, 0x8, 0x7, 0x0, 0x9, 0x3, 0x7, 0x4, 0x4, 0x4145dc75, 0x4, 0x9, 0x5, 0x0, 0x9, 0x80, 0x10000, 0x4, 0x7ff, 0x204, 0xffff, 0xb, 0x6, 0x5, 0x8, 0xfffffffe, 0x2, 0x3ff, 0x8, 0x8000, 0x4, 0x4, 0x5, 0x7, 0x9, 0xa, 0x0, 0xffffffff, 0x6, 0x0, 0xcec9, 0x6, 0x1979, 0x2, 0x9, 0x5, 0xd3c, 0x9, 0x7, 0x49, 0x6, 0x92, 0x4, 0x2d45, 0x1, 0x1, 0xff, 0xc003, 0x9, 0xfc25, 0x0, 0x8a00000, 0x297, 0x2, 0x4, 0x8, 0x1, 0x81, 0x84, 0x40, 0xfffffffd, 0x1, 0x1000, 0x5, 0x1, 0x6, 0xfffffc00, 0x7, 0x8ccd, 0x0, 0x1, 0x7, 0x8, 0x8, 0xffff, 0x0, 0x8, 0xf4d, 0x63, 0x1, 0xffffff9b, 0x17b, 0x0, 0xd, 0x101, 0x0, 0x4, 0xfffffe00, 0x6, 0x5, 0x1, 0x9, 0xe5, 0x2, 0x7ff, 0x3800, 0x31, 0x1, 0xb0, 0xa000, 0x1, 0x4, 0x5, 0xa, 0x848a, 0x3, 0x100, 0x2, 0x4b91, 0x10000, 0x9, 0x0, 0x2, 0x8001, 0xd, 0x1cd, 0x7ae7, 0x2be, 0x4000000, 0x6, 0x8, 0x2, 0xbd, 0x2e11, 0x80f, 0x3ff, 0x6, 0x6, 0x800, 0x800, 0x4, 0x9d, 0x4, 0x4, 0x881, 0x5, 0xd, 0x1000, 0x5, 0x7fff, 0x3, 0xfffffffe, 0x577e, 0xfff, 0x7, 0x8000, 0xd27b, 0x7fffffff, 0x425b025e, 0x8000, 0x80, 0x5, 0x0, 0xc]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x1, 0x7fffffff, 0x3ff, {0xd9, 0x0, 0x800, 0x2, 0x0, 0x9}, {0x7, 0x0, 0x149, 0x6, 0x2, 0x2}, 0x1, 0x101, 0x800}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffff8001}, @TCA_POLICE_RATE64={0xc, 0x8, 0x24}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc3}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x57c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 2m9.77707273s ago: executing program 2 (id=3136): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) (async) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m9.776813563s ago: executing program 2 (id=3137): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) (async) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) (async) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) dup(r2) (async) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000001080)={0x0, @ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, @llc={0x1a, 0x118, 0x74, 0x8, 0xe3, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x8, 0x0, 0x0, 0x0, 0x4a2, &(0x7f0000001040)='gretap0\x00', 0xfe, 0x80, 0x1}) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc8}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000240)={0xe, 0xb, 0xb75}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000440)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r7, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/229, 0xe5}], 0x1, 0x9, 0x2) 1m46.889711162s ago: executing program 7 (id=3526): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x35, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x40, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x24, 0x1, 0x0, 0x1, [@typed={0xc, 0x6, 0x0, 0x0, @u64}, @nested={0x14, 0x19, 0x0, 0x1, [@nested={0x10, 0x47, 0x0, 0x1, [@nested={0x4, 0x146}, @nested={0x4, 0xb5}, @nested={0x4, 0x7e}]}]}]}, @nested={0x4, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000380)="e6d6af", 0x3) 1m44.493843606s ago: executing program 7 (id=3553): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(aes-aesni))\x00'}, 0x58) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x1010, r0, 0x80000000) 1m44.405952124s ago: executing program 36 (id=3553): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(aes-aesni))\x00'}, 0x58) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x1010, r0, 0x80000000) 1m31.177634073s ago: executing program 3 (id=3776): syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3e}, "15712669d11924db2d8022624fdf14474a62fe01f117a5c77556c7b5d52380537b6e654814867f58482bd3cfe6be3681a62628d29b2072be55fc089df407"}, 0x42) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002540)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)="d306c5", 0x3}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x20040005) 1m31.175660069s ago: executing program 3 (id=3780): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (fail_nth: 9) close(0x3) 1m30.224074957s ago: executing program 3 (id=3789): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getqdisc={0x28, 0x26, 0x10, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xd, 0x6}, {0x9, 0xfff1}, {0xfff3, 0xf}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_io_uring_setup(0x5456, &(0x7f0000000080)={0x0, 0xc489, 0x824, 0x2, 0x23a}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x11c, &(0x7f00000001c0)=0x98c9, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) 1m30.162977946s ago: executing program 3 (id=3790): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x120000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)}}], 0x1, 0x810) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000140)={0x1, 0x0, 0x5}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000380)={0x2, 0x14, 0x4404, 0x1, 0x1e, 0xa, 0x0}) getsockopt$llc_int(r4, 0x10c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4204, r7, 0x202, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 1m29.799237333s ago: executing program 3 (id=3795): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xf2, &(0x7f0000000580)={@multicast, @dev, @val={@val={0x88a8, 0x1, 0x1}, {0x8100, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "003a04", 0xb4, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], "0369ff769e59985225da9eb49bc260040d744033a80cb346129bef695dd6309e2378a62631020b83b4dec3373cfbfcda20bd5b0d180b94b4378659f325b8a05874b8b06f3756ea41334ced963904c305e5632b7080690fcee454df7b562337109365f84fc00ce326b864d5d3f4a61b27c2f41b4eafadde3f14acc976782f7d4e67284a51"}}}}}}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3000013, 0x10, r1, 0xfa3b000) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000850) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000380)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r4, 0xc01064c4, &(0x7f0000000400)={&(0x7f00000003c0)=[r5, r6], 0x2}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xffffffaf, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010325bd70000000000009000000bb14d7139207881577d0ba3917148a975a0fca47cdb2a27eff0816906d50e7e0d0121c562fcc32009394cbe7cc4010718280f0b0ede802e8092ef7667be520d2380fc332d561d024f74a3e722df06f4bfb0ea64de7f9475f685a0b58414a5605e0602ce6317e4999fb1f0f196fd1a002b6a809148bf5fce80b640d216db27f8f31cbeadf65810287d68b6ae84a0203"], 0x14}}, 0x24004040) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 1m29.295832102s ago: executing program 3 (id=3800): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r3 = socket(0x200000000000011, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010000304000000000000000000007400", @ANYRES32=r6, @ANYBLOB="f3ffffff031201002c0012800b00010062726964676500001c0002800800050001000000060027000000000005002d00"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m29.255864878s ago: executing program 37 (id=3800): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r3 = socket(0x200000000000011, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010000304000000000000000000007400", @ANYRES32=r6, @ANYBLOB="f3ffffff031201002c0012800b00010062726964676500001c0002800800050001000000060027000000000005002d00"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m22.451807452s ago: executing program 9 (id=3897): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) chdir(0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) setxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000500)=@v1={0x2, "67e1924f0a2ffac5"}, 0x9, 0x3) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) close(0x3) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1501, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69c8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c714f66", 0xfe7c}], 0x1) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000000), 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1000, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) recvfrom$unix(r8, &(0x7f0000000340)=""/129, 0x81, 0x12000, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) 1m22.118175781s ago: executing program 9 (id=3906): r0 = socket(0x1e, 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000000)=ANY=[], 0x35) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x1, 0x0, 0xfffffffffffffece}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close(0x3) 1m21.071293344s ago: executing program 9 (id=3928): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) r1 = openat$userio(0xffffffffffffff9c, 0x0, 0x80401, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b2a, &(0x7f0000000040)) write$USERIO_CMD_REGISTER(r1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, 0x0, 0x4) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) openat$cdrom(0xffffffffffffff9c, 0x0, 0x391000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x100, 0x180) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x670, 0x5, 0x3b0, 0x178, 0x270, 0xfeffffff, 0x0, 0x178, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'nicvf0\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x7}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x5, 0x5, 0x4, 0x4, 0x1], 0x6, 0x1}, {0x3, [0x1, 0x0, 0x0, 0xc, 0x2, 0x5], 0x4, 0x1}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x88, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) 1m20.141225882s ago: executing program 9 (id=3950): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="280000001c000501000000000100000007000000", @ANYRES32=r2, @ANYBLOB="0200a6000a000200ffffffffffff000063c641b944214a34548d8128dbf9dcf1d92706135118e2590fc579011abaeefc283be8a0e67e2a82822c5fef704c57b346ee04"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0xfffffffffffffeff}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000340)='sys_enter\x00', r3, 0x0, 0x40000000}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x2c}}, 0x20000000) close(r4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r7, 0x8008976) fstat(r3, &(0x7f0000000200)) socket$kcm(0x10, 0x2, 0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r8, 0x0) fallocate(r8, 0x0, 0x0, 0x1000f4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000003c0)="d6f15aaa38d7dbe15626cdef988cd2e458deda7fd2788d48e009a398f30d5fc7b220459b1630bbcb57b7c9b61ecf7447d1fe852a069369336bf5cb717f912d7f11187efcf1c099e5738b67da40899d59b5211e87b2f3a0d26567ebb15ad9ac3540462485fded244d90933c78b9468ba5e5597b910f569cc44273d36ea07950af6943c143a6729ed39003147a4ab778be2ff35cc9ca7c1e8237f341e2b754a5d4c142339be3cb41777a6481ccae8d44a6fba1b1a2354941d712b3ce411e5bb4a0c0c58970a0fbb6044dbd1d64ddb48e07fe28df6577eea91f1cedd97d39d00205d388a9162362a647ea1cea47face9a1be4d4ff5fc2ea53e1", 0xf8}, {&(0x7f00000004c0)="a6d6c0ca629e4defdd7a4abe1af735cf68319e0039fe50d30701d54b84ea588ced12008f1a9410c518588931a17e76a2cb19106010b4a60b97af9c06461552a24ed005736db4fab1c0be7d12ced0ba18598126", 0x53}, {&(0x7f0000000540)="2fc5898508ee056c219c93d31cbdbb483262a9637cc3c00a62717ce16184a51faba2f9b1d441bbb85562daffd6c62daf6ba83df80337f13389a152b162331248e113c5384686eb082a5d7ffe57e1cc72693ebf5c4d2b74897cf5774447eb1a8ab23080ce2b2544f71345ae11160b508f0fc335041e7d98", 0x77}, {&(0x7f00000005c0)="c3de9f754b55d6049d83497d18a7d23ee8a1ab3beab33b811bcb0b27e0541ccf45f163d185517dbae97bdb49b549e03b3df4c3fdda4f6c4c1d126cf505997c3e87ef4e862ceff3bbfe8b544e510e7eb97c3141c994ac1210be09e99827d9b81036475146b89b4e44a5478e770dbb09e0b2565ca841f84e07a1faa6e8dd0a3bfb9703db313c36236e12df27ce71788bf727dbab1fcdf1d1d9fd6160ea442b39113520a500159a23b23521f1c4a3caaefb6489412936c5", 0xb6}, {&(0x7f00000006c0)="296ca09973820b80aa731e972c3495afd16236a2e7fefa20e3dee2442bc6de0586d12cfa7770049e089bb196ed90f1f1b2fd1f90db752e5050f07c2b60ae382d6ef379b6d8338bfff49cbcf0aa0aa1d28ca1e2c00c823c563d2f4ede8e1719ab10221d0e1cbb4c899f1a696add0f044b98e98e5fd395ff879a973893c784189db4bd53c41acaadeaca3969f87b000f8266534308b967bd5ce3a3ee47f179645bfa41589b0e2be29730c048c7bd8b7887acb308b414b235490649571a4144646707edd56129a651da81f1788d15f8adca8c4d883b985de2d258cd3ed08a2500e85c9e41c5a648f329c5dbe51e1dc4d8dbd3ade5d49db8272336afbf9525603b0bbe5393431a6c791575ea51deddd1fcf55530b3b6eb16d0dc851de1d292def5532ce431075d00587c47d9dd5973f050640d75d7981b1403d7bbc657f9c9503a556d75bd29f34df20fb2d5959bd603a8e902afaf310b3a0e8ad6baca6b5b52489ad5c3921549add4edb9704296c0a2dc51f2960e26387a3b4be080e6dbd41bce6199c35d18dcc90d43ce86b1c245f705e6c9da014ad76079be00d589f8083f3513a0e4ecf2d6702b9cfc58ee431df616e8a4785aff6d4d1384436baafb033ea64493d3935cd1e4f826add8cea897fb2de04351a31f4264e3459d7ecbc7f96116bf36815322b7d6e5d121defa2dc345248b3cabef4f4460c5256a8f7091312d83e2c46bd4be8dadef6e747c685be36905829935604e4dfa1ecf711e2b4a2ce472f69c3d0dbdf2e7add4b7b75a17f600f0d47afa55a9925527332767a6ce2b4deeb2c5f7ba03d22c4a237dbbdbf21c7b855c46321987d8eeb27c51dc0b5b011dbcd256a24822b417bbb8fdf452f69ff1011afc0c66791443ceb7cc9bb46d5d9ea762231e9186963d1944e69117d46cc50d815eb854398d0a1a5e334bb112717d2573d94290d97d625f6e5bbcc63303a911c2b482a4f87413c668cb4a377d5b37a2260bc18677bbbad7b39eadd6870b078a3e2d213366f2d06c93bee56b962caf99e29d9616bdeaef4fae7f067747c809e47c137a890d897533c9751026eba628a01ecd9546fe7a26f7f5e5b3572d1da9b52f95cd20e870c2f7f6b7cb96aaa047d10d706f9789f59ed49fc0e9ab4043d9aefe442579a51bd4ba05a2f587e53cf6e84d73bcc0fcf2867eed0e0d85c4930429c25faacc57bbf94f80d33c500152588744afd97633f451032766a3bae92cfd1312020959343884f341d6dfc7e4d595442dfe2d13c3796cbf1591aaf5285eae03b5d8fab7ac9a9915d40a3e8be124a61a7af61ce24787801acc33c9e688151a67272289749c148bed3528252821864c43e7854798eea6480180d80ee1f71f378994bd19e7bff2f705b7348589aba3da6923028b3a0f30ff133a196fa7b08e329663bc9ee0ed1d63ae4f8309ff7f86fd1c8461ff6c607db4112f21645444e2bd1045972895b44c8eaa3a6190af5a6cc3ed4803282af1cd69e9a4ce86742ea6cd28145f138fd9eed9e4721e8cb1a5a25999e4809847307b01a6dbe49c234a2a608225f9620b045cb7abe97c7e9fb6f217e6ee2d33695905aa68c4fc3c98346b58da20791028c32d1221754691eee7cd9ff4af500fc74b1ce659aaf830f6bde4c66abf2854d7a619a19fe77d387920764d60c8ac92fe89d9e4bd9290e530a75da90261ad10a3ba3639fc6ba83f25e8a5d2ecbdca6bab28b3cf43eb297b1cc81287663ff4ecc0ad327400cd1b8d7c3f96c79aacb24e9f7dfc0b3bec494c59f570b05bc7dc56c5c8194a5d4785ca81192eb3a570a64d785d507dd1090c493d032998bfd10706f8e073441ddd7958e1af7b84e41b071d9f516e234249e83818bb62f7021b6a378f1cc239fca889391ca1de40b0c5aa75d179c93e87637995d379ae86d6ac5f0aa6d0a6aeca1beb0b88ca72cb7f4fbb3f61862b54ad919dd3acbc60a7467cbb4d1cda1cfca0209093e7387b3c664b90119a1e6102b2e25ef1d231c17b9d39d4c9b5e31fd6ecfba07f1533b3cd14dd7be950c92c988eaef402fc0d249f0fbf7279e9b983296491cfe0e78300e4edb23b2343980c3a60630e632852e6b8e4eec723a0e4ada6101acaf05ff15d57b5656d08b03a19f18a917710b5dbed997c72a76afb3a1712e0452bd52d7d9c8b2b52e3bf9d4c48331791116c53973395dbc8f91ae98ce93db3fa2e356bc34f6d804518a0f49e2874c4f6eb5b4f01e60418a135efdd914874da76ce71e3bb95cb1b04a7a446c01bd574151731e9aad375a36c648a63efdc778d0b6d79145a76cb0b37accb6a2385b7ddec7f3f506a888311167850f4ad14d68f0f214c2d18804ef04aa5e53fea4306a06ea604c28d06a451c55f1fea89f84674d06e1097748a5a601dd11cfa30e4c6b2d197c4ca409435f30d4087eead81d8810a2c93b9ee240b8d3df3dbd3ee64ecee61ce671452dbdb0567c364e671aa2dafa7f4fc4af5f1da6834fe8e6fbccb0650094bc1ae44b8c817ddb944aec9dbb9d907caf1312b284d612904a5f3d51ed5a4702b5b7d8a279fedd862877ad486459fbfd03754f8691f53a534a5439c5c2d29dd754bfd7e4bb5ac7431d94d26132942e083679ae5c880b1cbf0d46dda9d836124c22766546cf093f75a6d6d600b791dfae0984a175e79e649b9dde8b36dae819a55aa7c3ef3369d133ea4acde68a295574461eeccee6c9e183418a163d0571f77473a07900f826a5a81340201233fae2aa8c3a5a0cdb669fb3b3099b4c77faaee65428946fb6007bf2878eda0dfaee19ddd1f8f3d0c1485ae4da10d19012e691eded94f1a966b88498a0fb6f0eb050c7ef5b59f908f422695785e8248745c0f0e99c72e0c718f143dfeb3718e92b701f18960f46112cca593c70a0eda616968cd0ac6fe56cb380dd4a3ee5f77fe8367735112df7d6e145128fba61f860ee7a8ae22f9893bb14e0e1ac9d48af1426d47f3ced53c5bd6001a1a7ce11367189dbabaf03942887f45f35935ec0e85ec7dc98cfaf0a403df974376b7f8bab594220a2f67332f7ead3941df64a36ad1f120a8b0d0c06dcbab737cb5b33343d4522c9880b39462d5d1070ed30711aaead7abcdede82af69d5b2a8712ffc8f51dd79855c65b926e79157123ce869e20762c558b17677a9dff110698b38b929b7258bc9a61dd2d8a17c01d2bfefe414e22ef903d8b6b0cf1d06986b52d2fcaf9f9f68b74b283b743a634e00885b563e87a8ee92d7e1e303bb867d2ade659f8e35655448999b653a1889705d9e51bb5b78fb3e3749561c4b52261587500b076ddc463ede436db6565bb58737c158ce218cab4be8e9dab6dee7b151a820ca9389055f7937792b47c19f523eeded45e2babee21f1a585ab21646bd6e06ff8ff29c12d5a90eef4e7777acba2cc70a6fe31cd40fb33e1db66bc2c999e00df7585a83fc6ff1afd1efbce3fb88158e8ae8f015a56fe950d1ce84d7a2b5682d2fea874eb476e38d090144e7e628dee22e2806d280097f493355ea6aaccf2fbbaddab6e528d24adf0e0c1e4b89036ae19d65837700415ed14dfc2ccf979835f355f16a0a41f790e0785c6739c0152d3e1376231cb1d39a5b61c762858105c9edc43b64e18b0fa39d792c0a77637196e92d55e4699c20436e266b94591ad9d1db3278728ceb9be1d02526eb1df4b8eeaa2000f6667c8c96f6bdaeb7af6f4fd7e09f5740f2a8c27c4cc2764d979600b295781bf1ac7230cf98400f3a9dd2cc1c982a5df6c060d5789bfb04caa772fa3e3b513e65ea0c0b0c2043f06c7f4e9e0f3f56b4d1eb8db27a3e104d4eff7dde7ac1aa94a0f998134470dcbf4382915b99c72658fa26872f4b94ffd552bd6fa7149dc08eab7f9d8c537c4ca80b9515dfad165d9db3a22bc22a124fa698e25570633db1f80154043adcd5ec0a02faf6304b264cd099b0cc330ae6dc77424a1ca8091333d71c08b7ccb47fcf0afbc10f72cdae6e1ff574fa2b68f6b12aee4a16d82806d62e2d6c4440585503e0d5da7883eb1221d68f9b9f17f9f98c093435c52cac81bb268d64bbe4afca86e5e608148d24317d1ca095f5d543e22ee922e212bd50504bf585c8ab9755442eb58a091e133b80fb179a2711c6896933b53953275319bae9d5a96fcb9f0cb1e217501cdd98819e3658ac32204ad95f8dfa46c824c5d5c09814d65e96c99b5408c71c36b0cf76ab8c3e1db649114abd9c2470e2d4d049771d0903b908a649a3efb1fba96acdae141db31ace45468b32bac41fb85f42a6b77640ba87b1df0047d8ab69528c357e5a960c7bfdc405daaec5a8ee0e731bced60f3ce64f20a583dca5615ef50f74d5390dbb15d08f9b49bd8103f2d1f9ee54ebc664e2758e69749c4cab858b094693c5d18d13463e9f2f6651222c6eede3658887b55d8fecfde947f5b8c8dbcdfb1002732530cf5c5cd51816ee1fa61d41bb37a7a03952799030a5a9817ea3f7dcab149ba0e710c84f24ce70393ced7ab50c58e6ef8126575534bfc4c80e542cf92e5c235c62950bad6f31e8dd3544d5bc42b19f3ccf18bec741970e45a9b6180ca66517d9178f1103166dda466eb2476364feb77dea8ff718b99abcd6c253aee16863c503d9748e813244a8aa597e93a8f8ff42839d26d95166df2327435e466e81fd6c482c383a2c1d208517aad72106f728ef470604111876b75e092b8f6a1cd2e52f09537d6e7c3a73b2081ebe9c141295b7b93ab35ce31796559c9908b196f4b2897a071e47b88bb432e59deb0b6c7455bdd2e127711b650b70641d229f2919b259217619b2f7d4b5cf3802d573c71e43d99f2de89c00dc941302bf2f28daf01947ad25238dd286e1c097cb958c1fd37142b90d3b5120a428bf4613b56155d73e3f668b104e515ec0b908fdc370d97ae972a0c11e79ab77f617ced559c1f9edcfde4fd2b4fe02a960802137bc63685ce26aad91b31676474523545f8cc572e4601651a4fc567081ed4ff629e9a6b8ac52396e7395039b43246bf8c7271725373f57feb5cd61b2b0f4c979ef68141c2f1a124296b301d58025f7a15e5ba6a7a273670cfd5f255bd602ebdeec006fa383fffe32c26c13b8101a35bda1897c3a283048d2777ff9e825d26a7544f85b684e7af333f1c8fd47f0645f9c381a1079c71a6229d0b52d5bba3ab45e62904e5dff28ef4f6096cf46d48a272e2d025a49001c0eff6fbd73d5ce5d9805e4a90d8dc6b67e3a12b39cf26ed38d5622d4dc1fe5b50e55ff4bda7087054aeba4f198d6ee5ee39ce6680e27a9447981e4cbce80ebfe0ea3701d7b4ec38ee43774e29b7d21956007924c552ea852f20ec52f990e8cf89351be6a023b44c77e6041ca31d1dbdb4f9787fc519b3056a55e4a56e2c504cfbe9bf37f4272dd2bf1913d9cd359d6d66c17077484a349bf3a63300774ca8146f329d1b7c618436a7c565395bf1ba669f1519ce467def682e9ae228ae1d80758f3c7a750fd560cc8c48f3c452275397ab3d5f950d160b748f9adc38b56dd65bab32f6c3bf50a68757bfa73691107a2b651683de1cd94031833dfedccad21432e2242bcdf0309ba868235dcb9167cdec7c539b2cc909b7c13ea311ea6400230503085485a6c28b6a1b91b312e415065a387ff7d70574f8bf769581e442aa289378059a6a95fe2ed688c7c675892ecd4c58d3c9c0c2e47d2d69193569dcd8b967932953b201edc0078eacd94414f6c7fcfa1a08d1f8aa663f41d9215a32009000b31cab7c65db05be95fa311bb305dbe87707fba7d1aba68e4fad6eaff86c119b5163", 0x1000}, {&(0x7f00000016c0)="72e13d9d0622f936fc1bcebf484ece83e1d5d66becbd32908a37bbccb964de364e9bc46891387c9439e2a40b7676cbafc308a68b18bb6436a69a4916979936b03826580c2e905e7a785e7780d59e27e1185205016ca561", 0x57}, {&(0x7f0000001740)="b09c34eb7534d93a6fee71fd04d7021113150f4bed0972323f04423bf58f34ead179a4cb9aca4b66dd6893f297a0e8e7d2384324e35925c8", 0x38}], 0x7, 0x0, 0x0, 0x5865}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2e, &(0x7f0000000380), 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m20.077157791s ago: executing program 9 (id=3952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%ps \x00'}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'ip_vti0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x7, 0x7800, 0x1, 0x1000, {{0x1c, 0x4, 0x0, 0xe, 0x70, 0x64, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x1f, 0x8, [@rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0x17}, @dev={0xac, 0x14, 0x14, 0x33}, @multicast1, @local, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x2c, 0x13, 0x1, 0xa, [{@loopback, 0xc}, {@broadcast, 0x3}, {@multicast2, 0xa}, {@multicast2, 0x7193}, {@multicast1, 0x5}]}, @ssrr={0x89, 0xf, 0xda, [@empty, @dev={0xac, 0x14, 0x14, 0x14}, @private=0xa010102]}]}}}}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x13, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @generic={0xff, 0x9, 0xa, 0x6, 0xbf}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000900)='GPL\x00', 0x0, 0x37, &(0x7f0000000940)=""/55, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0x2, 0xbe0, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[0x1, 0x1], 0x0, 0x10, 0x7}, 0x94) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) sendmsg$nl_generic(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000cc0)=ANY=[], 0x2fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x48010) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x8, 0x12, &(0x7f0000000540)=@raw=[@exit, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @generic={0x23, 0xa, 0x4, 0x8, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @exit, @map_fd={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f0000000600)='GPL\x00', 0x8, 0x94, &(0x7f0000000640)=""/148, 0x41000, 0x1, '\x00', r5, @fallback=0x8, r6, 0x8, &(0x7f0000000800)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, &(0x7f0000000bc0)=[r8, r9, r1, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20048080}, 0x80) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') r13 = memfd_create(&(0x7f0000000040)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbc\x04\x00i\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\x02\xf1\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10Dh$P\x99\xbf2\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9aY\xbb\x86O\xcc:8\x7f\n\xeeAS]\xb2\xb2\x1b9K\x92\\f\xfaf\xaaG\x1fK\x90\xdaK^\rT\x8cW\v\xda~\\-u\xc9\xe3\xef\x1fvL', 0x6) execveat(r13, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) lseek(r12, 0xae7e, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) 1m19.874007452s ago: executing program 9 (id=3953): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x4f27, 0x3, 0x3, 0x401, 0x80001, 0xc88, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x40802, 0x1600, 0x7, 0x1, 0x9, 0xe1cb, 0x6, 0xfffffffd, 0x4, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x5, 0x4, 0x8000000, 0xdffffffd]}) (async) splice(r1, 0x0, r2, 0x0, 0x2000, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f00000001c0), 0xd21, 0x101800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000300)={r5}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f00000001c0)={r5}) (async) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000440)='qnx4\x00', 0x200013, 0x0) (async) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x80103, 0x0) (async) r7 = socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000380)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000480)={0x2f}, 0x8) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000200)={0x89}, 0x8) (async) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) sendmmsg(r7, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) (async) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) (async) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x80008, 0xffffffff}, 0xd0, 0x9}}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20007, r0, 0x1}) (async) r10 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a50000000120a09f50000000000000000020000000900020073797a3100000000080004400000000f0900010073797a3000000000080003400000000a"], 0x64}}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r9, 0x8030942b, &(0x7f0000000180)={0x8000000000000001, {0x11, 0x7, 0xffc1, 0x80, 0x100}}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) 1m19.843726079s ago: executing program 38 (id=3953): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x4f27, 0x3, 0x3, 0x401, 0x80001, 0xc88, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x40802, 0x1600, 0x7, 0x1, 0x9, 0xe1cb, 0x6, 0xfffffffd, 0x4, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x5, 0x4, 0x8000000, 0xdffffffd]}) (async) splice(r1, 0x0, r2, 0x0, 0x2000, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f00000001c0), 0xd21, 0x101800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000300)={r5}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f00000001c0)={r5}) (async) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000440)='qnx4\x00', 0x200013, 0x0) (async) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x80103, 0x0) (async) r7 = socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000380)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000480)={0x2f}, 0x8) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000200)={0x89}, 0x8) (async) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) sendmmsg(r7, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) (async) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) (async) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x80008, 0xffffffff}, 0xd0, 0x9}}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20007, r0, 0x1}) (async) r10 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a50000000120a09f50000000000000000020000000900020073797a3100000000080004400000000f0900010073797a3000000000080003400000000a"], 0x64}}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r9, 0x8030942b, &(0x7f0000000180)={0x8000000000000001, {0x11, 0x7, 0xffc1, 0x80, 0x100}}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) 1m15.365668585s ago: executing program 0 (id=4054): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000003a002902000000000020000002"], 0x14}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) 1m15.363057407s ago: executing program 0 (id=4056): openat$nullb(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (rerun: 32) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f0000000480)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async, rerun: 32) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async, rerun: 32) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x4008) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) 1m15.082137674s ago: executing program 0 (id=4058): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e9, 0x8, 0x0, 0x0}}, 0x10) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) r1 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000ffe000), &(0x7f0000ffe000)) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setresgid(0xee00, r3, r3) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x2, &(0x7f0000000180), 0xfe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$caif_stream(0x25, 0x1, 0x4) sendmsg(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=ANY=[], 0x3e0}, 0x44) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 1m15.004339347s ago: executing program 0 (id=4060): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x8804, &(0x7f0000000180)={0xa, 0x4e23, 0x400000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x800001}, 0x1c) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000804) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r3, 0x4a0, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x235}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_DATA={0xc, 0xc5, "0824bc53d3718f1e"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2638}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xb331}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x10000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0000ff060570020000000000000000000000fff1000000003d1cba2f46ff8b1da9dadcae7a7d6c5748cff7e788537a309fd66309f9be22ea4feff21a6f2d1cf1d721d97d9ae2f759cedfe9394974e98bea6e99bb9e8c04b6882aaa72b08da65c92239e887e13abaef77fa0429c4af25e5db1738a589c420fb30df87c5dd62e320f28ba68e008e1f800e39349bb20bd6644c1f4b0c2a3f04c8006bd1bec3a716e7ff55f4376a32136db291ffa642894e4dfbc5fc429565f2b1d31453810a05866706dec11a4c58058e8deccb4a967fe6b82a9a9f8914b98c6b0acdc54bef0bad204afa9385aab5a516b82d434b89798cb282ab8fcd40b7476c74e2bb84792b5f086900ddc05a97f7e49355290b9e8208b0740a6ee00688e69141146cd889a1cc4e2eb9c882109bf40fccc4009ed0972ba9eb638751c8d4ab673553990211c83c6f672171fd60cf60dde1f253e0489ebc16f548038858cc3225d1aa458640b7b22f1e98a2ead1c4499dc97f194d387d175d12526e9345f5917cae68b35ce6e59e26372772ad978140311cc815201714a353aeccc80637fed260a2fcec4ca8ead0e43ee0fe4c05bafcfdd45b08a5961798f29d3ccad9d5268836a41cc7173eb4d81dbd21bd1c55317523f495f352575048f7fd564e9137dab5ae1899c57fa5dda7ea7f5371da8acd47ba5a95aacdaea88d8a07400e2", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c000280060011004e21000008000a00", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 1m14.927289424s ago: executing program 0 (id=4062): move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000180)="d8e90fc72866b9040b000066b82e00000066ba000000000f306536123dbaf80c66b82e04928466efbafc0ced640f015a000fc739baf80c66b86807fa8166efbafc0ced3667640f01c10febaa0700", 0x4e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 1m13.756027669s ago: executing program 0 (id=4090): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x7, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000010000790900000004000000184000000300000000000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) (async) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x5, 0x800}, {0x4, 0x6}, {0x0, 0x0, 0x800}], 0x1f4, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00015ea15b4a08000000"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r7, 0x40046}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) landlock_restrict_self(r4, 0x0) (async) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r9, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) (async) r10 = dup(r2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$BLKCRYPTOIMPORTKEY(r10, 0xc0401289, &(0x7f0000000240)={&(0x7f0000000200)="8bef0cba4b383270aa74ec7d123c7a762b88a81f", 0x14, &(0x7f00000002c0)=""/106, 0x6a}) (async) write$tun(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="00006afc56b5", @ANYRES32], 0xfdef) 1m13.701581725s ago: executing program 39 (id=4090): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x7, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000010000790900000004000000184000000300000000000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) (async) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x5, 0x800}, {0x4, 0x6}, {0x0, 0x0, 0x800}], 0x1f4, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00015ea15b4a08000000"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r7, 0x40046}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) landlock_restrict_self(r4, 0x0) (async) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r9, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) (async) r10 = dup(r2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$BLKCRYPTOIMPORTKEY(r10, 0xc0401289, &(0x7f0000000240)={&(0x7f0000000200)="8bef0cba4b383270aa74ec7d123c7a762b88a81f", 0x14, &(0x7f00000002c0)=""/106, 0x6a}) (async) write$tun(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="00006afc56b5", @ANYRES32], 0xfdef) 1m4.001485738s ago: executing program 5 (id=4273): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0x2}, 0x10) write(r0, &(0x7f00000000c0)="1b0000001e005f025145e9676a2cbf0dffffffff01000000000000", 0x1b) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) readv(r1, &(0x7f00000025c0)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/239, 0xef}, {&(0x7f0000003040)=""/4096, 0x1000}], 0x3) 1m3.927214102s ago: executing program 5 (id=4274): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0xe) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000000), 0x4) r3 = dup3(r1, r2, 0x0) sendmsg$kcm(r3, &(0x7f0000002780)={&(0x7f00000001c0)=@qipcrtr={0x2a, 0x3, 0x7ffe}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000240)="66ebb0d939285a86830c635ebf531dbdc170737235375c504e5c6cf06c1d7bec701822f40d8fb52a07596fb946284f7574916ba6f2207c5d942602063757e67cd751c34176198efbbad987b340680687e29141c205858e835375b2b1f38ad488133e933d051397a1fb8680ab0f48c6a4a87189945ddfa21810a01edc57d3f8a2242b6c874698458a0b8cd39362eea05f5684ccf98d1a5c1ef399d19b4189cb89e8b52d918dc0ac89ecd1d65edecd57909eb5ea45c929d1c6702a0c98fd0d433e9a01f41460d730aca0f43726e47d1989c6f889053565a57cf0877d22e4", 0xdd}, {&(0x7f0000000340)="facbfe32e8c2b1c6210cbc2660866d75d8903cdff789c46411f08c8f4e215acd4bebed0083a719b95a179df5479625b01874d963331543a9989ad61064302fd97a489231d1f396750c4770d117ed3ecdc8c24a24f0ca5d9dbb224a62f472f1566d849421fe367837fdcd9c090ad4e23ad1087ff1ee000b82259a4eeca4580b8ad29a27b74a36ee54bf7cce60530a3118ff07ce466362da6286af79c2c4cf188b390c03303818b4e8a8b8a63455c7d3ce7029aa0d4e009172badd0d2c2bfbe008f0ec8e4a37f3adabdf269bbb36113eb66361612d3102d80dd5fbe3651e474840891f8afa443c5c07c38a21dd813f733271b10c31f55403d4d7f05627d09affd071be0abd6e128aeccdc404bb9200471207e98d185717b9e724ff79773f9851b4eacf03a827f8a5470bc3a2e6e82afe6d3ffc7f8024371fdb6f64da9cbce5a55f253e95c3c898f0eed8da7cf18d2eca8777a2975d95b8bada97a1302bf2049cace0b73589cddcc9263c25f14cfa0477ad8c411bc58a6bfe463a3cf5fb79f3b2492682e1b81a49878f8e89f80e40c115ccfa450c5ceea6873db12b6d3a7ecef7a13022fcdcd5188ce2bcf569c0ea13458d1ca5b3f651b475480eabbfde8c3b43ab1f336b2126dcfb4c4b41914e953282c39932af94cfc677002091d78e450a9951f5f69f6740c9a3d49456a7f2aee4ebf1b213b4e7d9e7556ca7e26678b07ae1985ede3953ca3bde0e60aa83b81671f955543eb898d8cb317e859f5f45445e8930c7347b1bd904a1a5b9fa5e57449728ef6ad415ccd2f8bf1672185ca0f32b69996e3311df5754e4c0d0a68abf19d66f6c58ae43ca286e14e07656fd613be31ec55376d4801f477edce753c791b15f79753d1d962c129240da16c9b43f6d55d1c39979429f6da424595ed8323c929ea4cbbdffe514cd5df3202964995d3f6f9a8f148d76de4f851c938421fd8428bd9cbf647b47eda632b6480406585d32db69b312b1c7b12dc9eb7316aab4c9b36e7615b39f255a21325e21e69a2e35a7a0bc545dc0e9f9cbbd1a367deef22b9977229959c43c02c91a2c2a830d186bc1c77024fdb644ec008ecffd254d17bb40844952c208eb87535bad99ec6ed7afb3f779ea42e388f08c857610a4205a95578314ed912961ad1db21176a19c607c9f8dd8b20ff4cf59082eff83a093f6dddf675eda4b7b6507335b29bbb026ce5b5918a7e12b626cb1ddb35be2a47a11906183f525aee08f2c97d92ea3db61ca072a0214634440c6bd25b8da4c9db9af9c6a6cc211c018fa66d78c7f94bd3874ee2238feca0a52c2aeadbd4bcbfba656278b09f71232acea0c960a60b334b54def89c5697d769a0414c96f59f26df5525361aa88f6f42d76511d2b1026b00ba62ebc66b79d9794573fa3a8c1edaadfa86ef6bc6cb79a6a1dd8a052facb61ea2970fa901953bb56a0111b56fde81feccd027f07548dcab0ac95a176d7dda8e42ca3f7842f68862d2911644fa7f9db7dbc6ce136ba131cf17858b6038596a27caf9f9ff0d50ae33091a276c186a6cc488e0f618b7e8ac5c4dca9405d9ba765060ca658c100bcb885cf2f4212698a6634dfe5cd536efc1fe3fb447d0e31e08104c056eeebb3bd5a29fb6830397fe79d39b80f9f53f27e38590c98b6e5ce4c64f959a3c7d3063144d1f751bbbb4c503a48f78dc591a557794d1deb1dc29ec222f807920aaace4a89072c0a5315e64706fc47fe4f023aa79a0dc617a70a4970bc2135bfa8336d217037cde3f642856efee24739cd6132759c7da8259d96c8eb52443ce7de914c814411486c5ebce67fed5e6f522d964f7ecf02434644d19e01ee784a00dde9ba663e9162d95e8de9ed885daddf126d99e207ab884b43c3718d9309b2630c9d8a18d406eb4315d039038494a74816c2892fce1f335bbca2eb0ab3e5b450d6d2b07b4009b1dd37105ac0f57dc24c2ba113c2c5a30d228befac56f83de393dc473db0e0a8d387caf31fd601dc9917d903d845e7bbd6191b42b02084feb6589d7705027307b214c6b6686ee05ad7390a26ae51acaad92bace477fc7609a451a66c72d0bae5fffa9e78a5433c3388691500cf7c2a1934c4e382b8c2a8d104710163667ee760cbeccf8156e7296cbda02c6a442d3a6a9da46f76d642a772d16971cc2b3cc85f2b55e3e962c391a86bc7f0d6a47f2d2e1ddf77be6f1b343a4ef8179713c618d3170db59dc40bf740cbacaa66dfaf94b5e37f056fb399f92f8b6a45ca0a30765feb2bf305b01b6d3b78a92079542582f1de8b95109c9bedae05a1d9301645856e314eb1ba8b0bf780e733582a5f7a2ced9e52530eee03a52121b9d05a0a99f0eeb5717232e887d3b5aac4c9975a59a158008a8a5089c252b17b3908ae0dbb76785d4ddaa1e87d69130d18e31b02cac650b0f371615dce75ec0130fb0be366d67cd91b3e166ede3056ee71a4146892b4b52a7c09d0592748fc897654c9be2aa6268264fd626a56fc61e1a3c4f4e29ed7f3f882d19dcebbe183108574329b88ff31bc595fbbc6108b9f0097fb1723a489e54b491882ab84bc993b7671bf202e87593971f45d0676177b399dfb523eaed3dfebbf17ff0d802d2c0074df178850e66198d9c18adeb27c416859cc773fa7ad1e8589c2bcf0035fa923573a6dfa9936cb5d3c477b8f8afa5d00323828aee548c9b4751f50bb79844181c51c12919d0b8ec6fddf3dfc766053003327693c12457839f935e3c07c918619b76254af2e608c9b165ac4530e56fafa92fc91dddbdaa9d41af0c6ab9c621e64e4ea939743d4772de804cc22534c37382cd10fcda80ae39e650bea6c671b14e9cab8e1c4483a883cf46f29a65b03e11462792c0ea5e67d409da7ad83ef54b2ba7e1bcaf655a68a07bf383a0bae16b9bc1aac22844833d85d683dd7b83d192ff0a6036ee8dd8989e0e9c1bdc6e8b844025076413c4b47bb1e1df4ac1faf481cec3a0162d0250e9fcbba406ee637edebcc2cde2345c2bb8405084f97cd86244dabda25f7b30707d9746872258082accb70142ddfed28c853aad4fbb797c3c4485518ca4cefc6b960d66a13e35cb3b94fed2b2cfcc12653ee0ecc6d93d7f6a6ebbe46fe319ab27131a42dfee6ff2db7092f3a30b77932203e183026f76041bc5b9cd3c212d763490cf785d57bd2a21d4951bc0e490dc43173ca81f7f2cfc7746df10986dba8be96bf551197f471401cc6d9b262133b66a13b12c744f9ebf90c7e1b1c1186e8851e44cb1b3f902aed0262ca9d9a1e94bca6577e79209609819b18e9b8258f895bc40df49b7facb5e99308a094ba6c009c92b305e9ba1be40ee441bb571a356be272ca201b805f021b1029c0b12fe301a81907219d580f29c7bafd70405f7aac44f477dd65c415a8582525e4a7f1489b3ded52228cea1eaa3c1ce741e2d34e0d748201c59e32012daf3ffee6516a08fac2a5a41fee69216489dfbac4cc43b44ca888ebc7cf564c4553370e448abe3dd947d1f6ba66eaefe95fd6db616aa72b50affe7e7b60acb6815a9ebd8ed4fb70f8202cfe8217d591f456e39e0f6dcea0e71852f770a9bef368301a75a01872c3edee37d0b88af5577002c6367d3b0712429bf33c516d8c980841f3061117aeee62c32ef25fbbe1ea2c8d0b6646b43032626934d43f824642ea55b8d344bbc7f337933f6372ff86eb13d1fd7cd359767fb53b25cfa875136077e7eff8a4348329da5160b267c7c9044e57cecaa7dc7b2539a73321c65ad863bd3f8077181c63e3c3df1c52e01b3d7c53c28715cbe815d92525c6ce3ce449b00662811e38b8230f9a542fa01eb94b52b076cb2c39e7b33b2e0962715f605c50595274ace7a2ef8877072c8ef4166724d26aa1e3e96a817245e121465f2c8c6b71952a47ef8e4994531903a8527617437a46a3f4d65821ea37b280036995fb3244aea6d1ca3b6a90c63a0661c4de3d95ea0f1bd8bc9e4a0c755f1fdbfeb770f585280cf570adf3814462da0b6d7864ecd9c59d8fdad32a8551accf26783437b38d4ad75d2255fe3ef693dcfe563675160a5ec2aaddcb9670b2ce53947509f4f72b3097d62f356db1e656763896ed6ffe5a83660b15b5bb6caef9962bcda758f4f150ba996842fa10e2e0feb29ae7f1e2e558586a2f3eabec3e87ec10ee5fc8f265e6cb28aa86551676b8d9ccb7f6002ebfeba33c7552ed8ff20c1f4fbc9f184d6ec19f8bdd68cab5e44710830eb76f8517144fe5ec461d9ccc6c7f0af3b82c107df78f868adbb21db0333344d24a4b36a88d7d6c29c2dd5608d61ac947857845f2b944894640611caddc57a0f1d3b75fbb23696a9e0df0b6384f26cd301b2a82e9221d60637adc24544756d942e9a65a545b036d6018d9443142e0556b192ee64678822c64d64423a67eaa513d4ec52b0971e9e6cbf1f6e556498b4da8142add4625d463c34f8f845ee99f0b1f6a6164faf26614123747b04dd993c8a5228577404d8a7723c3a41d2fdcecf5e7ae918581fdb7014e99745d7a16b43e35e12adb379e2c9c25f732e3807deb5f10744adcc363629e8220060b519c878242cb577715afe44771f97bc8e152be871785a366a53c8c4767598d035d1768d6dde71b2dc5988b68015029e07be9be5f2630357fd3040d5b6ea0b5d843760170281cfb519829acb5244dd277ab3876398292d729bbbee57d70fa7c90250f4eb6004d2310b230d0500d8e9668be65dd1ae4983ffced8b0507cbe5ed2205768db506ce5418ef7fa3f3fca9ad2c5d34eb33cc835da82ce96d588585c17cd6268114e7388009dab042b3223581bd205daa4f2be5aa14ed61fe90010d5c04e47dc49dc3905fe78d07e8d7c205b88c1227e500400a0f5f3cdddc654b4e49f6c9fe0264291e621ecf585bd9564cd76bf056150a74aaf73439fa480968bc67e4b1d3126068046c760c5a3992d3f0d2ec61c8d41e6fb2c9b1fb7bbaf9fd2c6529c1777e8c2e6f7995b75fd5f48a626a6fe35bca03becec900851d03bba6ad3c686868faacbeef239a669e2db7e2c4b62b911c43b966294aba3c3c65220711dcc483ca8833d89be046ea5b49c3e53baf60d836935c6d70d33b240215bd962a2a63d43d70d0d211a9bcf37d1190e27d039d5538ba60005104fca66decccb6d9ffb60377fd32b944c850617072b399e7a26e592dc772e79e983c2d431ae0c112ebba0c462bdb6a556894360ac2610bde32b14c3a57068769eab443917448ef9b49e9cff37d51196ef055d8bf0a413b9072ef74744f40b3ee4a6c8fb83e26cb4d322eb47ca3bd1f9e883d590d5d0b59f740c5cd50df32cbca696668736f4bc91ba01fc6f5907a41f52909ff86f3ddbca14a9506ae6c663bbff5fb936e60248dfebfe5869899ffe5e8a9009eb2ba28b3d990bde553c70a2009cbe7fec83cb0d7e8cf08c7199f8684bea060692184d61c83d9bd1742519fb87c02868276a3b11d723f0c78410d7043889d98d4b06a170dbf0aa64d929d970107917cc101d980309756461457a9e37dfba29d265322101a8850aaee7ab180c5906d840e47eee3ad1577c87ea7e3c7c00aaf4a6cfd93276e587aaa20e9600f74aa52551f3c128d46f8003727d9f05dd5dc82da34e68471f19cc8a61ebb2749d477171d3f45178fc7fc0c4815f688377933f8241cd26c615b4d0a528b5fcbcea3cab3759f579e5f19b6fc244391eea2c22ab1f66d504b315181a8b347abf5d185515466e7dceb3f2c05971493091395849ddec553ee48b770646aaf3b9ba30eaadc1ce3fbe7bc23e51abd4290f8", 0x1000}, {&(0x7f00000000c0)="8c7fd841375b10a0a9d531d19c380e", 0xf}, {&(0x7f0000001340)="9bdc231a810382ac9b3596ce7f0f3211b9e6586b2d1388e223684245cb3f0c8823b6d76c11c54a27730e473e5b8625a2f71befb8bb44e6c3e76358100f0cc8b5dfda8b752a22f64cd47576ad8a1ba5d758df570ad31e5c7550fe110350379345d44c81ba295299bb4fe891ba32211d66", 0x70}, {&(0x7f00000013c0)="ccf50b49965670e23af0afdad8284720b33a4af052cb1e1cede08e9cc7798eb2f8b176696b6575dc686fd5116f256837", 0x30}, {&(0x7f0000001400)="47081698b63a36240b5ee98062b9a93e4b68485f9b98750caddff487e2983acc9a6a78a7c4fc0f4076a62d25f11d26cf9ef40c89e349c684ce0a6e7d92141304a2921e2cdf59c2ad321976f159f2161a26e08a92702a7ffb78f3e84cb183242c41c99b2661167a0361576f21d001d7224e17b3", 0x73}, {&(0x7f0000001480)="093f052ea428477cf82cd26d69bb02422ab3e90d27d571001fea55070dc6d6515f65510ca0c0589f90a414ee8b0002de95ceac281f015e6292adfbb46316c71666061d2b59cf820828465d69ee910b8247d9d52b1a84b798c7e95c3f09e18528bc3ab29a2847acb1fc8d6190aaae19c5b7eb5278ff7c6a30cdc29b9b4045d09cb271fc21d5c07c95a6c6ee31e90d58a4287a855cdb22fb5f2185eef12800f8c5afe176617e2693ef00a13e828f224ff96e518f8813db0b5489d794418933ce0dd1865793e6723d80e422dce60a02111ac3fa7cf32740eaf370610ff41e7ef7adfc8d60a8b9ce8fb80ccc174a241c8013ecaaad6e613997e2d4a5d4f4", 0xfc}, {&(0x7f0000001580)="339bcb58c83f4c0c0f2eddba62aabc5c3780a71eca819270feed5d", 0x1b}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="e571af015c532510bf1ca84d30c0f8fc504f29d52b0b350b847ae636179a02e438f18d38e799944fdfda4c52ca61426bcce4ea0c90b3f3334aff66178bf5749cee1d4372f0b8b5aba49cf744ad94d571e8d3e4637290cc6a73bc1bbd6982a21d0d9b0ecd1893ec2bb04bd761dcf533465a085ca0fb1d3c05d6056d26819e6fa8a14a8967173e16a311231bf7b9175406c544a71d502e7fad0243c37ffb5e22992df31e08bcb7a7206f3437621dd8c4d8c22a3078b524a26f576f5a82172f1e3f29b512663f18cbc3d68b04924c", 0xcd}], 0xa}, 0x8000) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x60, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2d}}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'nr0\x00'}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x60}}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) setuid(0x0) linkat(r5, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1400) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) accept4(r4, &(0x7f00000027c0)=@qipcrtr, &(0x7f0000002840)=0x80, 0x800) bind$tipc(r0, 0x0, 0x0) 1m3.840809652s ago: executing program 5 (id=4275): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)={0x3c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc8d1}, 0x800) 1m3.84008416s ago: executing program 5 (id=4276): r0 = syz_io_uring_setup(0xb7f, &(0x7f0000000100)={0x0, 0x38ab, 0x10000, 0x80, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="a490d9a18252721c1c67b5e3f809a8d35b5ec36ff719df80b8c2188ad6361b888843c36115ad5df03bf27e2e22b5e805d6701c4b0df0e76585f7f054fb38981aba5f6bbc47a5e3a8d0e7a9a2ffd53225610a24e80c7d89d4bd45d0b382310adf8d96f6a05d8ab74f890282c8479117916eaf7771398f601bc89fd2c703f88e0a60e32cdf31ad3ffea372db563997027142a833deea86c331434525e74867ed890d12243ddc471f65ae0c95a31b761ba3d9f20e690575f8d2f32aaaa38229e46a866239c93c2530a401433986f9cff1fedeb8f96c14c7dffba921b889d976e3628eda0c1200d4660f573bcd9709c9928e30d2488440a848b8e7", @ANYBLOB="8a039a39ff767dbc9294495b10114f69761bf649231cf01bfb7c390971bc5be3a3088ff60d51ce23c1b1cb9e1156c810e7c196eaaa70346c983490d4ee8788e4cfb0b881eb2717dbd3d1c308763a10389a8133c4afd1a42ec7b9f4eb7523c0065a8d3568949cb910e216383407b9fa08acd7005de371c620", @ANYRESDEC=r0, @ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRES16=r0], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xa0, &(0x7f0000000500)=""/160, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x13, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="151fee8fa24f3b44191318000000010000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r3, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="170f6e80dd9e85d5"], 0x8) setsockopt$sock_attach_bpf(r4, 0x1, 0x14, &(0x7f0000000040), 0x3b) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x67) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) dup(0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e1f19"], 0x22) rt_sigsuspend(&(0x7f00000000c0)={[0x7e44]}, 0x8) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000000307010300000000000000000500000d090001"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) prctl$PR_SET_MM(0x4e, 0x2, &(0x7f00002d5000/0x1000)=nil) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x12, r7, 0x0, 0x0, 0x0, 0x40002262, 0x0, {0x1}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x104000008}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fddbdf255100000008000300", @ANYRES32=r8, @ANYBLOB="0c009900040000003d0000000affee000802110000010000d8a80c31fe51b4a28da1760a0006da983ad008cbc5f60005008a00020000000a98f1b0d279bf134abde406000600ffffffffff03f2922366376b19"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) 1m2.953687983s ago: executing program 5 (id=4295): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000fc0200000000000000000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b46b6e00000000000000000000000000000000000a00100080"], 0xcc}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) ftruncate(r0, 0x7824) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @empty, @val, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @echo}}}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x38, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x801) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000004c0)={'syzkaller1\x00', &(0x7f0000000a40)=@ethtool_drvinfo={0x3, "5cb4bb1f8bef75d2a2270818daa01d481d552d950923e5eef64ba2e029a1930c", "1b4fe6cdfa42f817c42bd4bba023fae174c6c5e1af894affffffffffffffff42", "3908009a363c27f764130250199924895052a25a25045624e1b9413d3e6b1a48", "82406dca40dd8b2da19f2098854e8a301a70544257b7bfbfcc0b1996d668e587", "a8d64afe90a1e2dfceb00b98faafbf706f831fc23f50705c924a9b5e7ba30e76", "faa894f280cb3fae829b4a54", 0x2, 0x0, 0x2, 0x2}}) chdir(&(0x7f0000000080)='./file1\x00') r7 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r9]) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, 0x0) sendto$packet(r0, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m1.927259707s ago: executing program 5 (id=4315): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}w\x00\x00\x00\x00\x00\x00'], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x6c}]}, &(0x7f0000000080)='GPL\x00', 0x4}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000400), &(0x7f0000000440)=r4}, 0x20) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) (async) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x20000) ioctl$LOOP_SET_FD(r7, 0x4c00, r0) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) 45.283851619s ago: executing program 40 (id=4315): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}w\x00\x00\x00\x00\x00\x00'], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x6c}]}, &(0x7f0000000080)='GPL\x00', 0x4}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000400), &(0x7f0000000440)=r4}, 0x20) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) (async) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x20000) ioctl$LOOP_SET_FD(r7, 0x4c00, r0) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) 4.939265661s ago: executing program 4 (id=5326): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x3, 'nq\x00', 0x1, 0x4, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x7, 0x7b}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={r2, 0x5}, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x7ff}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) bind$netlink(r4, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfc, 0x400}, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x3, 'nq\x00', 0x1, 0x4, 0x8}, 0x2c) (async) socket$kcm(0xa, 0x2, 0x0) (async) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x7, 0x7b}, &(0x7f00000000c0)=0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={r2, 0x5}, 0x8) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bond0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x7ff}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) (async) bind$netlink(r4, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfc, 0x400}, 0xc) (async) 4.801201439s ago: executing program 4 (id=5333): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(r0, r0, 0x200000000000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2, 0x1, {0xa, 0x4e23, 0x4, @mcast2, 0x80000001}}}, 0x3a) 4.717424403s ago: executing program 4 (id=5337): r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r0, &(0x7f0000000080)=""/116, 0xfffffeb2) read(r0, &(0x7f0000000280)=""/96, 0x60) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) write$binfmt_script(r5, &(0x7f00000021c0)={'#! ', './file0', [{0x20, '\xb0p\x136a\t\xe0>8j{-\x01\xda\xa2r?\x1bH\x81\x1f\xfcoJ\xac:\xb7\xefAw\xc1\xe1\xa6\xebXw\xa3\x9d\x90\xed\xb5D\x06\xc3tx\x1dQ\xf5\xc8\xc5K\x8fL\x81h\xdeI\x1f\xdbh\x95ju1\x86P\xac\x85\xeaU\x8d\xd7\xb2JkF\xf4\xd4\xb2|\x9a\x1d\xdf'}, {0x20, '/dev/ral\xfd\b\x9c\x00W,\xc2#\xf7G\x13$wuMW\x81r~\x00\xdaa \x87\xb9V\xc7\xbbr]\xc6\xfe\x1dr\xc2\xcc\xf5\xd9\xad\xcc\x01k8\x89\x94\xa3\xb1\xbf<\x12\xc2'}, {0x20, 'nl80211\x00'}, {0x20, 'nl8021rv'}]}, 0x5a) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r6) r8 = socket$kcm(0x10, 0x2, 0x4) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003d40), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r9, &(0x7f0000000400)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r9}}, 0x18) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x7}, 0x0) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fcdbdf251a000000050092009c0100000000000000503318382358b9891533990021006100002b000005d7000000996a4190da14110400008004000080"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0xc806) 3.689500198s ago: executing program 4 (id=5355): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffcc3, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0xc0d4}, 0x0) openat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x48d40, 0xe29c24d5808e7337) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0xe7, 0x10001}, {0x7, 0xafe}]}, 0x14, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000003100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r3 = dup(r2) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) socket(0x11, 0x3, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r7, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000400)={@random="f784a01e572f", @random="0c0000000400", @void, {@can={0xc, {{0x3, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "0fd4547bd44fdf85"}}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300200001c00357428bd7000fed3df000000", @ANYRES32=r9, @ANYBLOB="040082040a0001000180c2000001000008000f0001000000"], 0x30}}, 0x80c0) 2.105507472s ago: executing program 8 (id=5376): r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r1, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x3}, {0x1}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time={0x1}, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000120001004e2200"/42, @ANYRES32=0x0, @ANYBLOB="010000000000000000000000000010000800030011000000"], 0x54}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000f40)={"02002713", 0x8, 0x5, 0xff, 0x8, 0x5, "000064640000001503fe00", 'b\x00', '\x00', "64bdac32", ["e86621f22a5200", "0000000000000000001000", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0x9, 0x0, 0x9, 0x0, 0xffffffff, 0x6, "10b700020000f5050000000734c3a86d", 0x4, 0x2, 0x5, 0xff, 0x0, 0x1, 0xff}) r5 = socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000008c0)=@newqdisc={0x60, 0x24, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x10}, {0xb}, {0xf, 0xb}}, [@TCA_EGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x7f, 0x6}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x1, 0x7, 0xc, 0x1, 0x9, 0x2}}, {0x4}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x20000004) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000480)={r5}) sendmsg$nl_generic(r9, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x12800306}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)={0xf4, 0x37, 0x4, 0x70bd27, 0x25dfdbfc, {0x8}, [@generic="383f331d6206ee232138545199a5bb311af34fd53212dbf88c4289289c157bd6fbcfb155e41ad9113d779a34bc2031d90794b7af2be2ef20044b6691159c605129f90a8994696df29ef1db086ea646d47f15fcf2bb486775e95f522919ff22ab631c301965cdd0b5a10a0cccc3c638408734bc7cd61127a1acf178ef2377b7400e293214223cdea7c4040d9375efe6c558e745b95856fec7700ea5880fadcfb12eca07798ddc0542b24cee2e880e82ec8aa822638cf7a62eebb9e65338ce3d16f32849254b702fd1d036dc5d05f046bccd9957f8b37549225a06083518dacf"]}, 0xf4}, 0x1, 0x0, 0x0, 0x48095}, 0x4000080) 2.023059882s ago: executing program 8 (id=5379): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000004c0)={'dt2817\x00', [0x4f27, 0x5, 0x10000, 0x2f, 0x66, 0xcc7, 0x1, 0x80007, 0xa, 0x100, 0x9, 0x1, 0xfffeffff, 0x5, 0x0, 0x80000101, 0x5, 0x1a449, 0x3, 0x40020003, 0x208d, 0x2, 0xd27, 0xae, 0x7fff, 0x8, 0x3c, 0x1b9, 0x6, 0x0, 0xe9]}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r2 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x1595, 0x10100, 0x0, 0x17c}, &(0x7f0000000040)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r1}) io_uring_enter(r2, 0x44fd, 0x3, 0x1, 0x0, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f}, 0x90) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0xc0000083, 0x0, 0x5c56}]}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r10, &(0x7f00000000c0), 0x10) sendto$l2tp(r10, &(0x7f0000000040)="e5786a0d000000000000c83b", 0x5d, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r10, 0x0, 0x12, &(0x7f0000000240)=0x644000, 0x4) recvfrom$l2tp(r10, 0x0, 0x0, 0x20, 0x0, 0xfffffffffffffdf2) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000ffffe1d836838d865c4f195868fc", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128009000100766c616e000000001800028006000100040000000c000200110000001300000008000500", @ANYRES32=r11], 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, &(0x7f0000000240), &(0x7f0000001880)) 1.07054934s ago: executing program 8 (id=5390): read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r0, &(0x7f0000002040), 0x2, &(0x7f0000002080)) (async) wait4(r0, &(0x7f0000002040), 0x2, &(0x7f0000002080)) wait4(r0, 0x0, 0x4, &(0x7f0000002140)) waitid(0x1, r0, &(0x7f0000002200), 0x4, &(0x7f0000002280)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) get_robust_list(0x0, &(0x7f00000023c0)=&(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)}, &(0x7f0000002400)=0x18) set_robust_list(&(0x7f0000002500)={&(0x7f0000002440), 0x3, &(0x7f00000024c0)={&(0x7f0000002480)}}, 0x18) (async) set_robust_list(&(0x7f0000002500)={&(0x7f0000002440), 0x3, &(0x7f00000024c0)={&(0x7f0000002480)}}, 0x18) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000002540)={0x6, 0x3, 0x4, 0x9, 0x3, 0x0, [{0x4c0, 0x9, 0x9, '\x00', 0x1005}, {0x0, 0x1, 0x7, '\x00', 0x80}, {0xfa03, 0x1ff, 0x80000000, '\x00', 0x2a44}]}) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) (async) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000002640)) socket$nl_netfilter(0x10, 0x3, 0xc) set_robust_list(&(0x7f0000002700)={&(0x7f00000026c0)={&(0x7f0000002680)}, 0x6}, 0x18) waitid(0x0, r0, &(0x7f0000002740), 0x8, &(0x7f00000027c0)) (async) waitid(0x0, r0, &(0x7f0000002740), 0x8, &(0x7f00000027c0)) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(r2, 0x0) (async) setns(r2, 0x0) fsetxattr$security_ima(r2, &(0x7f0000002880), &(0x7f00000028c0)=@sha1={0x1, "1df62e87f69cf9073fcff53b5efbebb759adae0a"}, 0x15, 0x1) (async) fsetxattr$security_ima(r2, &(0x7f0000002880), &(0x7f00000028c0)=@sha1={0x1, "1df62e87f69cf9073fcff53b5efbebb759adae0a"}, 0x15, 0x1) tkill(r0, 0x18) r3 = syz_open_dev$vim2m(&(0x7f0000002900), 0x8000, 0x2) readahead(r3, 0x93, 0x9) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002940), 0x80102) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002940), 0x80102) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f0000002980)={0x4, 0x3, 0x1, 'queue1\x00', 0x6}) r5 = syz_clone3(&(0x7f0000003e00)={0x4002a000, &(0x7f0000002cc0), &(0x7f0000002d00)=0x0, &(0x7f0000002d40)=0x0, {0x29}, &(0x7f0000002d80)=""/11, 0xb, &(0x7f0000002dc0)=""/4096, &(0x7f0000003dc0)=[r0, r0], 0x2}, 0x58) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000003ec0)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000003f00)={0x11040200, &(0x7f0000002a40), &(0x7f0000002a80), &(0x7f0000002ac0), {0x22}, &(0x7f0000002b00)=""/135, 0x87, &(0x7f0000002bc0)=""/226, &(0x7f0000003e80)=[r0, r5, r0, r0], 0x4, {r8}}, 0x58) ptrace$getsig(0x4202, r6, 0x100000001, &(0x7f0000003f80)) ptrace$setregs(0xf, r7, 0xadb8, &(0x7f0000004000)="c0886203211605610a28432bef6f22cb89defba763ba568775c955fe4df817dfddd831809c6e826fbff1147e8282e64333204cc447c5f019a6cf88f7a4f14efb647f537dc14168d2c4ed44c61a86db23e74682b46cdc617ee3fe453d99a36f7174f97ca0bd5d5fae29d2c886a0a1a5118cb0ceb35b806a75d3f9b7a6d6571775db3f0f9f4a6b2b27dfe430795b3f2cf0a5efe3") (async) ptrace$setregs(0xf, r7, 0xadb8, &(0x7f0000004000)="c0886203211605610a28432bef6f22cb89defba763ba568775c955fe4df817dfddd831809c6e826fbff1147e8282e64333204cc447c5f019a6cf88f7a4f14efb647f537dc14168d2c4ed44c61a86db23e74682b46cdc617ee3fe453d99a36f7174f97ca0bd5d5fae29d2c886a0a1a5118cb0ceb35b806a75d3f9b7a6d6571775db3f0f9f4a6b2b27dfe430795b3f2cf0a5efe3") write$selinux_create(0xffffffffffffffff, &(0x7f00000040c0)=@access={'system_u:object_r:scsi_generic_device_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x1}, 0x5e) (async) write$selinux_create(0xffffffffffffffff, &(0x7f00000040c0)=@access={'system_u:object_r:scsi_generic_device_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x1}, 0x5e) prctl$PR_SET_PTRACER(0x59616d61, r6) preadv(r1, &(0x7f0000004240)=[{&(0x7f0000004140)=""/94, 0x5e}, {&(0x7f00000041c0)=""/81, 0x51}], 0x2, 0x7fff, 0x3) 1.070242247s ago: executing program 8 (id=5391): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, 0x5f501}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r5, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x38}}, {{&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x38}}, {{&(0x7f0000000340)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf6}}], 0x50}}, {{&(0x7f0000000680)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000b00)=[{&(0x7f00000006c0)="bdd781c8dd0ee0d61937bd1a01f17777c5698267a8d66e9643fe5b8f732bce9b67a473a040a5ba4128c973157ef8bec24c629cd7b486970bd547d7ea51a1649e6db6236d6020192713a16dac771dd95b654e37a29ca3c06e9adf0232cec9cab7b71be4f77ea2198c68ec3f78a8f9b685863c8d5bf66f255270e4f1dd0ad4cc2ab1e89537f730c4b68c29e0c108f72d5fa39d70a5f3e98a3f3f1a124c7edbcdcbc2eb5f882b43824e396bdeda2d169d2d5605ff8b02cecf3539145c3ee0159f07ff3480ff4c3b34ef873b50ae8187ed4a5dbc8643be5d7aedc997206cd5de85e171433fc717217347b0276dda849a2408", 0xf0}, {&(0x7f00000007c0)="2396cfbdaec568f20e9acb93537167f79e85a2155486b3a468841842b60c6afe5f619a33acfd9174f503d5ed6afdff711a116c202e220fb78a5ef206ee06a4818ab3ac1c16696c3bed93a28cd939a5fe64541dabbf4b8793ed46d1e4f7b25d5ac748973739ad1f69132b1d8b1fec70e319cdf8190b26edca", 0x78}, {0x0}, {&(0x7f0000000880)="f65264125ed883beb05e46cd2d2c3983e5b08646d258bc54344f1894b5719bfb8ccafa831a76f7e9c2140720125ec914305718c70484b267c5456bc74a9d309bc7ff3d0dc10fcfa18bb40ea492143bb6ad24f1240113", 0x56}], 0x4}}], 0x4, 0x4000) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r9, 0x3b86, &(0x7f0000000080)={0x18, r10}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900000000000700060064680000080008000000000008000b0073"], 0x54}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="fc9e2bbd7000fbdbdf250e00000008000400040000001c00038006000400fbff0000060007004e22000008000500e000000130000180060002002900000014000300fe8000000000000000000000000000aa08000000080009005700000000008000"], 0x68}}, 0x24000091) 910.406988ms ago: executing program 8 (id=5393): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) ioctl$CDROMREADAUDIO(r1, 0x5392, &(0x7f0000000080)={@msf={0x8, 0xd, 0x3}, 0x0, 0x0, 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000780)=""/222, 0xde, 0x433) r3 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x11, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r4, 0x0, 0x34, 0x0, 0xffffffffffffffff) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xf}, {0xffe0, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x2}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) 674.876648ms ago: executing program 6 (id=5402): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="0f01d12e0f001a67260f01c8260f2006b82e018ec8baf80c66b8aceb088666efbafc0c66b8f619d63266ef0f01c466b9600800000f320f01cb3e0f5130", 0x3d}], 0x1, 0xa0, &(0x7f0000000180)=[@cstype3={0x5, 0xb}, @cr4={0x1, 0x200}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r4, 0x4068aea3, 0x0) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x109e96, 0xffffffffffffffff, 0x400000, 0xd, 0x0, 0x2, 0xfffffffffffffffd, 0x48d6, 0xfffc, 0x6, 0x6, 0x1], 0xd5d5c004}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x10e) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r6) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x804) (async) r7 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) (async) r8 = socket(0xa, 0x2, 0x0) bind$inet6(r8, 0x0, 0x0) (async) mount$9p_virtio(&(0x7f0000000680), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000006c0)=ANY=[]) (async) lstat(0x0, 0x0) (async) mount$fuseblk(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x8b642c, 0x0) (async) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, r2, 0x301, 0x0, 0x0, {{0x11}, {@val={0x11, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 589.986336ms ago: executing program 1 (id=5405): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000000), 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x48) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x48) mmap(&(0x7f00005b1000/0x4000)=nil, 0x4000, 0x0, 0x21011, r5, 0x800000) socket(0x1, 0x803, 0x0) (async) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) (async) r7 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4"], 0x125) (async) write$binfmt_aout(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4"], 0x125) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYRES64=r4, @ANYBLOB="d0d164f96b3ef1c2e8b70104c48307a58062bd75468c20c528cc6093616c6ab24aefc9c491f6b18b34bf3b3e4d613b1fe260f2e73fd4bc61912aa0efd1e130abd1d7e52a685e6ce4005a51c18d0290889776eabe061f9799cbbddf55f1224339a067f51b14dfebdc82cb932dc47fdcf2c85c1bb6a9b018610eec3d47632c5ccfc4613b099a75a149e1cb3fe1d63a14e0254d1be7dd958d3db5e4420f28dc8f4710a736bde61a7d95a56b6e1ce61e505a26f119b1737c863596aa310235b64e083c526ea1ec25b7e3752487bd", @ANYBLOB='\b\x00\n\x00', @ANYRESOCT=r7], 0x44}}, 0x8000) 589.442175ms ago: executing program 1 (id=5406): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') fcntl$getownex(r0, 0x10, &(0x7f0000000040)) io_setup(0x2277, &(0x7f0000000180)=0x0) io_destroy(r1) 512.52788ms ago: executing program 8 (id=5407): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed01020301090222"], 0x0) pread64(r3, &(0x7f0000000140)=""/106, 0x6a, 0x1000007) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000100)=@ethtool_sset_info={0x2b}}) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) 511.596847ms ago: executing program 6 (id=5408): r0 = userfaultfd(0x80001) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000480)={0x0, 0x3, 0x45b2, 0xffffffff, 0x1, 0x401, 0xfffffffb}) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@dev, 0x4e22, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2e}, {}, {0x0, 0x3e3}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0x4}}, 0xe8) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0093100a00c2e88000", @ANYRES64=r1, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES64=r1], 0x48) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x2, 'sed\x00'}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 429.127008ms ago: executing program 4 (id=5409): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x5) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x8001, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) (async) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) (async) r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, 0x0) 426.77521ms ago: executing program 6 (id=5410): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="6a5c0c793e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0xc010) 426.506074ms ago: executing program 1 (id=5411): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2102, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) (async, rerun: 64) close_range(r1, 0xffffffffffffffff, 0x0) (rerun: 64) 426.368098ms ago: executing program 1 (id=5412): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d100090507000000000000090589", @ANYRES8, @ANYBLOB="b6"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="1201b77e020000202505a10d27cdb4095c9dc603440001011a2010090400060302060002052406000005240008000d240f010243c68aebb9e9e542c5000000040001000b0905810320000706080409050302200040ff400000000000"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d100090507000000000000090589", @ANYRES8, @ANYBLOB="b6"], 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_disconnect(r1) (async) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="1201b77e020000202505a10d27cdb4095c9dc603440001011a2010090400060302060002052406000005240008000d240f010243c68aebb9e9e542c5000000040001000b0905810320000706080409050302200040ff400000000000"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) (async) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) (async) 426.184309ms ago: executing program 6 (id=5413): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYBLOB="883800003f000701feffffff02000000027c00000400f6000c000180060006008035"], 0x3888}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x121d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000580)=0x0) r8 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) (async) creat(&(0x7f0000000200)='./bus\x00', 0x84) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) stat(0x0, 0x0) (async) mount$9p_virtio(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r8, 0x0, 0x20000000) socket(0x2a, 0x2, 0xfffffffc) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)={0x74, 0x0, 0x8}) syz_io_uring_submit(r6, r7, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getchain={0x4c, 0x66, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xa, 0xfff2}, {0x10, 0xe}, {0x5, 0xffe0}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x8}]}, 0x4c}}, 0x40000) 279.026103ms ago: executing program 6 (id=5414): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) 278.482847ms ago: executing program 4 (id=5415): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x122c681856fa0975) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x9, 0x44700) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00000000c0)=""/142) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000300), 0xc4fffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x122c681856fa0975) (async) syz_usb_disconnect(r0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) (async) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x9, 0x44700) (async) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00000000c0)=""/142) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000300), 0xc4fffffe) (async) 275.664919ms ago: executing program 6 (id=5416): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef289a63"], 0xffdd) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x2bb60}]}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x2bb60}]}}}]}, 0x40}}, 0x0) 151.177516ms ago: executing program 1 (id=5417): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='+\x00\x00\x00\t\x00'], 0x2b) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4909c}, 0x44) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', r1, 0x700, 0x40, 0xffffd2e3, 0x144, {{0x1d, 0x4, 0x3, 0x0, 0x74, 0x64, 0x0, 0x3, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x27}, {[@cipso={0x86, 0x17, 0x0, [{0x2, 0x2}, {0x0, 0xf, "33dafdf52d4bd635fb834c713d"}]}, @rr={0x7, 0x7, 0xc0, [@multicast1]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x2b, 0x54, [@remote, @local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x2e}, @private=0xa010100, @multicast2, @local, @multicast2]}, @generic={0x83, 0x10, "7674ff847f48a63f042560a55300"}, @noop, @end]}}}}}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r9 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d7", 0x1, 0xfffffffffffffffe) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r10, 0x26) (async) keyctl$update(0x2, r9, &(0x7f0000000240)="ac", 0x1) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) (async) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r7) sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r12, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008844}, 0x20000884) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) r13 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r13, 0x2285, &(0x7f0000000340)={0x53, 0x6, 0x106, 0x8, @buffer={0x0, 0x8d, &(0x7f0000000500)=""/141}, &(0x7f00000005c0)="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", 0x0, 0x2, 0x2, 0x4, 0x0}) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000800)={0x220, r3, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x4090}, 0x40804) 0s ago: executing program 1 (id=5418): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980400000000001800128008000100736974000c00028008000300ac1414"], 0x38}}, 0x0) (async) sendto$packet(r0, &(0x7f0000000340)="05d936277c6f5422007f83477ca1b278e3e4018a36e7bfd3de1a00ad6762646c95c716727eb53bcc2a3b1ed6ced0d6053451266eb08e65064835d0f94d97b181d7d385aef6a5b6aecdf893ef4ab40d3904b9f05e45b801742f77df299dce86596677cea296e1bc3cd6ba52a5078c1b4ee04607a14e757e5cf3a637b9e32e8edaddb278282b5975071c1ac441189ff8f7cbe8b4ed89e7bd597ef3804257e7a9537625b8a4ea5c42eaaf4e96a687f7a90053abc5b2d5a7559587fa32c93809c20cfcf68cf31a363a849412176fa895e0b0dc19c5fdb8728edd3179aafd3dcc031e55b235f1a514f9db2147d4a8ff3800ca9f2904c4c5", 0xf5, 0x40880, &(0x7f0000000200)={0x11, 0x18, r4, 0x1, 0x4, 0x6, @multicast}, 0x14) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CDROMVOLCTRL(r5, 0x31f, &(0x7f0000000000)={0x23, 0x58, 0x17, 0x7}) kernel console output (not intermixed with test programs): 0x60 [ 310.922976][T20120] charge_memcg+0x8a/0x230 [ 310.922992][T20120] __mem_cgroup_charge+0x2b/0x1e0 [ 310.923005][T20120] shmem_alloc_and_add_folio+0x50c/0xc20 [ 310.923025][T20120] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 310.923041][T20120] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 310.923060][T20120] shmem_get_folio_gfp+0x67f/0x1610 [ 310.923078][T20120] ? __lock_acquire+0xb8a/0x1c90 [ 310.923087][T20120] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 310.923107][T20120] shmem_write_begin+0x160/0x300 [ 310.923124][T20120] ? __pfx_shmem_write_begin+0x10/0x10 [ 310.923139][T20120] ? timestamp_truncate+0x21e/0x2d0 [ 310.923151][T20120] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 310.923167][T20120] generic_perform_write+0x3c4/0x900 [ 310.923186][T20120] ? __pfx_generic_perform_write+0x10/0x10 [ 310.923201][T20120] ? inode_needs_update_time.part.0+0x191/0x270 [ 310.923217][T20120] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 310.923228][T20120] shmem_file_write_iter+0x10e/0x140 [ 310.923240][T20120] __kernel_write_iter+0x31a/0xb10 [ 310.923252][T20120] ? __pfx___kernel_write_iter+0x10/0x10 [ 310.923262][T20120] ? cgroup_freezing+0x12c/0x3b0 [ 310.923277][T20120] ? cgroup_freezing+0x136/0x3b0 [ 310.923291][T20120] dump_user_range+0x413/0xb70 [ 310.923306][T20120] ? __pfx_dump_user_range+0x10/0x10 [ 310.923318][T20120] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 310.923338][T20120] ? __pfx_writenote+0x10/0x10 [ 310.923354][T20120] elf_core_dump+0x29c3/0x3c00 [ 310.923374][T20120] ? __pfx_elf_core_dump+0x10/0x10 [ 310.923385][T20120] ? kasan_save_stack+0x33/0x60 [ 310.923395][T20120] ? kasan_save_track+0x14/0x30 [ 310.923404][T20120] ? __kasan_kmalloc+0xaa/0xb0 [ 310.923413][T20120] ? __kvmalloc_node_noprof+0x3a3/0x9c0 [ 310.923424][T20120] ? vfs_coredump+0x1ddc/0x5670 [ 310.923434][T20120] ? arch_do_signal_or_restart+0x8f/0x7c0 [ 310.923447][T20120] ? irqentry_exit_to_user_mode+0x176/0x310 [ 310.923457][T20120] ? asm_exc_page_fault+0x26/0x30 [ 310.923471][T20120] ? 0xffffffffff600000 [ 310.923502][T20120] ? vfs_coredump+0x2b9f/0x5670 [ 310.923512][T20120] vfs_coredump+0x2b9f/0x5670 [ 310.923528][T20120] ? __pfx_vfs_coredump+0x10/0x10 [ 310.923540][T20120] ? __lock_acquire+0x622/0x1c90 [ 310.923555][T20120] ? lock_acquire+0x179/0x350 [ 310.923571][T20120] ? is_bpf_text_address+0x8a/0x1a0 [ 310.923584][T20120] ? bpf_ksym_find+0x127/0x1c0 [ 310.923603][T20120] ? unwind_get_return_address+0x59/0xa0 [ 310.923615][T20120] ? arch_stack_walk+0xa6/0x100 [ 310.923632][T20120] ? stack_trace_save+0x8e/0xc0 [ 310.923647][T20120] ? __pfx_stack_trace_save+0x10/0x10 [ 310.923661][T20120] ? stack_depot_save_flags+0x29/0x9c0 [ 310.923675][T20120] ? __lock_acquire+0xb8a/0x1c90 [ 310.923708][T20120] ? proc_coredump_connector+0x2d1/0x4f0 [ 310.923724][T20120] ? __pfx_proc_coredump_connector+0x10/0x10 [ 310.923742][T20120] ? rcu_is_watching+0x12/0xc0 [ 310.923758][T20120] get_signal+0x22e1/0x26d0 [ 310.923777][T20120] ? __pfx_get_signal+0x10/0x10 [ 310.923790][T20120] ? force_sig_fault+0xc4/0x100 [ 310.923805][T20120] arch_do_signal_or_restart+0x8f/0x7c0 [ 310.923818][T20120] ? find_held_lock+0x2b/0x80 [ 310.923831][T20120] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 310.923852][T20120] irqentry_exit_to_user_mode+0x176/0x310 [ 310.923863][T20120] asm_exc_page_fault+0x26/0x30 [ 310.923873][T20120] RIP: 0033:0x7f060544f6b7 [ 310.923882][T20120] Code: 88 15 42 60 ec 00 88 05 3f 60 ec 00 c3 50 48 8d 35 e9 48 1c 00 48 8d 3d ef 48 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 310.923892][T20120] RSP: 002b:00007f060638c1a0 EFLAGS: 00010206 [ 310.923900][T20120] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f060558f749 [ 310.923907][T20120] RDX: 00007f060638c1c0 RSI: 00007f060638c2f0 RDI: 000000000000000b [ 310.923913][T20120] RBP: 00007f0605613f91 R08: 0000000000000000 R09: 0000000000000000 [ 310.923919][T20120] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 310.923925][T20120] R13: 00007f06057e6128 R14: 00007f06057e6090 R15: 00007ffe9e561358 [ 310.923939][T20120] [ 310.923943][T20120] memory: usage 306944kB, limit 307200kB, failcnt 42076 [ 311.080666][T20120] memory+swap: usage 427956kB, limit 9007199254740988kB, failcnt 0 [ 311.084037][T20120] kmem: usage 7532kB, limit 9007199254740988kB, failcnt 0 [ 311.087123][T20120] Memory cgroup stats for /syz6: [ 311.087195][T20120] cache 305729536 [ 311.090470][T20120] rss 1097728 [ 311.091582][T20120] rss_huge 0 [ 311.092661][T20120] shmem 305729536 [ 311.093887][T20120] mapped_file 0 [ 311.095049][T20120] dirty 0 [ 311.095972][T20120] writeback 0 [ 311.097100][T20120] workingset_refault_anon 1066 [ 311.098685][T20120] workingset_refault_file 31 [ 311.100094][T20120] swap 123654144 [ 311.101246][T20120] swapcached 57344 [ 311.102481][T20120] pgpgin 317170 [ 311.103608][T20120] pgpgout 242254 [ 311.104762][T20120] pgfault 111577 [ 311.105934][T20120] pgmajfault 131 [ 311.107108][T20120] inactive_anon 149405696 [ 311.108604][T20120] active_anon 157450240 [ 311.109912][T20120] inactive_file 0 [ 311.111109][T20120] active_file 0 [ 311.112233][T20120] unevictable 0 [ 311.113411][T20120] hierarchical_memory_limit 314572800 [ 311.115143][T20120] hierarchical_memsw_limit 9223372036854771712 [ 311.117224][T20120] total_cache 305729536 [ 311.118651][T20120] total_rss 1097728 [ 311.120102][T20120] total_rss_huge 0 [ 311.121299][T20120] total_shmem 305729536 [ 311.122627][T20120] total_mapped_file 0 [ 311.123899][T20120] total_dirty 0 [ 311.125030][T20120] total_writeback 0 [ 311.126265][T20120] total_workingset_refault_anon 1066 [ 311.127960][T20120] total_workingset_refault_file 31 [ 311.129676][T20120] total_swap 123654144 [ 311.131012][T20120] total_swapcached 57344 [ 311.132363][T20120] total_pgpgin 317170 [ 311.133627][T20120] total_pgpgout 242254 [ 311.134932][T20120] total_pgfault 111577 [ 311.136244][T20120] total_pgmajfault 131 [ 311.137540][T20120] total_inactive_anon 149405696 [ 311.139078][T20120] total_active_anon 157450240 [ 311.140614][T20120] total_inactive_file 0 [ 311.141956][T20120] total_active_file 0 [ 311.143242][T20120] total_unevictable 0 [ 311.144605][T20120] anon_cost 0 [ 311.145685][T20120] file_cost 0 [ 311.146782][T20120] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4364,pid=20088,uid=0 [ 311.151687][T20120] Memory cgroup out of memory: Killed process 20088 (syz.6.4364) total-vm:98324kB, anon-rss:1152kB, file-rss:57548kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 311.225039][T20098] syz.6.4364 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 311.234394][T20098] CPU: 2 UID: 0 PID: 20098 Comm: syz.6.4364 Not tainted syzkaller #0 PREEMPT(full) [ 311.234410][T20098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 311.234416][T20098] Call Trace: [ 311.234420][T20098] [ 311.234425][T20098] dump_stack_lvl+0x16c/0x1f0 [ 311.234440][T20098] dump_header+0x101/0x930 [ 311.234458][T20098] oom_kill_process+0x272/0xa40 [ 311.234475][T20098] out_of_memory+0x350/0x1700 [ 311.234493][T20098] ? __pfx_out_of_memory+0x10/0x10 [ 311.234512][T20098] mem_cgroup_out_of_memory+0x118/0x130 [ 311.234528][T20098] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 311.234546][T20098] ? do_raw_spin_unlock+0x172/0x230 [ 311.234561][T20098] try_charge_memcg+0x695/0xd30 [ 311.234576][T20098] ? __pfx_try_charge_memcg+0x10/0x10 [ 311.234587][T20098] ? __print_lock_name+0x31/0xe0 [ 311.234601][T20098] ? rcu_read_unlock+0x17/0x60 [ 311.234617][T20098] charge_memcg+0x8a/0x230 [ 311.234628][T20098] __mem_cgroup_charge+0x2b/0x1e0 [ 311.234641][T20098] shmem_alloc_and_add_folio+0x50c/0xc20 [ 311.234661][T20098] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 311.234678][T20098] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 311.234697][T20098] shmem_get_folio_gfp+0x67f/0x1610 [ 311.234714][T20098] ? __lock_acquire+0xb8a/0x1c90 [ 311.234723][T20098] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 311.234743][T20098] shmem_write_begin+0x160/0x300 [ 311.234760][T20098] ? __pfx_shmem_write_begin+0x10/0x10 [ 311.234775][T20098] ? timestamp_truncate+0x21e/0x2d0 [ 311.234794][T20098] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 311.234816][T20098] generic_perform_write+0x3c4/0x900 [ 311.234839][T20098] ? __pfx_generic_perform_write+0x10/0x10 [ 311.234854][T20098] ? inode_needs_update_time.part.0+0x191/0x270 [ 311.234877][T20098] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 311.234893][T20098] shmem_file_write_iter+0x10e/0x140 [ 311.234910][T20098] __kernel_write_iter+0x31a/0xb10 [ 311.234926][T20098] ? __pfx___kernel_write_iter+0x10/0x10 [ 311.234940][T20098] ? cgroup_freezing+0x12c/0x3b0 [ 311.234963][T20098] ? cgroup_freezing+0x136/0x3b0 [ 311.234981][T20098] dump_user_range+0x413/0xb70 [ 311.234996][T20098] ? __pfx_dump_user_range+0x10/0x10 [ 311.235008][T20098] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 311.235029][T20098] ? __pfx_writenote+0x10/0x10 [ 311.235045][T20098] elf_core_dump+0x29c3/0x3c00 [ 311.235065][T20098] ? __pfx_elf_core_dump+0x10/0x10 [ 311.235076][T20098] ? kasan_save_stack+0x33/0x60 [ 311.235085][T20098] ? kasan_save_track+0x14/0x30 [ 311.235095][T20098] ? __kasan_kmalloc+0xaa/0xb0 [ 311.235104][T20098] ? __kvmalloc_node_noprof+0x3a3/0x9c0 [ 311.235114][T20098] ? vfs_coredump+0x1ddc/0x5670 [ 311.235123][T20098] ? arch_do_signal_or_restart+0x8f/0x7c0 [ 311.235136][T20098] ? irqentry_exit_to_user_mode+0x176/0x310 [ 311.235146][T20098] ? asm_exc_page_fault+0x26/0x30 [ 311.235160][T20098] ? 0xffffffffff600000 [ 311.235197][T20098] ? vfs_coredump+0x2b9f/0x5670 [ 311.235207][T20098] vfs_coredump+0x2b9f/0x5670 [ 311.235224][T20098] ? __pfx_vfs_coredump+0x10/0x10 [ 311.235238][T20098] ? __lock_acquire+0x622/0x1c90 [ 311.235253][T20098] ? lock_acquire+0x179/0x350 [ 311.235269][T20098] ? is_bpf_text_address+0x8a/0x1a0 [ 311.235282][T20098] ? bpf_ksym_find+0x127/0x1c0 [ 311.235309][T20098] ? unwind_get_return_address+0x59/0xa0 [ 311.235322][T20098] ? arch_stack_walk+0xa6/0x100 [ 311.235339][T20098] ? stack_trace_save+0x8e/0xc0 [ 311.235354][T20098] ? __pfx_stack_trace_save+0x10/0x10 [ 311.235368][T20098] ? stack_depot_save_flags+0x29/0x9c0 [ 311.235382][T20098] ? __lock_acquire+0xb8a/0x1c90 [ 311.235415][T20098] ? proc_coredump_connector+0x2d1/0x4f0 [ 311.235430][T20098] ? __pfx_proc_coredump_connector+0x10/0x10 [ 311.235448][T20098] ? rcu_is_watching+0x12/0xc0 [ 311.235464][T20098] get_signal+0x22e1/0x26d0 [ 311.235483][T20098] ? __pfx_get_signal+0x10/0x10 [ 311.235496][T20098] ? force_sig_fault+0xc4/0x100 [ 311.235511][T20098] arch_do_signal_or_restart+0x8f/0x7c0 [ 311.235524][T20098] ? find_held_lock+0x2b/0x80 [ 311.235536][T20098] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 311.235557][T20098] irqentry_exit_to_user_mode+0x176/0x310 [ 311.235569][T20098] asm_exc_page_fault+0x26/0x30 [ 311.235578][T20098] RIP: 0033:0x7f060544f6b7 [ 311.235588][T20098] Code: 88 15 42 60 ec 00 88 05 3f 60 ec 00 c3 50 48 8d 35 e9 48 1c 00 48 8d 3d ef 48 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 311.235598][T20098] RSP: 002b:00007f060638c1a0 EFLAGS: 00010206 [ 311.235607][T20098] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f060558f749 [ 311.235614][T20098] RDX: 00007f060638c1c0 RSI: 00007f060638c2f0 RDI: 000000000000000b [ 311.235620][T20098] RBP: 00007f0605613f91 R08: 0000000000000000 R09: 0000000000000000 [ 311.235626][T20098] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 311.235632][T20098] R13: 00007f06057e6128 R14: 00007f06057e6090 R15: 00007ffe9e561358 [ 311.235647][T20098] [ 311.235651][T20098] memory: usage 307200kB, limit 307200kB, failcnt 43851 [ 311.391980][T20098] memory+swap: usage 389484kB, limit 9007199254740988kB, failcnt 0 [ 311.394355][T20098] kmem: usage 7528kB, limit 9007199254740988kB, failcnt 0 [ 311.396577][T20098] Memory cgroup stats for /syz6: [ 311.396658][T20098] cache 272818176 [ 311.399541][T20098] rss 1142784 [ 311.400608][T20098] rss_huge 0 [ 311.401675][T20098] shmem 272818176 [ 311.402831][T20098] mapped_file 0 [ 311.403947][T20098] dirty 0 [ 311.404947][T20098] writeback 0 [ 311.406034][T20098] workingset_refault_anon 1066 [ 311.407570][T20098] workingset_refault_file 31 [ 311.409095][T20098] swap 115146752 [ 311.410309][T20098] swapcached 40960 [ 311.411510][T20098] pgpgin 317612 [ 311.412659][T20098] pgpgout 250724 [ 311.413788][T20098] pgfault 111642 [ 311.414959][T20098] pgmajfault 131 [ 311.416132][T20098] inactive_anon 93495296 [ 311.417501][T20098] active_anon 180129792 [ 311.419123][T20098] inactive_file 0 [ 311.420360][T20098] active_file 0 [ 311.421473][T20098] unevictable 0 [ 311.422596][T20098] hierarchical_memory_limit 314572800 [ 311.424324][T20098] hierarchical_memsw_limit 9223372036854771712 [ 311.426335][T20098] total_cache 272818176 [ 311.427663][T20098] total_rss 1142784 [ 311.428934][T20098] total_rss_huge 0 [ 311.430332][T20098] total_shmem 272818176 [ 311.431676][T20098] total_mapped_file 0 [ 311.432969][T20098] total_dirty 0 [ 311.434093][T20098] total_writeback 0 [ 311.435296][T20098] total_workingset_refault_anon 1066 [ 311.436946][T20098] total_workingset_refault_file 31 [ 311.438587][T20098] total_swap 115146752 [ 311.439953][T20098] total_swapcached 40960 [ 311.441347][T20098] total_pgpgin 317612 [ 311.442667][T20098] total_pgpgout 250724 [ 311.443969][T20098] total_pgfault 111642 [ 311.445258][T20098] total_pgmajfault 131 [ 311.446617][T20098] total_inactive_anon 93495296 [ 311.448152][T20098] total_active_anon 180129792 [ 311.449652][T20098] total_inactive_file 0 [ 311.451719][T20098] total_active_file 0 [ 311.453003][T20098] total_unevictable 0 [ 311.454335][T20098] anon_cost 0 [ 311.455428][T20098] file_cost 0 [ 311.456569][T20098] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4364,pid=20122,uid=0 [ 311.461351][T20098] Memory cgroup out of memory: Killed process 20122 (syz.6.4364) total-vm:98456kB, anon-rss:1288kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 311.504036][ T29] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 311.549272][T20108] Memory cgroup out of memory: Killed process 20107 (syz.6.4364) total-vm:98456kB, anon-rss:1160kB, file-rss:57548kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 311.597114][T20101] Memory cgroup out of memory: Killed process 20098 (syz.6.4364) total-vm:98456kB, anon-rss:1288kB, file-rss:57548kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 311.665767][T20101] Memory cgroup out of memory: Killed process 20105 (syz.6.4364) total-vm:98456kB, anon-rss:1288kB, file-rss:57548kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 311.675684][ T29] usb 11-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 311.692830][ T29] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 311.695713][ T29] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 311.703976][ T29] usb 11-1: SerialNumber: syz [ 311.869859][T20261] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 311.872364][T20261] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 311.875243][T20261] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 311.877714][T20261] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 311.901484][T20261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4413'. [ 312.208350][T20101] Memory cgroup out of memory: Killed process 20101 (syz.6.4364) total-vm:98456kB, anon-rss:1288kB, file-rss:59952kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 312.255441][T20110] Memory cgroup out of memory: Killed process 20120 (syz.6.4364) total-vm:98456kB, anon-rss:1416kB, file-rss:57548kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 312.366722][ T29] cdc_ether 11-1:1.0: probe with driver cdc_ether failed with error -71 [ 312.374030][ T29] usb 11-1: USB disconnect, device number 10 [ 312.511629][T20274] binder: 20273:20274 ioctl c018620c 200000000300 returned -22 [ 312.668348][T20276] netlink: 'syz.8.4418': attribute type 29 has an invalid length. [ 312.704723][T20278] random: crng reseeded on system resumption [ 312.736781][T20278] Restarting kernel threads ... [ 312.741629][T20278] Done restarting kernel threads. [ 312.982277][T20298] cgroup: name respecified [ 313.021923][T20301] kAFS: No cell specified [ 313.022880][ T40] audit: type=1400 audit(304.253:64393): avc: denied { map } for pid=20297 comm="syz.6.4424" path="/485/file0/memory.events" dev="9p" ino=81002685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 313.028531][T20301] bridge1: entered promiscuous mode [ 313.032309][T20301] bridge1: entered allmulticast mode [ 313.157030][T20307] netlink: 'syz.6.4427': attribute type 29 has an invalid length. [ 313.283399][T20315] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 313.286739][T20315] overlayfs: missing 'lowerdir' [ 313.312304][T20317] team0: No ports can be present during mode change [ 313.315188][T20317] gfs2: error -5 reading superblock [ 313.399817][T20321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.503589][ T40] audit: type=1326 audit(304.711:64394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20318 comm="syz.4.4434" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2036d8f749 code=0x7fc00000 [ 313.510712][ T40] audit: type=1326 audit(304.711:64395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20318 comm="syz.4.4434" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2036d8f749 code=0x7fc00000 [ 313.517944][ T40] audit: type=1326 audit(304.711:64396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20318 comm="syz.4.4434" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2036d8f749 code=0x7fc00000 [ 313.527122][ T40] audit: type=1326 audit(304.711:64397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20318 comm="syz.4.4434" exe="/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f2036d8f749 code=0x7fc00000 [ 313.534552][ T40] audit: type=1326 audit(304.711:64398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20318 comm="syz.4.4434" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2036d8f749 code=0x7fc00000 [ 313.541614][ T40] audit: type=1326 audit(304.711:64399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20318 comm="syz.4.4434" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2036d8f749 code=0x7fc00000 [ 313.548608][ T40] audit: type=1326 audit(304.711:64400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20318 comm="syz.4.4434" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2036d8f749 code=0x7fc00000 [ 313.555695][ T40] audit: type=1326 audit(304.711:64401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20318 comm="syz.4.4434" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2036d8f749 code=0x7fc00000 [ 313.562712][ T40] audit: type=1326 audit(304.711:64402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20318 comm="syz.4.4434" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2036d8f749 code=0x7fc00000 [ 313.662184][T20325] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4436'. [ 313.812899][T20327] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4437'. [ 313.817202][T20327] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4437'. [ 313.823640][T20327] erspan0: entered promiscuous mode [ 313.885681][T20330] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 313.971066][T20329] sit0: entered promiscuous mode [ 313.972802][T20329] netlink: 'syz.8.4438': attribute type 1 has an invalid length. [ 313.978839][T20329] netlink: 1 bytes leftover after parsing attributes in process `syz.8.4438'. [ 314.064864][T20335] veth1_to_bond: entered allmulticast mode [ 314.068081][T20334] veth1_to_bond: left allmulticast mode [ 314.101923][T20338] autofs4:pid:20338:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 314.106351][T20338] autofs4:pid:20338:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 314.143720][T20340] tmpfs: Bad value for 'nr_inodes' [ 314.331729][T20345] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 314.334609][T20345] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 314.337471][T20345] overlayfs: missing 'lowerdir' [ 314.840864][ T8917] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 315.004086][ T8917] usb 9-1: No LPM exit latency info found, disabling LPM. [ 315.008556][ T8917] usb 9-1: config 3 has an invalid interface number: 210 but max is 0 [ 315.011354][ T8917] usb 9-1: config 3 has no interface number 0 [ 315.013486][ T8917] usb 9-1: config 3 interface 210 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 315.017066][ T8917] usb 9-1: config 3 interface 210 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 315.020736][ T8917] usb 9-1: config 3 interface 210 altsetting 2 endpoint 0x9 has invalid maxpacket 512, setting to 8 [ 315.024452][ T8917] usb 9-1: config 3 interface 210 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 315.028021][ T8917] usb 9-1: config 3 interface 210 altsetting 2 endpoint 0x8 has invalid maxpacket 1024, setting to 8 [ 315.031675][ T8917] usb 9-1: config 3 interface 210 altsetting 2 endpoint 0xB has invalid wMaxPacketSize 0 [ 315.035041][ T8917] usb 9-1: config 3 interface 210 altsetting 2 endpoint 0x4 is Bulk; changing to Interrupt [ 315.038326][ T8917] usb 9-1: config 3 interface 210 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 315.042049][ T8917] usb 9-1: config 3 interface 210 altsetting 2 endpoint 0x1 has invalid maxpacket 32, setting to 8 [ 315.045780][ T8917] usb 9-1: config 3 interface 210 altsetting 2 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 315.049278][ T8917] usb 9-1: config 3 interface 210 has no altsetting 0 [ 315.054349][ T8917] usb 9-1: New USB device found, idVendor=0bda, idProduct=8186, bcdDevice=3a.3f [ 315.057623][ T8917] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.060342][ T8917] usb 9-1: Product: 蒪ꏶꭟᛒ桇悩껧బ漚捒䂌ࢗ뉬챏靍䭃蚼䥒曬涆㎮꺹ᶉῒ캀갩ꦸ춵貌᤽祤躯杼誟ⷑ旦◟ [ 315.065565][ T8917] usb 9-1: Manufacturer: 쭫욭估㉫屈ꟍ峷୙盤崣ꅿ턕㬸ብ瘃䇮ᡶ章筗魠ᒤ䁴ퟅ쿤俋쯮絇憎枂鶋쵖a鞫쥄둬귅龒鉊꒩噵⨌㳲꒓ۯᛳ㈿丰뱱챧갑率딐օ掇㼤Λꅱ輎嶓郒煽蘈縬ꝲ㕝᭚睛埞茭籲瓼藅㙾䇼长肒㶆൳ [ 315.074386][ T8917] usb 9-1: SerialNumber: ﾇ梐䊧㐼➜ꗉ撸䄨푝嘜쬊Ⰸꏱ턜췣텣稻캑뎞揊䞤豖통腱烙ᝅ戯殙쬹盁‿䨬ᣵ週ף㓯๭⛭㦊꜒잌⑐宑ߐ稺껭⟂뱄효⾖鵪귧焷狧䥯淊吒睖묄ꖗ鞝੘遯䝀곁რ볿虦褝虋团⦋チ䑘 [ 315.084897][T20350] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 315.087769][T20350] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 315.313620][ T8917] usb 9-1: USB disconnect, device number 8 [ 315.375187][T20358] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4450'. [ 315.380632][T20358] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4450'. [ 315.495067][T20366] netlink: 'syz.8.4453': attribute type 2 has an invalid length. [ 315.497546][T20366] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4453'. [ 315.887025][T20375] xfrm0 speed is unknown, defaulting to 1000 [ 315.958190][T20375] lo speed is unknown, defaulting to 1000 [ 315.961327][T20375] xfrm0 speed is unknown, defaulting to 1000 [ 316.112809][T20381] can: request_module (can-proto-0) failed. [ 316.176230][T20392] xt_nfacct: accounting object `syz0' does not exist [ 316.179448][T20393] xt_nfacct: accounting object `syz0' does not exist [ 316.365840][T20407] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4465'. [ 316.370598][T20400] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4462'. [ 316.373395][T20407] binder: 20406:20407 ioctl 400c620e 200000000100 returned -22 [ 316.476318][ T839] rtc_cmos 00:05: Alarms can be up to one day in the future [ 316.480154][ T839] rtc_cmos 00:05: Alarms can be up to one day in the future [ 316.483151][ T839] rtc_cmos 00:05: Alarms can be up to one day in the future [ 316.486843][ T839] rtc_cmos 00:05: Alarms can be up to one day in the future [ 316.491143][ T839] rtc rtc0: __rtc_set_alarm: err=-22 [ 316.512999][T20413] (syz.4.4468,20413,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 316.837660][T20441] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 316.844131][T20441] SELinux: failed to load policy [ 316.885806][T20445] binder: 20444:20445 ioctl c00c620f 200000000180 returned -22 [ 316.958628][T20448] team0: Port device team_slave_1 removed [ 317.217573][T20473] FAT-fs (loop6): unable to read boot sector [ 317.568623][ T5995] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 317.728879][ T5995] usb 13-1: Using ep0 maxpacket: 8 [ 317.732573][ T5995] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 317.735738][ T5995] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 317.738898][ T5995] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 317.742215][ T5995] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.746347][ T5995] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 317.749238][ T5995] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.970130][ T5995] usb 13-1: GET_CAPABILITIES returned 0 [ 317.971997][ T5995] usbtmc 13-1:16.0: can't read capabilities [ 318.192371][ T5928] IPVS: starting estimator thread 0... [ 318.193730][ T6013] usb 13-1: USB disconnect, device number 7 [ 318.295513][T20500] IPVS: using max 50 ests per chain, 120000 per kthread [ 318.400241][ T40] kauditd_printk_skb: 6976 callbacks suppressed [ 318.400252][ T40] audit: type=1326 audit(565.286:71379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20490 comm="syz.6.4492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060558f749 code=0x7fc00000 [ 318.411827][ T40] audit: type=1326 audit(565.286:71380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20490 comm="syz.6.4492" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f060558f749 code=0x7fc00000 [ 318.420650][ T40] audit: type=1326 audit(565.286:71381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20490 comm="syz.6.4492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060558f749 code=0x7fc00000 [ 318.429467][ T40] audit: type=1326 audit(565.286:71382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20490 comm="syz.6.4492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060558f749 code=0x7fc00000 [ 318.438388][ T40] audit: type=1326 audit(565.286:71383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20490 comm="syz.6.4492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060558f749 code=0x7fc00000 [ 318.447780][ T40] audit: type=1326 audit(565.286:71384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20490 comm="syz.6.4492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060558f749 code=0x7fc00000 [ 318.456680][ T40] audit: type=1326 audit(565.286:71385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20490 comm="syz.6.4492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060558f749 code=0x7fc00000 [ 318.465295][ T40] audit: type=1326 audit(565.286:71386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20490 comm="syz.6.4492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060558f749 code=0x7fc00000 [ 318.474236][ T40] audit: type=1326 audit(565.286:71387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20490 comm="syz.6.4492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060558f749 code=0x7fc00000 [ 318.483127][ T40] audit: type=1326 audit(565.286:71388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20490 comm="syz.6.4492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060558f749 code=0x7fc00000 [ 318.677314][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 318.681118][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 318.685876][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 318.688660][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 318.691580][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 318.708412][T20514] xfrm0 speed is unknown, defaulting to 1000 [ 318.783322][T20514] lo speed is unknown, defaulting to 1000 [ 318.783327][T20533] __nla_validate_parse: 2 callbacks suppressed [ 318.783337][T20533] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4504'. [ 318.797692][T20514] xfrm0 speed is unknown, defaulting to 1000 [ 318.800460][T20533] can0: slcan on ttyS3. [ 318.852268][T20532] can0 (unregistered): slcan off ttyS3. [ 318.921225][T20514] chnl_net:caif_netlink_parms(): no params data found [ 319.006002][T20554] macsec3: entered promiscuous mode [ 319.041242][T20514] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.044696][T20514] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.048119][T20514] bridge_slave_0: entered allmulticast mode [ 319.051009][T20514] bridge_slave_0: entered promiscuous mode [ 319.056504][T20514] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.059271][T20514] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.061771][T20514] bridge_slave_1: entered allmulticast mode [ 319.064955][T20514] bridge_slave_1: entered promiscuous mode [ 319.132024][T20569] netem: incorrect ge model size [ 319.134066][T20569] netem: change failed [ 319.137598][T20514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.144112][T20514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.191372][T20514] team0: Port device team_slave_0 added [ 319.196011][T20514] team0: Port device team_slave_1 added [ 319.247746][T20514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.250084][T20514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.260557][T20514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.269548][T20514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.271884][T20514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.280408][T20514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.350218][T20514] hsr_slave_0: entered promiscuous mode [ 319.353578][T20514] hsr_slave_1: entered promiscuous mode [ 319.357703][T20514] debugfs: 'hsr0' already exists in 'hsr' [ 319.360259][T20514] Cannot create hsr debugfs directory [ 319.415860][T20589] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4520'. [ 319.523250][T20597] loop6: detected capacity change from 0 to 524288000 [ 319.605325][T20598] xt_nat: multiple ranges no longer supported [ 319.611603][T20597] support for the xor transformation has been removed. [ 319.629504][T20601] tipc: Started in network mode [ 319.631255][T20601] tipc: Node identity , cluster identity 4711 [ 319.633521][T20601] tipc: Failed to obtain node identity [ 319.635367][T20601] tipc: Enabling of bearer rejected, failed to enable media [ 319.766075][T20614] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4526'. [ 319.769879][T20614] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4526'. [ 319.875926][T20514] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 319.883491][T20514] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 319.890530][T20514] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 319.896715][T20514] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 319.916456][T20514] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.918684][T20514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.920913][T20514] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.923247][T20514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.953001][T20514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.965683][T16314] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.967892][T20640] netlink: zone id is out of range [ 319.972246][T16314] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.001784][T20514] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.007786][T16275] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.010094][T16275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.035294][T16315] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.037663][T16315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.180114][T20514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.216959][T20514] veth0_vlan: entered promiscuous mode [ 320.225641][T20514] veth1_vlan: entered promiscuous mode [ 320.247313][T20514] veth0_macvtap: entered promiscuous mode [ 320.254114][T20514] veth1_macvtap: entered promiscuous mode [ 320.264183][T20514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.273767][T20514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.281386][T16275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.284349][T16275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.287913][T16275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.290711][T16275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.330358][T16275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.337394][T16275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.350946][T16281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.353683][T16281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.399597][T20655] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 320.424307][T20660] netlink: 212352 bytes leftover after parsing attributes in process `syz.1.4535'. [ 320.524225][T20660] hfs: can't find a HFS filesystem on dev sr0 [ 320.752208][T20692] netlink: 6 bytes leftover after parsing attributes in process `syz.6.4545'. [ 320.755319][T20692] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.765476][T20696] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4547'. [ 320.789357][T20698] netlink: 'syz.6.4548': attribute type 1 has an invalid length. [ 320.808257][T20699] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 320.841194][ T64] Bluetooth: hci2: command tx timeout [ 320.850717][T20705] netlink: 'syz.6.4549': attribute type 11 has an invalid length. [ 321.259019][T20714] sp0: Synchronizing with TNC [ 321.356901][T20723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=20723 comm=syz.8.4555 [ 321.531690][T20728] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8212 sclass=netlink_xfrm_socket pid=20728 comm=syz.1.4557 [ 321.551166][T20733] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4558'. [ 321.551699][T20734] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4558'. [ 321.801755][T20756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4566'. [ 322.146052][T20713] [U] [ 322.781593][T20800] xt_CT: You must specify a L4 protocol and not use inversions on it [ 323.015346][T20813] binder: BINDER_SET_CONTEXT_MGR already set [ 323.017364][T20813] binder: 20812:20813 ioctl 4018620d 200000000040 returned -16 [ 323.075999][T20820] netlink: 'syz.4.4586': attribute type 10 has an invalid length. [ 323.079753][ T64] Bluetooth: hci2: command tx timeout [ 323.082165][T20820] dummy0: entered promiscuous mode [ 323.085190][T20820] bridge0: port 3(dummy0) entered blocking state [ 323.088589][T20820] bridge0: port 3(dummy0) entered disabled state [ 323.090830][T20820] dummy0: entered allmulticast mode [ 323.093625][T20820] bridge0: port 3(dummy0) entered blocking state [ 323.095718][T20820] bridge0: port 3(dummy0) entered forwarding state [ 323.655152][ T5996] hid (null): unknown global tag 0xe [ 323.657585][ T5996] hid (null): unknown global tag 0xe [ 323.659766][ T5996] hid (null): unknown global tag 0xd [ 323.662794][ T5996] hid (null): unknown global tag 0xd [ 323.665513][ T5996] hid (null): unknown global tag 0xe [ 323.667251][ T5996] hid (null): report_id 12197 is invalid [ 323.669174][ T5996] hid (null): unknown global tag 0xc [ 323.670943][ T5996] hid (null): unknown global tag 0xc [ 323.672622][ T5996] hid (null): unknown global tag 0x3d [ 323.674806][ T5996] hid (null): unknown global tag 0xc [ 323.676765][ T5996] hid (null): invalid report_size -1690363284 [ 323.678697][ T5996] hid (null): unknown global tag 0xc [ 323.680627][ T5996] hid (null): unknown global tag 0xc [ 323.682400][ T5996] hid (null): unknown global tag 0xd [ 323.684157][ T5996] hid (null): unknown global tag 0xe [ 323.687669][ T5996] hid (null): unknown global tag 0x7e [ 323.689444][ T5996] hid (null): report_id 48592 is invalid [ 323.690270][T20837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.691670][ T5996] hid (null): unknown global tag 0xc [ 323.697788][ T5996] hid (null): unknown global tag 0xd [ 323.700012][ T5996] hid (null): unknown global tag 0xc [ 323.702177][ T5996] hid (null): unknown global tag 0xd [ 323.704206][ T5996] hid (null): report_id 0 is invalid [ 323.706119][ T5996] hid (null): unknown global tag 0xc [ 323.708554][ T5996] hid (null): report_id 849997825 is invalid [ 323.710628][ T5996] hid (null): unknown global tag 0x41 [ 323.712452][ T5996] hid (null): report_id 62024 is invalid [ 323.714388][ T5996] hid (null): unknown global tag 0xd [ 323.716133][ T5996] hid (null): unknown global tag 0xe [ 323.718335][ T5996] hid (null): unknown global tag 0x98 [ 323.720173][ T5996] hid (null): unknown global tag 0xc [ 323.722017][ T5996] hid (null): invalid report_size -1454416981 [ 323.724279][ T5996] hid (null): report_id 0 is invalid [ 323.726358][ T5996] hid (null): invalid report_size 10662 [ 323.729895][ T5996] hid (null): unknown global tag 0xe [ 323.732211][ T5996] hid (null): report_id 0 is invalid [ 323.734490][ T5996] hid (null): unknown global tag 0xe3 [ 323.736857][ T5996] hid (null): unknown global tag 0xc [ 323.739163][ T5996] hid (null): unknown global tag 0xe [ 323.741593][ T5996] hid (null): unknown global tag 0xd [ 323.743568][ T5996] hid (null): nested delimiters [ 323.745680][ T5996] hid (null): unknown global tag 0xc [ 323.748042][ T5996] hid (null): bogus close delimiter [ 323.750775][ T5996] hid (null): unknown global tag 0x9e [ 323.753084][ T5996] hid (null): unknown global tag 0xc [ 323.755320][ T5996] hid (null): unknown global tag 0xd [ 323.757510][ T5996] hid (null): unknown global tag 0xd [ 323.759832][ T5996] hid (null): invalid report_size 59874 [ 323.762423][ T5996] hid (null): unknown global tag 0xb6 [ 323.764792][ T5996] hid (null): unknown global tag 0xc [ 323.767015][ T5996] hid (null): nested delimiters [ 323.769099][ T5996] hid (null): unknown global tag 0xe [ 323.770925][ T5996] hid (null): unknown global tag 0xc [ 323.774475][ T5996] hid-generic FFF8:0007:0009.000E: unknown main item tag 0x3 [ 323.777432][ T5996] hid-generic FFF8:0007:0009.000E: unknown global tag 0xe [ 323.780352][ T5996] hid-generic FFF8:0007:0009.000E: item 0 4 1 14 parsing failed [ 323.784004][ T5996] hid-generic FFF8:0007:0009.000E: probe with driver hid-generic failed with error -22 [ 323.849780][ T40] kauditd_printk_skb: 176 callbacks suppressed [ 323.849791][ T40] audit: type=1400 audit(570.391:71565): avc: denied { read } for pid=20858 comm="syz.6.4601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 323.852534][T20863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20863 comm=syz.1.4602 [ 323.863586][T20863] netlink: 'syz.1.4602': attribute type 1 has an invalid length. [ 323.934070][T20867] (syz.6.4603,20867,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 323.936512][T20867] (syz.6.4603,20867,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 323.939402][T20867] (syz.6.4603,20867,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 323.942305][T20867] (syz.6.4603,20867,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 323.980935][T20870] comedi comedi3: Minor 0 could not be opened [ 324.117052][T20875] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 324.120296][T20875] overlayfs: overlapping lowerdir path [ 324.381798][ T40] audit: type=1400 audit(570.887:71566): avc: denied { getopt } for pid=20888 comm="syz.1.4609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 324.383484][T20889] __nla_validate_parse: 4 callbacks suppressed [ 324.383494][T20889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4609'. [ 324.394352][T20889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4609'. [ 324.427945][ T40] audit: type=1400 audit(570.924:71567): avc: denied { ioctl } for pid=20884 comm="syz.4.4608" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 324.438846][ T40] audit: type=1400 audit(570.924:71568): avc: denied { write } for pid=20891 comm="syz.1.4610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 324.505097][ T40] audit: type=1400 audit(570.999:71569): avc: denied { connect } for pid=20899 comm="syz.1.4612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 324.691345][ T40] audit: type=1400 audit(571.176:71570): avc: denied { append } for pid=20917 comm="syz.8.4616" name="event3" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 324.821468][T20928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4620'. [ 324.927246][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 325.081518][T20940] ip6t_REJECT: ECHOREPLY is not supported [ 325.096678][T20941] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.300995][ T64] Bluetooth: hci2: command tx timeout [ 326.075067][ T40] audit: type=1400 audit(572.467:71571): avc: denied { map } for pid=20946 comm="syz.8.4627" path="socket:[100625]" dev="sockfs" ino=100625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 326.086353][ T40] audit: type=1400 audit(572.467:71572): avc: denied { read accept } for pid=20946 comm="syz.8.4627" path="socket:[100625]" dev="sockfs" ino=100625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 326.228941][T20967] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 326.231058][T20967] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 326.234759][T20967] vhci_hcd vhci_hcd.0: Device attached [ 326.238167][T20968] vhci_hcd: connection closed [ 326.240164][T16275] vhci_hcd: stop threads [ 326.243520][T16275] vhci_hcd: release socket [ 326.245013][T16275] vhci_hcd: disconnect device [ 326.273023][T20975] Unknown options in mask b7f2 [ 326.275330][T20975] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4635'. [ 326.372405][ T40] audit: type=1400 audit(572.747:71573): avc: denied { read } for pid=20982 comm="syz.4.4638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 326.691296][ T5996] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 326.855299][ T5996] usb 9-1: config 0 has an invalid interface number: 168 but max is 0 [ 326.858707][ T5996] usb 9-1: config 0 has no interface number 0 [ 326.861329][ T5996] usb 9-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 326.865410][ T5996] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.870084][ T5996] usb 9-1: config 0 descriptor?? [ 326.901380][ T40] audit: type=1400 audit(573.233:71574): avc: denied { create } for pid=20989 comm="syz.1.4641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 326.964017][T20995] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4642'. [ 326.995410][T20998] netlink: 'syz.1.4643': attribute type 28 has an invalid length. [ 327.091722][ T5291] Bluetooth: hci1: Unknown advertising packet type: 0x78 [ 327.091773][ T5291] Bluetooth: hci1: Malformed LE Event: 0x0d [ 327.093966][ T5996] usb 9-1: string descriptor 0 read error: -71 [ 327.101439][ T5996] usb-storage 9-1:0.168: USB Mass Storage device detected [ 327.106188][ T5996] usb-storage 9-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 327.150743][ T5996] usb 9-1: USB disconnect, device number 9 [ 327.514844][ T5291] Bluetooth: hci2: command tx timeout [ 327.880417][T21019] loop9: detected capacity change from 0 to 7 [ 327.885738][T21019] Dev loop9: unable to read RDB block 7 [ 327.887883][T21019] loop9: AHDI p1 p2 [ 327.889534][T21019] loop9: partition table partially beyond EOD, truncated [ 327.892486][T21019] loop9: p1 start 1853095936 is beyond EOD, truncated [ 327.980953][T21022] fuse: Bad value for 'fd' [ 327.991864][T21020] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 328.045459][T21028] veth0_to_bond: entered promiscuous mode [ 328.048412][T21028] gretap0: entered promiscuous mode [ 328.090114][T21033] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4654'. [ 328.126718][T21040] xt_l2tp: v2 doesn't support IP mode [ 328.127162][T21041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=21041 comm=syz.8.4658 [ 328.170382][T21039] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4656'. [ 328.180969][T21039] can0: slcan on ttyS3. [ 328.242838][T21039] can0 (unregistered): slcan off ttyS3. [ 328.339243][T21073] No source specified [ 328.343010][T21073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4666'. [ 328.362924][T21075] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 328.370068][T21075] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.4667'. [ 328.452844][T21083] Unsupported ieee802154 address type: 0 [ 328.459803][T21083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=21083 comm=syz.8.4669 [ 328.510300][T21094] netlink: 'syz.6.4672': attribute type 1 has an invalid length. [ 328.512885][T21094] netlink: 1 bytes leftover after parsing attributes in process `syz.6.4672'. [ 328.516230][T21093] netlink: 'syz.6.4672': attribute type 1 has an invalid length. [ 328.636545][T16275] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.639557][T16275] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.642316][T16275] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.645015][T16275] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.667941][T21109] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 328.671429][T21109] overlayfs: missing 'lowerdir' [ 328.754309][T21117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=21117 comm=syz.8.4680 [ 328.865986][T21124] tmpfs: Bad value for 'mpol' [ 328.977086][T21132] : renamed from vlan0 (while UP) [ 328.979055][T21136] 9pnet_virtio: no channels available for device syz [ 328.979128][T21135] 9pnet_virtio: no channels available for device syz [ 329.442023][T21155] vlan2: entered promiscuous mode [ 329.444465][T21155] vlan2: entered allmulticast mode [ 329.446626][T21155] hsr_slave_1: entered allmulticast mode [ 329.601028][T21158] geneve2: entered promiscuous mode [ 329.657539][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 329.657554][ T40] audit: type=1400 audit(575.814:71581): avc: denied { firmware_load } for pid=21163 comm="syz.6.4695" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 329.715157][T21169] 9pnet_fd: p9_fd_create_tcp (21169): problem connecting socket to 127.0.0.1 [ 329.721405][T21169] usb usb8: usbfs: interface 0 claimed by hub while 'syz.6.4697' sets config #9 [ 329.739528][ T5291] Bluetooth: hci2: command 0x0405 tx timeout [ 330.002482][T21192] __nla_validate_parse: 5 callbacks suppressed [ 330.002499][T21192] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4704'. [ 330.002510][T21193] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4704'. [ 330.005145][T21192] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4704'. [ 330.008779][T21193] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4704'. [ 330.009511][T21194] syzkaller0: entered promiscuous mode [ 330.020856][T21194] syzkaller0: entered allmulticast mode [ 330.075347][T21201] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4706'. [ 330.079145][T21201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4706'. [ 330.159201][T21205] netlink: 'syz.1.4707': attribute type 2 has an invalid length. [ 330.162487][T21205] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4707'. [ 330.247876][T21216] sg_write: data in/out 10438218/1 bytes for SCSI command 0x6b-- guessing data in; [ 330.247876][T21216] program syz.8.4710 not setting count and/or reply_len properly [ 330.302425][T21221] overlayfs: failed to clone upperpath [ 330.364004][T21224] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4713'. [ 330.645516][ T40] audit: type=1400 audit(576.740:71582): avc: denied { override_creds } for pid=21247 comm="syz.8.4722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 330.726280][T21251] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4723'. [ 330.855813][ T40] audit: type=1400 audit(576.927:71583): avc: denied { name_bind } for pid=21263 comm="syz.4.4726" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 330.866961][T21260] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4724'. [ 330.920469][T21269] overlay: Unknown parameter 'smackfshat' [ 331.059777][T21282] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21282 comm=syz.4.4731 [ 331.067364][T21282] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21282 comm=syz.4.4731 [ 331.283007][ T40] audit: type=1400 audit(577.338:71584): avc: denied { setopt } for pid=21301 comm="syz.8.4738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 331.729641][T21329] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 331.836619][T21337] 9pnet: Could not find request transport: VIrtio [ 331.919564][T21344] program syz.4.4752 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 332.067350][T21357] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 332.070697][T21357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.155758][T21363] 9pnet: Could not find request transport: v [ 332.379887][T21385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4112 sclass=netlink_route_socket pid=21385 comm=syz.4.4766 [ 332.607664][ T29] libceph: connect (1)[c::]:6789 error -101 [ 332.610375][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 332.617454][ T29] libceph: connect (1)[c::]:6789 error -101 [ 332.622103][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 332.656971][T21397] fuse: Unknown parameter 'groupw:_id [ 332.656971][T21397] \' [ 332.754918][T21398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.817481][T21398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.894695][ T29] libceph: connect (1)[c::]:6789 error -101 [ 332.896607][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 333.004322][T21414] hub 9-0:1.0: USB hub found [ 333.006263][T21414] hub 9-0:1.0: 1 port detected [ 333.123128][T21420] netlink: 'syz.6.4777': attribute type 1 has an invalid length. [ 333.156981][T21425] netlink: 'syz.1.4779': attribute type 1 has an invalid length. [ 333.171727][T21425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.179281][T21425] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 333.186530][T21425] bond1: entered allmulticast mode [ 333.199333][T21425] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 333.202520][T21426] xfrm0 speed is unknown, defaulting to 1000 [ 333.272885][T21435] v: renamed from ip6_vti0 (while UP) [ 333.293620][T21426] lo speed is unknown, defaulting to 1000 [ 333.293645][T21429] xfrm0 speed is unknown, defaulting to 1000 [ 333.299601][T21426] xfrm0 speed is unknown, defaulting to 1000 [ 333.362605][T21453] netlink: 'syz.6.4780': attribute type 11 has an invalid length. [ 333.365765][T21453] netlink: 'syz.6.4780': attribute type 14 has an invalid length. [ 333.418104][T21429] lo speed is unknown, defaulting to 1000 [ 333.423186][T21429] xfrm0 speed is unknown, defaulting to 1000 [ 333.440182][ T29] libceph: connect (1)[c::]:6789 error -101 [ 333.442757][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 333.465017][T21392] ceph: No mds server is up or the cluster is laggy [ 333.620219][T21492] input: syz1 as /devices/virtual/input/input40 [ 333.625539][T21492] binder_alloc: 21491: binder_alloc_buf, no vma [ 333.696252][T21507] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 333.701118][T21496] syzkaller0: entered promiscuous mode [ 333.705601][T21496] syzkaller0: entered allmulticast mode [ 333.714615][T21507] bond0: (slave syz_tun): Releasing backup interface [ 333.716602][T21509] netlink: 'syz.1.4803': attribute type 7 has an invalid length. [ 333.725459][T21507] bond0: (slave team0): Releasing backup interface [ 333.732053][T21507] dummy0: left allmulticast mode [ 333.733932][T21507] bridge0: port 3(dummy0) entered disabled state [ 333.741356][T21507] bridge_slave_0: left allmulticast mode [ 333.743253][T21507] bridge_slave_0: left promiscuous mode [ 333.745211][T21507] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.750625][T21507] bridge_slave_1: left allmulticast mode [ 333.752615][T21507] bridge_slave_1: left promiscuous mode [ 333.754573][T21507] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.759361][T21507] bond0: (slave bond_slave_0): Releasing backup interface [ 333.768437][T21507] bond0: (slave bond_slave_1): Releasing backup interface [ 333.772236][T21513] netlink: 'syz.6.4802': attribute type 10 has an invalid length. [ 333.777211][T21507] team0: Port device team_slave_0 removed [ 333.780327][T21507] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 333.805839][T21513] mac80211_hwsim hwsim26 wlan1: left allmulticast mode [ 333.808155][ T8917] xfrm0 speed is unknown, defaulting to 1000 [ 333.828669][ T40] audit: type=1400 audit(579.713:71585): avc: denied { remount } for pid=21517 comm="syz.8.4805" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 334.042800][ T40] audit: type=1400 audit(579.919:71586): avc: denied { unmount } for pid=17385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 334.075031][ T40] audit: type=1400 audit(579.947:71587): avc: denied { mount } for pid=21530 comm="syz.8.4810" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 334.383661][T21559] syzkaller0: entered promiscuous mode [ 334.385925][T21559] syzkaller0: entered allmulticast mode [ 334.677998][T21572] netlink: 'syz.1.4822': attribute type 21 has an invalid length. [ 334.698465][T21566] netlink: 'syz.8.4820': attribute type 12 has an invalid length. [ 334.845408][ T40] audit: type=1400 audit(580.667:71588): avc: denied { attach_queue } for pid=21592 comm="syz.6.4829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 334.858510][T21596] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 334.897219][T21598] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 334.900109][T21598] overlayfs: missing 'lowerdir' [ 335.027395][T21613] syz_tun: entered allmulticast mode [ 335.033175][T21613] pimreg: entered allmulticast mode [ 335.034003][ T40] audit: type=1400 audit(580.844:71589): avc: denied { transfer } for pid=21614 comm="syz.6.4836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 335.038045][T21613] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 335.043981][T21613] mroute: pending queue full, dropping entries [ 335.047525][T21612] syz_tun: left allmulticast mode [ 335.115577][T21628] netlink: 'syz.6.4840': attribute type 10 has an invalid length. [ 335.115635][T21627] netlink: 'syz.6.4840': attribute type 10 has an invalid length. [ 335.118087][T21628] dummy0: left promiscuous mode [ 335.125352][T21628] team0: Port device dummy0 added [ 335.127494][T21628] netlink: 'syz.6.4840': attribute type 10 has an invalid length. [ 335.128190][T21627] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 335.137324][ T5995] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 335.144548][T21628] team0: Failed to send options change via netlink (err -105) [ 335.147484][T21628] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 335.150636][T21628] team0: Port device dummy0 removed [ 335.154314][T21628] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 335.184282][T16275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.186780][T16275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.312683][ T5995] usb 13-1: Using ep0 maxpacket: 8 [ 335.315797][ T5995] usb 13-1: config 0 has an invalid interface number: 151 but max is 1 [ 335.318410][ T5995] usb 13-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config [ 335.321740][ T5995] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 335.326701][ T5995] usb 13-1: config 0 has no interface number 0 [ 335.328673][ T5995] usb 13-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 335.332120][ T5995] usb 13-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 335.335937][ T5995] usb 13-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 722 [ 335.339106][ T5995] usb 13-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 335.345022][ T5995] usb 13-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 335.347874][ T5995] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.350416][ T5995] usb 13-1: Product: syz [ 335.351965][ T5995] usb 13-1: Manufacturer: syz [ 335.353482][ T5995] usb 13-1: SerialNumber: syz [ 335.359350][ T5995] usb 13-1: config 0 descriptor?? [ 335.361566][T21595] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 335.365686][ T5995] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 335.584138][ T5996] usb 13-1: USB disconnect, device number 8 [ 335.817381][ T40] audit: type=1400 audit(581.574:71590): avc: denied { mounton } for pid=21664 comm="syz.6.4851" path="/proc/1774/cgroup" dev="proc" ino=102980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 335.993516][T21672] __nla_validate_parse: 24 callbacks suppressed [ 335.993534][T21672] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4854'. [ 336.010368][T21672] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 336.158070][T21676] kvm: user requested TSC rate below hardware speed [ 336.160457][T21680] trusted_key: encrypted_key: insufficient parameters specified [ 336.163334][T21676] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4261517534 (8523035068 ns) > initial count (7554138186 ns). Using initial count to start timer. [ 336.362405][T21695] fuse: Unknown parameter '0x0000000000000006' [ 336.365365][T21695] program syz.6.4864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.376027][T21696] autofs4:pid:21696:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 336.511986][T21717] 9pnet_fd: p9_fd_create_tcp (21717): problem connecting socket to 127.0.0.1 [ 336.514996][T21718] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4870'. [ 336.520252][ T5965] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 336.577597][ T40] audit: type=1326 audit(582.284:71591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21726 comm="syz.6.4872" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060558f749 code=0x7ffc0000 [ 336.584863][ T64] Bluetooth: hci2: command 0x0405 tx timeout [ 336.586845][ T40] audit: type=1326 audit(582.284:71592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21726 comm="syz.6.4872" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060558f749 code=0x7ffc0000 [ 336.601212][T21732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4874'. [ 336.684835][ T5965] usb 13-1: config index 0 descriptor too short (expected 23569, got 27) [ 336.688397][ T5965] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.693706][ T5965] usb 13-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 336.697586][ T5965] usb 13-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 336.700894][ T5965] usb 13-1: Manufacturer: syz [ 336.705463][ T5965] usb 13-1: config 0 descriptor?? [ 336.766264][ T5965] rc_core: IR keymap rc-hauppauge not found [ 336.768886][ T5965] Registered IR keymap rc-empty [ 336.772996][ T5965] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 336.783313][ T5965] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input41 [ 336.934160][ T29] usb 13-1: USB disconnect, device number 9 [ 337.103481][ T40] audit: type=1400 audit(582.780:71593): avc: denied { setattr } for pid=21758 comm="syz.4.4882" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 337.280097][T21773] EXT4-fs (nbd4): unable to read superblock [ 337.451075][T21785] xfrm0 speed is unknown, defaulting to 1000 [ 337.502116][T21792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4894'. [ 337.533103][T21785] lo speed is unknown, defaulting to 1000 [ 337.537152][T21785] xfrm0 speed is unknown, defaulting to 1000 [ 337.560969][T21802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4896'. [ 337.605310][T21785] netlink: 28 bytes leftover after parsing attributes in process `/dev/v4l-subdev'. [ 337.654942][T21808] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.713016][T21808] bridge_slave_1 (unregistering): left allmulticast mode [ 337.715326][T21808] bridge_slave_1 (unregistering): left promiscuous mode [ 337.717606][T21808] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.890066][T21820] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 337.988663][T21816] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4902'. [ 337.990113][T21829] 9pnet_fd: p9_fd_create_tcp (21829): problem connecting socket to 127.0.0.1 [ 338.208700][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.215409][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.219977][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.223075][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.227509][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.248526][T21836] xfrm0 speed is unknown, defaulting to 1000 [ 338.335039][T21836] lo speed is unknown, defaulting to 1000 [ 338.338275][T21836] xfrm0 speed is unknown, defaulting to 1000 [ 338.467902][T21836] chnl_net:caif_netlink_parms(): no params data found [ 338.553677][T21836] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.556790][T21836] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.559917][T21836] bridge_slave_0: entered allmulticast mode [ 338.563503][T21836] bridge_slave_0: entered promiscuous mode [ 338.567181][T21836] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.569457][T21836] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.572173][T21836] bridge_slave_1: entered allmulticast mode [ 338.576419][T21836] bridge_slave_1: entered promiscuous mode [ 338.635079][T21836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.644764][T21836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.695119][T21836] team0: Port device team_slave_0 added [ 338.698588][T21836] team0: Port device team_slave_1 added [ 338.730344][T21836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.732602][T21836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.741402][T21836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.747034][T21836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.749432][T21836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.759132][T21836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.799246][T21836] hsr_slave_0: entered promiscuous mode [ 338.801681][T21836] hsr_slave_1: entered promiscuous mode [ 338.803982][T21836] debugfs: 'hsr0' already exists in 'hsr' [ 338.805715][T21836] Cannot create hsr debugfs directory [ 338.887828][T21863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.923443][T21865] netlink: 'syz.1.4915': attribute type 1 has an invalid length. [ 338.943197][T21836] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.946723][T21836] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.972068][T21865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19472 sclass=netlink_route_socket pid=21865 comm=syz.1.4915 [ 338.978735][ T40] audit: type=1400 audit(584.528:71594): avc: denied { read } for pid=21864 comm="syz.1.4915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 338.979635][T21865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4915'. [ 338.991216][T21865] 8021q: adding VLAN 0 to HW filter on device bond2 [ 339.089966][T21875] xt_connbytes: Forcing CT accounting to be enabled [ 339.111477][T21875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4918'. [ 339.115295][T21875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4918'. [ 339.121075][T21875] overlayfs: failed to resolve './file0': -2 [ 339.126277][T21836] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.129517][T21836] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.199907][T21836] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.203337][T21836] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.218960][T21878] netlink: zone id is out of range [ 339.313686][T21836] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.317990][T21836] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.333101][ T40] audit: type=1400 audit(584.865:71595): avc: denied { sqpoll } for pid=21882 comm="syz.1.4920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 339.377376][T21888] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 339.499093][T21836] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 339.503588][T21836] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 339.513313][T21836] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 339.522256][T21836] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 339.554655][T21903] sctp: Trying to GSO but underlying device doesn't support it. [ 339.577567][T21836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.597605][T21836] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.606922][T16275] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.609515][T16275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.616446][T16315] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.618727][T16315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.653880][ T5291] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 339.653930][ T5291] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 339.659061][ T5291] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 339.662183][ T5291] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 339.670334][ T5291] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 339.673617][ T5291] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 339.676932][ T5291] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 339.680137][ T5291] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 339.683370][ T5291] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 339.687238][ T5291] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 339.757626][T21836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.841109][T21935] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 339.843475][T21935] IPv6: NLM_F_CREATE should be set when creating new route [ 339.938030][T21836] veth0_vlan: entered promiscuous mode [ 339.943314][T21836] veth1_vlan: entered promiscuous mode [ 339.957242][T21836] veth0_macvtap: entered promiscuous mode [ 339.961032][T21836] veth1_macvtap: entered promiscuous mode [ 339.973050][T21836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.984129][T21836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.990179][T16314] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.993046][T16314] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.996758][T16314] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.999516][T16314] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.037806][T16275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.040690][T16275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.056356][ T1234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.059566][ T1234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.233206][ T40] audit: type=1804 audit(585.706:71596): pid=21963 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.4938" name="/newroot/227/file0" dev="tmpfs" ino=1215 res=1 errno=0 [ 340.314265][ T40] audit: type=1400 audit(585.781:71597): avc: denied { write } for pid=21966 comm="syz.6.4940" name="/" dev="configfs" ino=3167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 340.318898][T21967] netlink: 'syz.6.4940': attribute type 1 has an invalid length. [ 340.323864][T21967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 340.326756][T21967] IPv6: NLM_F_CREATE should be set when creating new route [ 340.329786][T21967] IPv6: NLM_F_CREATE should be set when creating new route [ 340.334548][T21967] netlink: 'syz.6.4940': attribute type 1 has an invalid length. [ 340.337758][T21967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 340.351567][ T40] audit: type=1400 audit(585.818:71598): avc: denied { unmount } for pid=21836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 340.376223][T21970] futex_wake_op: syz.4.4939 tries to shift op by -1; fix this program [ 340.412342][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 340.412353][ T40] audit: type=1400 audit(585.865:71600): avc: denied { setattr } for pid=21971 comm="syz.6.4942" name="SCTP" dev="sockfs" ino=105568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 340.412706][T21972] IPVS: set_ctl: invalid protocol: 2 10.1.1.0:20003 [ 340.426632][ T40] audit: type=1400 audit(585.884:71601): avc: denied { setattr } for pid=21971 comm="syz.6.4942" path="socket:[105571]" dev="sockfs" ino=105571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 340.434134][ T40] audit: type=1400 audit(585.884:71602): avc: denied { map } for pid=21971 comm="syz.6.4942" path="/proc/sys/net/ipv4/vs/sync_ports" dev="proc" ino=105575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 340.442160][ T5291] Bluetooth: hci4: command tx timeout [ 340.445870][ T40] audit: type=1400 audit(585.893:71603): avc: denied { execute } for pid=21964 comm="syz.4.4939" path="/dev/dsp" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 340.471831][T21976] : entered promiscuous mode [ 341.039648][T22014] syz.8.4955(22014): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 341.044145][T22014] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 341.119080][ T5291] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 341.125306][ T5291] Bluetooth: hci1: Injecting HCI hardware error event [ 341.130770][ T64] Bluetooth: hci1: hardware error 0x00 [ 341.347573][T22044] __nla_validate_parse: 5 callbacks suppressed [ 341.347584][T22044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4963'. [ 341.398771][T22049] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 341.405027][T22049] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4964'. [ 341.751224][T22059] xfrm0 speed is unknown, defaulting to 1000 [ 341.768131][ T40] audit: type=1326 audit(587.137:71604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22060 comm="syz.8.4969" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d3f58f749 code=0x0 [ 341.831622][T22059] lo speed is unknown, defaulting to 1000 [ 341.834752][T22059] xfrm0 speed is unknown, defaulting to 1000 [ 341.903477][ T40] audit: type=1400 audit(587.268:71605): avc: denied { mount } for pid=22058 comm="syz.1.4968" name="/" dev="rpc_pipefs" ino=105908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 341.911106][ T40] audit: type=1326 audit(587.268:71606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22058 comm="syz.1.4968" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd9ed8f749 code=0x0 [ 342.478782][ T5291] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 342.480955][ T5291] Bluetooth: hci1: unexpected event for opcode 0x203e [ 342.484746][T22080] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22080 comm=syz.4.4975 [ 342.670007][ T5291] Bluetooth: hci4: command tx timeout [ 342.755194][T22087] xt_hashlimit: max too large, truncated to 1048576 [ 342.930026][T22106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4980'. [ 342.933834][T22106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4980'. [ 342.939277][T22105] openvswitch: netlink: Missing key (keys=40, expected=100) [ 342.983877][T22110] hub 9-0:1.0: USB hub found [ 342.985538][T22110] hub 9-0:1.0: 1 port detected [ 343.039297][ T40] audit: type=1400 audit(588.324:71607): avc: denied { append } for pid=22115 comm="syz.8.4987" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 343.169964][T22146] netlink: 'syz.6.4995': attribute type 14 has an invalid length. [ 343.172950][T22146] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4995'. [ 343.181501][T16305] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.188029][T22146] netlink: 'syz.6.4995': attribute type 14 has an invalid length. [ 343.188063][T16305] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.190535][T22146] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4995'. [ 343.202642][T22137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.207528][T16305] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.210570][T16305] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.210645][T22133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4992'. [ 343.218161][ T40] audit: type=1400 audit(588.502:71608): avc: denied { execute } for pid=22145 comm="syz.6.4995" path="/selinux/load" dev="selinuxfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 343.219271][T22146] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 343.230096][T22146] SELinux: failed to load policy [ 343.233423][T22146] i2c i2c-1: Invalid block write size 34 [ 343.267078][T22154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4998'. [ 343.270548][T22154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4998'. [ 343.343727][ T64] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 343.344284][T22179] vivid-000: ================= START STATUS ================= [ 343.349592][T22179] vivid-000: Test Pattern: 75% Colorbar [ 343.351391][T22179] vivid-000: Fill Percentage of Frame: 100 [ 343.353285][T22179] vivid-000: Horizontal Movement: No Movement [ 343.357261][T22179] vivid-000: Vertical Movement: Move Down [ 343.359541][T22179] vivid-000: OSD Text Mode: All [ 343.361486][T22179] vivid-000: Show Border: true [ 343.363123][T22179] vivid-000: Show Square: true [ 343.363586][ T40] audit: type=1400 audit(588.623:71609): avc: denied { mount } for pid=22183 comm="syz.1.5007" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 343.364507][T22184] overlayfs: failed to clone lowerpath [ 343.364817][T22179] vivid-000: Sensor Flipped Horizontally: [ 343.372836][T22184] overlayfs: failed to clone lowerpath [ 343.374075][T22179] true [ 343.378904][T22179] vivid-000: Sensor Flipped Vertically: true [ 343.381049][T22179] vivid-000: Insert SAV Code in Image: true [ 343.383004][T22179] vivid-000: Insert EAV Code in Image: false [ 343.384982][T22179] vivid-000: Insert Video Guard Band: false [ 343.387368][T22179] vivid-000: Reduced Framerate: false [ 343.389081][T22179] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 343.391597][T22179] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 343.394253][T22179] vivid-000: Enable Capture Cropping: true grabbed [ 343.396632][T22179] vivid-000: Enable Capture Composing: true grabbed [ 343.400796][T22179] vivid-000: Enable Capture Scaler: true grabbed [ 343.402838][T22179] vivid-000: Timestamp Source: End of Frame [ 343.404817][T22179] vivid-000: Colorspace: Rec. 709 [ 343.406507][T22179] vivid-000: Transfer Function: Default [ 343.409505][T22179] vivid-000: Y'CbCr Encoding: Default [ 343.411304][T22179] vivid-000: HSV Encoding: Hue 0-256 [ 343.412956][T22179] vivid-000: Quantization: Default [ 343.414965][T22179] vivid-000: Apply Alpha To Red Only: false [ 343.417272][T22179] vivid-000: Standard Aspect Ratio: 4x3 [ 343.419827][T22179] vivid-000: DV Timings Signal Mode: Current DV Timings [ 343.422290][T22179] vivid-000: DV Timings: 4096x2160p60 inactive [ 343.424393][T22179] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 343.426751][T22179] vivid-000: Maximum EDID Blocks: 2 [ 343.428390][T22179] vivid-000: Limited RGB Range (16-235): true [ 343.430096][T22194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22194 comm=syz.1.5010 [ 343.430971][T22179] vivid-000: Rx RGB Quantization Range: [ 343.431306][T22195] netlink: 'syz.1.5010': attribute type 1 has an invalid length. [ 343.438467][T22179] RGB Full Range (0-255) [ 343.440159][T22179] vivid-000: Power Present: 0x00000001 [ 343.442396][T22179] tpg source WxH: 1280x720 (R'G'B) [ 343.444540][T22179] tpg field: 1 [ 343.445959][T22179] tpg crop: (0,0)/64x64 [ 343.447361][T22179] tpg compose: (0,0)/16x16 [ 343.448831][T22179] tpg colorspace: 1 [ 343.450168][T22179] tpg transfer function: 6/6 [ 343.452544][T22179] tpg quantization: 0/1 [ 343.454130][T22179] tpg RGB range: 2/1 [ 343.456020][T22179] vivid-000: ================== END STATUS ================== [ 343.488601][T22204] netlink: 'syz.4.5013': attribute type 4 has an invalid length. [ 343.530529][T22204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=22204 comm=syz.4.5013 [ 343.543492][T22210] IPVS: stopping master sync thread 21596 ... [ 343.548811][T22210] tmpfs: Unknown parameter 'appraise_type' [ 343.577922][T22223] netlink: 'syz.4.5018': attribute type 1 has an invalid length. [ 343.591072][T22215] orangefs_devreq_write_iter: userspace claims version42, minimum version required: 20903. [ 343.625879][T22234] CIFS mount error: No usable UNC path provided in device string! [ 343.625879][T22234] [ 343.629037][T22234] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 343.942760][ T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 343.987984][T22268] fuse: Unknown parameter '0x00000000000000050x0000000000000003' [ 344.114160][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 344.118580][ T9] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 344.121342][ T9] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 344.124818][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 344.127904][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 344.133920][ T9] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 344.136852][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.139403][ T9] usb 9-1: Product: ピ罝掤ꐌ [ 344.141050][ T9] usb 9-1: Manufacturer: Ȭํ䩀ᐞ싘パꕕ豹ォ䨆 [ 344.143326][ T9] usb 9-1: SerialNumber: ࠓ [ 344.172817][T22278] netlink: 6032 bytes leftover after parsing attributes in process `syz.6.5032'. [ 344.177314][T22278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22278 comm=syz.6.5032 [ 344.309022][T22289] syzkaller0: entered promiscuous mode [ 344.310962][T22289] syzkaller0: entered allmulticast mode [ 344.380795][ T9] usb 9-1: 0:2 : does not exist [ 344.391080][ T9] usb 9-1: USB disconnect, device number 10 [ 344.596028][T22296] netlink: 'syz.6.5038': attribute type 13 has an invalid length. [ 344.708025][T22297] lo: Caught tx_queue_len zero misconfig [ 344.716837][T22296] netlink: 'syz.6.5038': attribute type 11 has an invalid length. [ 344.885373][ T64] Bluetooth: hci4: command tx timeout [ 344.945070][T22316] kAFS: unable to lookup cell 'syz0' [ 345.124579][T22342] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 345.287360][T22342] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 345.322687][ T6188] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 345.330099][T22345] netlink: 'syz.4.5053': attribute type 32 has an invalid length. [ 345.342909][T22345] bond4: option coupled_control: invalid value (102) [ 345.347270][T22345] bond4 (unregistering): Released all slaves [ 345.415275][T22370] tipc: Failed to remove unknown binding: 66,1,1/0:3647737330/3647737332 [ 345.419310][T22370] tipc: Failed to remove unknown binding: 66,1,1/0:3647737330/3647737332 [ 345.449136][T22374] netlink: 'syz.6.5060': attribute type 10 has an invalid length. [ 345.452000][T22374] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.454448][T22374] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.459690][T22374] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.462044][T22374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.464474][T22374] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.466687][T22374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.470886][T22374] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 345.495282][ T6188] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.499952][ T6188] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.515097][ T6188] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 345.520696][ T6188] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 345.525417][ T6188] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.529620][ T6188] usb 13-1: config 0 descriptor?? [ 345.773275][T22400] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 345.777082][T22400] tmpfs: Unknown parameter 'smackfstransmute' [ 345.816350][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 345.816362][ T40] audit: type=1400 audit(590.924:71621): avc: denied { execmod } for pid=22401 comm="syz.1.5070" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=106352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 345.835624][ T53] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 345.868422][ T40] audit: type=1400 audit(590.980:71622): avc: denied { create } for pid=22406 comm="syz.1.5072" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 345.874765][ T40] audit: type=1400 audit(590.980:71623): avc: denied { read } for pid=22406 comm="syz.1.5072" name="file0" dev="tmpfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 345.882211][ T40] audit: type=1400 audit(590.980:71624): avc: denied { open } for pid=22406 comm="syz.1.5072" path="/161/file0" dev="tmpfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 345.889554][ T40] audit: type=1400 audit(590.989:71625): avc: denied { unlink } for pid=20514 comm="syz-executor" name="file0" dev="tmpfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 345.965574][ T6188] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x2 [ 345.970796][ T6188] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 346.008367][ T53] usb 9-1: Using ep0 maxpacket: 16 [ 346.012227][ T53] usb 9-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 346.016053][ T53] usb 9-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 346.024743][ T53] usb 9-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.030689][ T53] usb 9-1: config 1 interface 0 has no altsetting 0 [ 346.037242][ T53] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 346.042774][ T53] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.046138][ T53] usb 9-1: Product: syz [ 346.047962][ T53] usb 9-1: Manufacturer: syz [ 346.050102][ T53] usb 9-1: SerialNumber: syz [ 346.079789][T22429] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.084251][T22429] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.182714][T22429] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.185890][T22429] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.269071][T22429] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.273799][T22429] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.277381][ T53] usblp 9-1:1.0: usblp1: USB Unidirectional printer dev 11 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 346.367273][T22429] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.370805][T22429] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.487183][T16281] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.490603][T16281] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.510748][T16281] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.513274][T16281] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.521562][T16314] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.526447][T16314] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.537735][T16314] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.540381][T16314] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.788129][ T40] audit: type=1400 audit(591.840:71626): avc: denied { ioctl } for pid=22468 comm="syz.1.5089" path="socket:[107797]" dev="sockfs" ino=107797 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 346.883323][T22481] netlink: 'syz.6.5093': attribute type 21 has an invalid length. [ 346.886269][T22481] __nla_validate_parse: 9 callbacks suppressed [ 346.886284][T22481] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5093'. [ 346.892278][T22481] netlink: 'syz.6.5093': attribute type 4 has an invalid length. [ 346.895425][T22481] netlink: 'syz.6.5093': attribute type 5 has an invalid length. [ 346.897918][T22481] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5093'. [ 346.945721][T22483] smc: net device hsr0 applied user defined pnetid SYZ2 [ 346.949598][T22483] smc: net device hsr0 erased user defined pnetid SYZ2 [ 346.952761][T22485] Cannot find set identified by id 0 to match [ 347.027764][T22489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5096'. [ 347.108439][ T5291] Bluetooth: hci4: command tx timeout [ 347.260798][ T5291] Bluetooth: hci2: unexpected event for opcode 0x080c [ 347.265319][ T5291] Bluetooth: hci2: unexpected event for opcode 0x080c [ 347.353708][T22509] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 347.457608][T22516] 9p: Unknown uid 00000000004294967295 [ 348.093915][ T9] usb 13-1: USB disconnect, device number 10 [ 348.305767][T22538] xt_HMARK: spi-set and port-set can't be combined [ 348.338938][T22538] xfrm0 speed is unknown, defaulting to 1000 [ 348.379250][T22539] xt_TPROXY: Can be used only with -p tcp or -p udp [ 348.419960][T22538] lo speed is unknown, defaulting to 1000 [ 348.423094][T22538] xfrm0 speed is unknown, defaulting to 1000 [ 348.620923][T22545] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.5113'. [ 348.624985][T22545] openvswitch: netlink: Message has 6 unknown bytes. [ 348.793015][ T53] usb 9-1: USB disconnect, device number 11 [ 348.797378][ T53] usblp1: removed [ 348.875183][T22551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8229 sclass=netlink_route_socket pid=22551 comm=syz.4.5115 [ 348.880528][T22553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.005223][T22561] input: syz1 as /devices/virtual/input/input42 [ 349.066254][T22565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22565 comm=syz.6.5120 [ 349.070942][T22563] tmpfs: Unknown parameter 'nowap' [ 349.143151][T22569] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 349.147604][T22569] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 349.150662][T22569] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 349.153936][T22569] UDF-fs: Scanning with blocksize 512 failed [ 349.157311][T22569] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 349.160601][T22569] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 349.164379][T22569] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 349.166835][T22569] UDF-fs: Scanning with blocksize 1024 failed [ 349.169114][T22569] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 349.172318][T22569] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 349.176297][T22569] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 349.178710][T22569] UDF-fs: Scanning with blocksize 2048 failed [ 349.180976][T22569] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 349.184174][T22569] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 349.187431][T22569] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 349.190458][T22569] UDF-fs: Scanning with blocksize 4096 failed [ 349.192904][T22569] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 349.198340][T22570] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5121'. [ 349.287308][T22574] overlayfs: failed lookup in lower (newroot/74, name='file1', err=-40): overlapping layers [ 349.390305][ T40] audit: type=1400 audit(594.271:71627): avc: denied { append } for pid=22577 comm="syz.6.5125" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 349.391969][T22578] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 349.443447][T22586] __vm_enough_memory: pid: 22586, comm: syz.1.5128, bytes: 4503599627366400 not enough memory for the allocation [ 349.612333][T22602] kernel read not supported for file /blkio.bfq.io_wait_time_recursive (pid: 22602 comm: syz.1.5130) [ 349.616944][ T40] audit: type=1800 audit(594.477:71628): pid=22602 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.5130" name="blkio.bfq.io_wait_time_recursive" dev="mqueue" ino=107303 res=0 errno=0 [ 349.730917][T22613] x_tables: ip_tables: REJECT target: only valid in filter table, not  [ 349.834111][T22628] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 350.095693][T22647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5143'. [ 350.102525][T22647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5143'. [ 350.110734][T22647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5143'. [ 350.119753][T22647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5143'. [ 350.122878][T22657] xfrm0 speed is unknown, defaulting to 1000 [ 350.198957][T22657] lo speed is unknown, defaulting to 1000 [ 350.202422][T22657] xfrm0 speed is unknown, defaulting to 1000 [ 350.326173][T22665] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5147'. [ 350.830204][ T40] audit: type=1400 audit(595.608:71629): avc: denied { map } for pid=22704 comm="syz.6.5157" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 351.342297][T22730] netlink: 'syz.6.5165': attribute type 2 has an invalid length. [ 351.346225][ T40] audit: type=1400 audit(596.094:71630): avc: denied { write } for pid=22729 comm="syz.6.5165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 351.414743][T22695] 9pnet_fd: p9_fd_create_tcp (22695): problem connecting socket to 127.0.0.1 [ 351.501068][T22739] veth1_macvtap: left promiscuous mode [ 351.648975][T22752] futex_wake_op: syz.4.5173 tries to shift op by -1; fix this program [ 351.654288][ T40] audit: type=1400 audit(596.384:71631): avc: denied { getopt } for pid=22753 comm="syz.1.5174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 351.706202][ T40] audit: type=1400 audit(596.431:71632): avc: denied { accept } for pid=22760 comm="syz.6.5177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 351.717789][T22763] : renamed from bridge_slave_0 (while UP) [ 351.986176][T22785] ufs: You didn't specify the type of your ufs filesystem [ 351.986176][T22785] [ 351.986176][T22785] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 351.986176][T22785] [ 351.986176][T22785] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 351.987477][ T40] audit: type=1400 audit(596.693:71633): avc: denied { read } for pid=22786 comm="syz.4.5186" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 351.998587][T22785] ufs: ufstype=old is supported read-only [ 351.999884][T22785] ufs: ufs_fill_super(): bad magic number [ 352.011373][ T40] audit: type=1400 audit(596.693:71634): avc: denied { open } for pid=22786 comm="syz.4.5186" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 352.021203][ T40] audit: type=1400 audit(596.693:71635): avc: denied { ioctl } for pid=22786 comm="syz.4.5186" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 352.127633][T22797] syzkaller0: entered promiscuous mode [ 352.129487][T22797] syzkaller0: entered allmulticast mode [ 352.134081][T22797] tipc: Started in network mode [ 352.135965][T22797] tipc: Node identity b243b70fc3a1, cluster identity 4711 [ 352.138466][T22797] tipc: Enabled bearer , priority 0 [ 352.143544][T22797] tipc: Resetting bearer [ 352.293265][T22796] tipc: Resetting bearer [ 352.306346][ T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 352.309948][T22796] tipc: Disabling bearer [ 352.477361][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 352.481172][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 352.485928][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 352.489015][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.491638][ T9] usb 9-1: Product: syz [ 352.493049][ T9] usb 9-1: Manufacturer: syz [ 352.494537][ T9] usb 9-1: SerialNumber: syz [ 352.497275][ T9] usb 9-1: config 0 descriptor?? [ 352.500639][ T9] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 352.503639][ T9] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 352.737623][T22805] netlink: 'syz.6.5191': attribute type 8 has an invalid length. [ 352.740115][T22805] __nla_validate_parse: 6 callbacks suppressed [ 352.740123][T22805] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5191'. [ 352.748023][T22805] bond0: entered promiscuous mode [ 352.749926][T22805] bond_slave_0: entered promiscuous mode [ 352.751947][T22805] bond_slave_1: entered promiscuous mode [ 352.754661][T22805] bridge0: entered promiscuous mode [ 352.761227][T22805] gretap0: entered promiscuous mode [ 352.764584][T22805] debugfs: 'hsr1' already exists in 'hsr' [ 352.767369][T22805] Cannot create hsr debugfs directory [ 352.771165][T22805] hsr1: entered promiscuous mode [ 352.919375][ T40] audit: type=1400 audit(597.571:71636): avc: denied { name_bind 0x1000000 } for pid=22823 comm="syz.6.5197" path="socket:[109115]" dev="sockfs" ino=109115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 352.920453][T22824] netlink: 180 bytes leftover after parsing attributes in process `syz.6.5197'. [ 352.938265][ T9] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 352.995078][T22832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5200'. [ 353.195847][ T9] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 353.198653][ T9] em28xx 9-1:0.0: board has no eeprom [ 353.322538][ T9] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 353.325050][ T9] em28xx 9-1:0.0: dvb set to bulk mode. [ 353.329882][ T9] em28xx 9-1:0.0: Binding DVB extension [ 353.739278][ T8917] usb 11-1: new full-speed USB device number 11 using dummy_hcd [ 353.912973][ T8917] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.917503][ T8917] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 353.921897][ T8917] usb 11-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 353.925771][ T8917] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.932186][ T8917] usb 11-1: config 0 descriptor?? [ 353.937212][ T8917] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 353.941814][ T8917] dvb-usb: bulk message failed: -22 (3/0) [ 353.952099][ T8917] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 353.956702][ T8917] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 353.959252][ T8917] usb 11-1: media controller created [ 353.965413][ T8917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 353.976659][ T8917] dvb-usb: bulk message failed: -22 (6/0) [ 353.979013][ T8917] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 353.983838][ T8917] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb11/11-1/input/input43 [ 353.990061][ T8917] dvb-usb: schedule remote query interval to 150 msecs. [ 353.992328][ T8917] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 354.163031][T22852] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5206'. [ 354.168647][ T6189] dvb-usb: bulk message failed: -22 (1/0) [ 354.171805][ T6189] dvb-usb: error while querying for an remote control event. [ 354.199759][ T5996] usb 11-1: USB disconnect, device number 11 [ 354.237209][ T5996] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 354.505244][ T9] em28xx 9-1:0.0: Registering input extension [ 354.770667][ T8917] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 354.944111][ T8917] usb 13-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 354.948934][ T8917] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.952961][ T8917] usb 13-1: Product: syz [ 354.954824][ T8917] usb 13-1: Manufacturer: syz [ 354.956930][ T8917] usb 13-1: SerialNumber: syz [ 354.965418][ T8917] usb 13-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 354.994432][ T6189] usb 13-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 355.072080][T22903] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5223'. [ 355.074934][T22903] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5223'. [ 355.078964][T22903] netlink: 'syz.1.5223': attribute type 5 has an invalid length. [ 355.082979][T22903] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5223'. [ 355.217971][T22909] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5214'. [ 355.221962][T22909] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5214'. [ 355.227030][T22909] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5214'. [ 355.235088][ T9] usb 13-1: USB disconnect, device number 11 [ 355.240578][ C3] dummy_hcd dummy_hcd.8: timer fired with no URBs pending? [ 355.525500][ T6013] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 355.623211][ T6188] usb 9-1: USB disconnect, device number 12 [ 355.625770][ T6188] em28xx 9-1:0.0: Disconnecting em28xx [ 355.627655][ T6188] em28xx 9-1:0.0: Closing input extension [ 355.642148][ T6188] em28xx 9-1:0.0: Freeing device [ 355.693361][ T40] audit: type=1326 audit(600.161:71637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22913 comm="syz.4.5227" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2036d8f749 code=0x7ffc0000 [ 355.702521][ T40] audit: type=1326 audit(600.161:71638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22913 comm="syz.4.5227" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2036d8f749 code=0x7ffc0000 [ 355.707308][ T6013] usb 11-1: Using ep0 maxpacket: 8 [ 355.709637][ T40] audit: type=1326 audit(600.161:71639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22913 comm="syz.4.5227" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2036d8f749 code=0x7ffc0000 [ 355.713382][ T6013] usb 11-1: config 2 interface 0 has no altsetting 0 [ 355.725898][ T6013] usb 11-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 355.730046][ T6013] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.733361][ T6013] usb 11-1: Product: syz [ 355.735258][ T6013] usb 11-1: Manufacturer: syz [ 355.737216][ T6013] usb 11-1: SerialNumber: syz [ 355.878758][T22921] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.937822][T22926] can0: slcan on ttyS3. [ 355.962552][ T6013] usb 11-1: USB disconnect, device number 12 [ 355.993307][T22921] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.048211][T22931] binder: 22930:22931 ioctl c018620b 0 returned -14 [ 356.082428][T22925] can0 (unregistered): slcan off ttyS3. [ 356.094439][ T6189] ath9k_htc 13-1:1.0: ath9k_htc: Target is unresponsive [ 356.100571][ T6189] ath9k_htc: Failed to initialize the device [ 356.116335][ T9] usb 13-1: ath9k_htc: USB layer deinitialized [ 356.121511][T22921] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.136026][T22932] geneve2: entered promiscuous mode [ 356.138215][T22932] geneve2: entered allmulticast mode [ 356.197801][T22921] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.351225][T16272] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.358774][T16272] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.368262][T16312] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.377796][T16300] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.472174][T22948] IPVS: length: 24 != 4802509272 [ 356.502015][T22955] netlink: 'syz.8.5239': attribute type 29 has an invalid length. [ 356.505370][T22954] netlink: 'syz.8.5239': attribute type 29 has an invalid length. [ 356.726371][T22986] netlink: zone id is out of range [ 356.728548][T22986] netlink: zone id is out of range [ 356.731070][T22986] netlink: set zone limit has 8 unknown bytes [ 356.885422][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 356.885434][ T40] audit: type=1400 audit(601.265:71650): avc: denied { accept } for pid=23005 comm="syz.8.5255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 356.910688][ T40] audit: type=1400 audit(601.293:71651): avc: denied { mount } for pid=23008 comm="syz.1.5257" name="/" dev="hugetlbfs" ino=108423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 356.912358][T23009] overlayfs: failed to clone lowerpath [ 356.925525][T23011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8208 sclass=netlink_route_socket pid=23011 comm=syz.6.5256 [ 356.931224][T23012] overlayfs: failed to clone lowerpath [ 357.093679][T23034] program syz.8.5264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.257374][T23057] ptm ptm8: ldisc open failed (-12), clearing slot 8 [ 357.445104][T23084] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 357.500902][ T40] audit: type=1326 audit(601.844:71652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23091 comm="syz.6.5281" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdce6f8f749 code=0x0 [ 357.538216][T23089] pimreg: entered allmulticast mode [ 357.685520][T23112] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 357.691653][T23113] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 357.718974][T12040] libceph: connect (1)[c::]:6789 error -101 [ 357.720986][T12040] libceph: mon0 (1)[c::]:6789 connect error [ 357.826362][T23119] ceph: No mds server is up or the cluster is laggy [ 357.956918][T23154] veth1_to_hsr: entered promiscuous mode [ 357.958758][T23154] macvlan2: entered allmulticast mode [ 357.960441][T23154] veth1_to_hsr: entered allmulticast mode [ 358.009610][T23164] xt_bpf: check failed: parse error [ 358.353504][T23183] xfrm0 speed is unknown, defaulting to 1000 [ 358.420261][T23187] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 358.456332][T23183] lo speed is unknown, defaulting to 1000 [ 358.459542][T23183] xfrm0 speed is unknown, defaulting to 1000 [ 358.467734][T23195] loop5: detected capacity change from 0 to 7 [ 358.470607][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 358.473747][ C2] buffer_io_error: 62 callbacks suppressed [ 358.473760][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 358.478558][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 358.481524][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 358.485340][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 358.490530][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 358.493314][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 358.496225][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 358.499024][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 358.502233][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 358.504887][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 358.507950][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 358.513497][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 358.516975][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 358.519572][T23195] ldm_validate_partition_table(): Disk read failed. [ 358.521999][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 358.525044][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 358.527840][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 358.530826][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 358.533198][T23183] __nla_validate_parse: 34 callbacks suppressed [ 358.533212][T23183] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5309'. [ 358.533570][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 358.542054][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 358.544934][T23195] Dev loop5: unable to read RDB block 0 [ 358.548955][T23195] loop5: unable to read partition table [ 358.552567][T23195] loop5: partition table beyond EOD, truncated [ 358.554666][T23195] loop_reread_partitions: partition scan of loop5 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 358.556819][T23201] netlink: 'syz.8.5313': attribute type 3 has an invalid length. [ 358.562052][T23201] netlink: 'syz.8.5313': attribute type 1 has an invalid length. [ 358.565842][T23201] netlink: 216 bytes leftover after parsing attributes in process `syz.8.5313'. [ 358.696982][T23215] tls_set_device_offload_rx: netdev not found [ 358.721474][T23217] bond4 (unregistering): Released all slaves [ 358.829264][ T5965] IPVS: starting estimator thread 0... [ 358.860456][T23235] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 358.926482][T23238] IPVS: using max 50 ests per chain, 120000 per kthread [ 359.001956][T23269] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5334'. [ 359.021619][T23271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5335'. [ 359.025570][T23271] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5335'. [ 359.032751][T23273] Invalid source name [ 359.034346][T23273] UBIFS error (pid: 23273): cannot open "/dev/sg0", error -22 [ 359.229116][T23287] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 359.231641][T23289] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5340'. [ 359.269261][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 359.285384][T23284] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5337'. [ 359.536108][ T5965] usb 13-1: new full-speed USB device number 12 using dummy_hcd [ 359.579984][T23303] smc: net device hsr0 applied user defined pnetid SYZ2 [ 359.584592][T23303] smc: net device hsr0 erased user defined pnetid SYZ2 [ 359.706584][T23311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5349'. [ 359.709160][ T5965] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.714179][ T5965] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 359.717525][ T5965] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 359.722371][ T5965] usb 13-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 359.726011][ T5965] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.735731][T23289] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 359.739401][ T5965] hub 13-1:1.0: bad descriptor, ignoring hub [ 359.741352][ T5965] hub 13-1:1.0: probe with driver hub failed with error -5 [ 359.743958][ T5965] cdc_wdm 13-1:1.0: skipping garbage [ 359.745670][ T5965] cdc_wdm 13-1:1.0: skipping garbage [ 359.748118][ T5965] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 359.750320][ T5965] cdc_wdm 13-1:1.0: Unknown control protocol [ 359.766815][T23316] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 359.926193][T23322] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.5352'. [ 359.931215][T23322] netlink: 147616 bytes leftover after parsing attributes in process `syz.6.5352'. [ 359.963958][T23327] loop9: detected capacity change from 0 to 7 [ 359.970489][T23327] Dev loop9: unable to read RDB block 7 [ 359.972383][T23327] loop9: AHDI p1 p2 [ 359.973732][T23327] loop9: partition table partially beyond EOD, truncated [ 359.976303][T23327] loop9: p1 start 1853095936 is beyond EOD, truncated [ 360.004500][ T40] audit: type=1400 audit(604.191:71653): avc: denied { connect } for pid=23328 comm="syz.6.5354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 360.082249][ T5965] usb 13-1: USB disconnect, device number 12 [ 360.270659][T23346] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 360.273363][T23346] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 360.328903][ T6189] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 360.370818][ T40] audit: type=1400 audit(604.537:71654): avc: denied { write } for pid=23347 comm="syz.6.5360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 360.445607][ T5965] usb 13-1: new full-speed USB device number 13 using dummy_hcd [ 360.488184][ T6189] usb 9-1: Using ep0 maxpacket: 8 [ 360.491270][ T6189] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 360.494396][ T6189] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 360.497407][ T6189] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 360.500907][ T6189] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.505030][ T6189] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 360.508002][ T6189] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.617852][ T5965] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.621325][ T5965] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 360.624245][ T5965] usb 13-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 360.628947][ T5965] usb 13-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 360.631963][ T5965] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.636329][T23289] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 360.640821][ T5965] hub 13-1:1.0: bad descriptor, ignoring hub [ 360.642775][ T5965] hub 13-1:1.0: probe with driver hub failed with error -5 [ 360.645275][ T5965] cdc_wdm 13-1:1.0: skipping garbage [ 360.646988][ T5965] cdc_wdm 13-1:1.0: skipping garbage [ 360.649346][ T5965] cdc_wdm 13-1:1.0: probe with driver cdc_wdm failed with error -22 [ 360.969398][ T5965] usb 13-1: USB disconnect, device number 13 [ 361.434245][ T64] Bluetooth: hci0: sending frame failed (-49) [ 361.437824][ T5291] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 361.551868][ T40] audit: type=1400 audit(605.640:71655): avc: denied { read } for pid=23385 comm="syz.8.5370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 361.586636][ T40] audit: type=1400 audit(605.669:71656): avc: denied { watch } for pid=23388 comm="syz.6.5371" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 361.594435][ T40] audit: type=1400 audit(605.669:71657): avc: denied { watch_sb watch_reads } for pid=23388 comm="syz.6.5371" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 361.644583][T23396] netlink: 'syz.1.5373': attribute type 9 has an invalid length. [ 361.647011][ T40] audit: type=1400 audit(605.725:71658): avc: denied { write } for pid=23395 comm="syz.8.5374" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 361.649648][ T40] audit: type=1400 audit(605.725:71659): avc: denied { ioctl } for pid=23395 comm="syz.8.5374" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 361.661445][T23396] netlink: 'syz.1.5373': attribute type 16 has an invalid length. [ 361.666062][T23400] netlink: 'syz.1.5373': attribute type 9 has an invalid length. [ 361.666115][T23401] netlink: 'syz.1.5373': attribute type 16 has an invalid length. [ 361.679714][T23403] dlm: no local IP address has been set [ 361.682511][T23403] dlm: cannot start dlm midcomms -107 [ 361.858461][T23424] vlan2: entered promiscuous mode [ 361.860135][T23424] bridge0: entered promiscuous mode [ 361.941650][T23430] IPVS: ip_vs_add_dest(): server weight less than zero [ 361.941774][ T55] IPVS: starting estimator thread 0... [ 361.976274][T23433] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 362.049575][T23431] IPVS: using max 50 ests per chain, 120000 per kthread [ 362.728120][T23448] netlink: 'syz.8.5391': attribute type 1 has an invalid length. [ 362.758682][T23448] 8021q: adding VLAN 0 to HW filter on device bond4 [ 362.761850][T23448] bond3: (slave bond4): making interface the new active one [ 362.764428][T23448] bond3: (slave bond4): Enslaving as an active interface with an up link [ 362.779017][T23448] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 362.788409][T23448] 8021q: adding VLAN 0 to HW filter on device bond3 [ 362.820131][T23448] IPVS: persistence engine module ip_vs_pe_s not found [ 362.907912][T23458] ip6t_srh: unknown srh invflags 51E8 [ 362.956712][T23466] syzkaller0: entered promiscuous mode [ 362.960532][T23466] syzkaller0: entered allmulticast mode [ 363.041224][T23479] openvswitch: netlink: Flow key attr not present in new flow. [ 363.181163][T23493] 8021q: adding VLAN 0 to HW filter on device bond6 [ 363.278911][T23503] SELinux: security_context_str_to_sid (.) failed with errno=-22 [ 363.296624][ T6189] usb 9-1: usb_control_msg returned -71 [ 363.298436][ T6189] usbtmc 9-1:16.0: can't read capabilities [ 363.302675][ T6189] usb 9-1: USB disconnect, device number 13 [ 363.313850][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 363.313860][ T40] audit: type=1400 audit(607.286:71661): avc: denied { mounton } for pid=23504 comm="syz.4.5409" path=2F3237392F66696C6530202864656C6574656429 dev="proc" ino=4026537255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 363.317390][T23505] 9pnet_virtio: no channels available for device syz [ 363.338367][T23508] netlink: 'syz.1.5411': attribute type 21 has an invalid length. [ 363.379072][T23518] netlink: 'syz.6.5413': attribute type 1 has an invalid length. [ 363.525706][ T53] usb 13-1: new full-speed USB device number 14 using dummy_hcd [ 363.684037][T23532] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 363.698462][ T53] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.700147][T23538] bridge0: entered promiscuous mode [ 363.701766][ T53] usb 13-1: config 0 has no interfaces? [ 363.703781][T23538] macsec0: entered promiscuous mode [ 363.707022][ T53] usb 13-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 363.710757][ T53] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.713295][ T53] usb 13-1: Product: syz [ 363.714651][ T53] usb 13-1: Manufacturer: syz [ 363.716269][ T53] usb 13-1: SerialNumber: syz [ 363.721722][ T53] usb 13-1: config 0 descriptor?? [ 363.964153][ T6189] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 364.127934][ T6189] usb 9-1: Using ep0 maxpacket: 8 [ 364.132698][ T6189] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 364.135848][ T6189] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.138512][ T6189] usb 9-1: Product: syz [ 364.139918][ T6189] usb 9-1: Manufacturer: syz [ 364.141482][ T6189] usb 9-1: SerialNumber: syz [ 364.144360][ T6189] usb 9-1: config 0 descriptor?? [ 364.285035][ T76] unregister_netdevice: waiting for sit0 to become free. Usage count = 2 [ 364.312364][ T40] audit: type=1400 audit(608.221:71662): avc: denied { read } for pid=5322 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 364.321352][ T40] audit: type=1400 audit(608.221:71663): avc: denied { search } for pid=5322 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.328036][ T40] audit: type=1400 audit(608.221:71664): avc: denied { append } for pid=5322 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 364.334874][ T40] audit: type=1400 audit(608.221:71665): avc: denied { open } for pid=5322 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 364.341996][ T40] audit: type=1400 audit(608.221:71666): avc: denied { getattr } for pid=5322 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 364.366069][ T6189] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 364.802021][T23529] futex_wake_op: syz.4.5415 tries to shift op by -1; fix this program [ 364.814186][ T6189] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 364.821813][ T6189] usb 9-1: USB disconnect, device number 14 [ 365.398829][ T6013] usb 13-1: USB disconnect, device number 14 VM DIAGNOSIS: 08:25:14 Registers: info registers vcpu 0 CPU#0 RAX=00000000003d7767 RBX=0000000000000000 RCX=ffffffff8b60c2a9 RDX=0000000000000000 RSI=ffffffff8da2c11f RDI=ffffffff8bf073c0 RBP=fffffbfff1c12f40 RSP=ffffffff8e007df8 R8 =0000000000000001 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e097a00 R14=ffffffff908214d0 R15=0000000000000000 RIP=ffffffff8b60ad5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2d404d1f98 CR3=000000000e182000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3f615050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3f61505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3f615057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3f61506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3f6150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3f6151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3f7ba4a8 00007f2d3f7ba4a0 00007f2d3f7ba498 00007f2d3f7ba470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d4031d100 00007f2d3f7ba460 00007f2d3f7b0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3f7ba4b8 00007f2d3f7ba4b0 00007f2d3f7ba4a8 00007f2d3f7ba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000078 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000003b54ab RBX=0000000000000001 RCX=ffffffff8b60c2a9 RDX=0000000000000000 RSI=ffffffff8da2c11f RDI=ffffffff8bf073c0 RBP=ffffed1003bd4490 RSP=ffffc90000177de8 R8 =0000000000000001 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000001 R12=0000000000000001 R13=ffff88801dea2480 R14=ffffffff908214d0 R15=0000000000000000 RIP=ffffffff8b60ad5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6b05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2d3f7bb580 CR3=00000000139cc000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe33b6ee90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3f615050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3f61505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3f615057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3f61506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3f6150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3f6151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000078 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000078 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000284d5 RBX=ffffffff93bb3fc0 RCX=00000000000284d6 RDX=0000000000000bb3 RSI=00000000000284d5 RDI=ffffffff95bd8c38 RBP=0000000000000001 RSP=ffffc90005e576e8 R8 =00000000000284d6 R9 =ffffffff95c683cc R10=0000000000000000 R11=0000000000000001 R12=ffffffff96f10ac0 R13=0000000000001af9 R14=ffffffff97287a88 R15=dead000000000122 RIP=ffffffff8198650f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcd9cfd4f98 CR3=000000001322c000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1414ac0003000880 02000c0074697300 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd9ee15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd9ee1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd9ee15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd9ee1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd9ee150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd9ee151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 81b1974df9d03548 06658eb06e265134 05d6d0ced61e3b2a cc3bb57e7216c795 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5986ce9d29df772f 7401b8455ef0b904 390db44aef93f8cd 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 da8e2ee3b937a6f3 5c7e754ea10746e0 4e1b8c07a552bad6 3cbce196a2ce7766 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c5c404299fca0038 ffa8d44721dbf914 a5f135b2551e03cc 3dfdaa7931dd8e72 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b8fdc519dcb0e095 a86f171294843a36 1af38cf6fc0cc209 38c932fa879555a7 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d5b2c5ab5300a9f7 87a6964eafea425c eaa4b8257653a9e7 574280f37e59bde7 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 89edb4e8cbf7f89f 1841c41a1c077559 2b2878b2ddda8e2e e3b937a6f35c7e75 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000ddb64dbab0 RBX=ffff88806a723a00 RCX=00000000000006e0 RDX=00000000000000dd RSI=ffff88806a723a00 RDI=0000000000009c84 RBP=0000000000009c84 RSP=ffffc900006f8e38 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000001 R12=0000000000000001 R13=0000000000000001 R14=0000000000000019 R15=00000051fe5f2800 RIP=ffffffff81691dd5 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6d05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055955b499000 CR3=000000003b257000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3f615050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3f61505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3f615057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3f61506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3f6150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3f6151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3f7ba4a8 00007f2d3f7ba4a0 00007f2d3f7ba498 00007f2d3f7ba470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d4031d100 00007f2d3f7ba460 00007f2d3f7b0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3f7ba4b8 00007f2d3f7ba4b0 00007f2d3f7ba4a8 00007f2d3f7ba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000078 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000